Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/CaHSmdkysiaumo43vhf9KnbJsHs.asa
File:                     CaHSmdkysiaumo43vhf9KnbJsHs.asa (raw, json)
Hash identifier:          08F9c2p2ZWXv2pzjeA1I++KB7kXuVe5VH24pFsI3lJY=
Subject key identifier:   09:A1:D2:99:D9:32:B2:26:AE:9A:8E:37:BE:17:FD:2A:76:C9:B0:7B
Certificate issuer:       /CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
Certificate serial:       019DD40807543C0AD5E15D3957B28DB48386
Authority key identifier: 8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/CaHSmdkysiaumo43vhf9KnbJsHs.asa
Signing time:             Tue 28 Apr 2026 12:19:49 +0000
ASPA not before:          Tue 28 Apr 2026 12:19:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48390
Providers:                AS: 2613
                          AS: 6893
                          AS: 34019
                          AS: 44097
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d4:08:07:54:3c:0a:d5:e1:5d:39:57:b2:8d:b4:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f105c4ffb5d54bc2275f20de300734e24eea4a6
        Validity
            Not Before: Apr 28 12:19:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=09a1d299d932b226ae9a8e37be17fd2a76c9b07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:bd:ba:87:49:d5:48:77:c5:cc:14:f2:c3:
                    f0:18:15:bc:89:83:0b:e1:d2:7b:1a:fa:0a:3f:65:
                    51:87:5d:db:e9:0c:51:dc:bd:88:7c:93:12:22:52:
                    cb:f8:e4:9c:82:11:2e:57:47:f7:e4:7d:b9:2b:6f:
                    5c:7b:1b:c4:89:b0:d2:a1:cb:99:b6:3e:03:5f:71:
                    60:b4:0d:b4:3d:10:45:83:92:5f:28:e8:88:4d:cc:
                    2c:3c:8a:4f:59:cf:90:7a:52:46:4e:72:a6:db:05:
                    33:ab:ff:a2:64:67:8f:1f:6e:99:8a:fe:50:80:69:
                    e2:1a:e4:1f:47:e5:ef:26:93:89:31:a7:26:1d:fd:
                    6f:9f:d4:d1:a2:1c:74:f7:de:dc:e1:59:d8:17:90:
                    8b:8a:6e:f5:f4:f7:38:bf:9e:42:50:d6:3d:f5:8e:
                    ac:76:72:6a:11:ad:27:c3:6b:f2:ab:e3:a9:bb:be:
                    e5:7f:00:6c:b8:24:07:46:fb:ae:46:1d:54:29:f7:
                    0f:fa:83:3d:9a:5d:6f:f3:08:b9:64:72:73:71:75:
                    b3:5c:f8:77:11:b5:e7:ee:bf:86:81:e8:af:b2:b0:
                    b8:d5:42:36:ad:2f:43:4d:b7:a3:9d:83:71:51:48:
                    89:e5:9e:b7:4c:c0:c4:46:5d:00:15:43:57:5d:44:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A1:D2:99:D9:32:B2:26:AE:9A:8E:37:BE:17:FD:2A:76:C9:B0:7B
            X509v3 Authority Key Identifier:
                keyid:8F:10:5C:4F:FB:5D:54:BC:22:75:F2:0D:E3:00:73:4E:24:EE:A4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxBcT_tdVLwidfIN4wBzTiTupKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/CaHSmdkysiaumo43vhf9KnbJsHs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddc90-b07f-43ac-bb3e-0c1ac20fcf16/1/jxBcT_tdVLwidfIN4wBzTiTupKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48390

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:1d:2e:88:f1:f8:5f:e5:5d:60:cc:18:3c:44:6a:fc:81:
         0b:f2:b7:82:d6:3a:bb:1c:b7:3b:c2:b1:17:20:e9:0e:93:58:
         04:18:00:92:b5:a8:e8:6c:bd:c7:f2:51:52:d2:43:01:da:ea:
         50:88:38:c9:92:5e:12:94:15:50:bb:dd:c6:af:9d:e8:de:8d:
         44:3b:d3:90:d6:e0:3c:b9:c6:d4:c8:ba:45:3d:65:b8:7c:78:
         34:82:c1:96:ea:90:59:58:3f:bc:11:9c:2c:ad:2d:1c:e5:ce:
         1f:84:90:28:4b:13:6e:cb:95:96:f3:4c:06:d2:81:16:8b:b1:
         1d:a5:f5:ee:37:c7:87:31:34:c6:77:87:08:7f:57:7e:bf:cb:
         d7:47:09:33:ca:30:36:14:15:c3:44:2b:57:7a:79:28:d8:8f:
         d5:1a:0d:d0:a2:e3:8f:29:52:dc:7a:9b:da:20:5d:c0:57:4a:
         cd:f8:20:42:3d:5b:32:95:21:17:81:ff:4c:5f:5a:eb:5e:22:
         d4:9c:01:b5:02:e8:e6:40:1c:fb:b8:29:46:53:3c:9b:65:e3:
         5f:61:45:0a:16:a9:1f:56:19:86:93:f1:89:7a:f3:09:54:c0:
         3d:a6:a4:04:e7:37:c2:de:ee:a3:e4:c3:c9:d2:b8:2f:b6:9c:
         05:9b:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:31 2026 by rpki-client