Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/rRYXF778h2zxEKTxbR3XCmsKwRY.asa
File:                     rRYXF778h2zxEKTxbR3XCmsKwRY.asa (raw, json)
Hash identifier:          QUmdN+d6JbOesGKhvE1uI335IDnmyzy1AQt3iQvb1qs=
Subject key identifier:   AD:16:17:17:BE:FC:87:6C:F1:10:A4:F1:6D:1D:D7:0A:6B:0A:C1:16
Certificate issuer:       /CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
Certificate serial:       019FAEDBE428B7DA096B5261CF914929666F
Authority key identifier: 49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/rRYXF778h2zxEKTxbR3XCmsKwRY.asa
Signing time:             Wed 29 Jul 2026 17:11:14 +0000
ASPA not before:          Wed 29 Jul 2026 17:11:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219178
Providers:                AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 14:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ae:db:e4:28:b7:da:09:6b:52:61:cf:91:49:29:66:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ba3aef43c0a3f08d2ab5b9311c0625cc2b118a
        Validity
            Not Before: Jul 29 17:11:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad161717befc876cf110a4f16d1dd70a6b0ac116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:a6:e2:4d:71:86:e5:c6:ba:b3:19:5b:b4:
                    bd:af:02:8e:f2:b8:34:d7:78:58:b0:4b:57:8f:9d:
                    94:b3:4a:4d:4f:f2:4e:be:d2:ca:de:c2:31:6c:c1:
                    77:ed:6c:6b:b4:b9:6d:e5:34:46:15:20:b2:83:bf:
                    0d:4b:17:75:2a:1d:e6:81:2e:4d:29:f8:86:93:bc:
                    77:1c:6f:b3:bd:52:44:26:bb:ea:89:d3:17:1c:f5:
                    3e:cc:05:ca:f8:f3:49:cd:9c:89:0e:93:f9:24:ef:
                    e2:b2:26:10:22:c2:e9:6c:96:5b:1c:0b:45:57:c4:
                    c1:80:ce:3e:fd:a2:6b:b2:80:f1:ca:d3:34:d3:9c:
                    b4:53:e4:ef:0d:d7:a7:0e:fb:02:dc:a2:7f:83:e3:
                    c7:88:76:f0:f6:e4:84:48:b4:35:ee:5d:dc:9f:c0:
                    7a:5e:6b:bd:ce:4e:a6:26:c2:e6:42:16:f8:dd:e0:
                    14:aa:ca:d5:9b:90:98:23:b2:ab:65:8e:44:0c:de:
                    48:30:70:b0:e7:7d:1b:5c:8d:59:62:d3:63:f6:ce:
                    3c:dd:6f:62:06:6a:11:c0:54:f0:95:af:a0:20:9b:
                    66:8f:4e:fa:3c:f0:90:b1:ab:a0:44:09:18:13:25:
                    ec:89:e8:b4:e7:37:0f:ba:45:ae:28:0b:45:87:fc:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:16:17:17:BE:FC:87:6C:F1:10:A4:F1:6D:1D:D7:0A:6B:0A:C1:16
            X509v3 Authority Key Identifier:
                keyid:49:BA:3A:EF:43:C0:A3:F0:8D:2A:B5:B9:31:1C:06:25:CC:2B:11:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbo670PAo_CNKrW5MRwGJcwrEYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/rRYXF778h2zxEKTxbR3XCmsKwRY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/31cddd-41a2-48eb-a838-df7a23a238ae/1/Sbo670PAo_CNKrW5MRwGJcwrEYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219178

    Signature Algorithm: sha256WithRSAEncryption
         56:05:e3:80:76:4a:73:a8:d4:64:c8:e9:98:71:6e:f5:36:36:
         be:31:06:4c:f3:5c:df:01:ef:e0:1f:d3:38:ba:80:bb:41:55:
         80:e8:9f:ab:b4:3b:86:fa:46:c1:86:fe:ca:fe:f1:d5:3e:bc:
         86:68:0b:b6:33:fd:d8:ea:88:7f:e1:d4:3e:83:e6:29:6a:86:
         17:93:73:72:d9:ff:d8:f9:4d:32:31:11:4d:3f:ca:ea:61:b6:
         23:40:e0:b3:37:b4:51:44:30:aa:5d:31:b5:f3:d3:40:39:a3:
         0a:52:1a:37:03:55:bd:c8:26:4b:95:04:a5:9a:28:df:e4:2f:
         8a:8b:06:19:55:9a:7e:a8:60:a6:f2:5e:24:f1:f3:60:71:74:
         2e:61:1c:00:e6:8e:ba:ad:51:5a:2d:b2:62:32:d9:6d:0c:f4:
         ab:44:7f:c2:ca:3c:7b:be:6e:a2:cd:a8:79:cc:12:06:8e:de:
         9b:b7:62:35:63:e5:1d:37:eb:b6:2e:8c:99:8d:cf:7e:16:0f:
         c7:4d:90:31:0a:28:f3:9c:07:6b:1a:87:f6:5e:47:07:8d:ca:
         57:c6:87:c9:7c:8f:82:4d:f4:d2:07:84:3f:78:c2:fa:20:c2:
         39:5a:90:a1:eb:58:f2:ef:6d:d0:1d:99:2a:85:7c:a0:1b:a2:
         f0:4b:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:44 2026 by rpki-client