Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/wu3B05DBg-PpHzIgWo7ASDnDmNM.asa
File:                     wu3B05DBg-PpHzIgWo7ASDnDmNM.asa (raw, json)
Hash identifier:          mNdDPir8vVQh8Menr2wxZ/getXVxaWP86pt5ysaIaGk=
Subject key identifier:   C2:ED:C1:D3:90:C1:83:E3:E9:1F:32:20:5A:8E:C0:48:39:C3:98:D3
Certificate issuer:       /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial:       01A05D880DB4EEFDC6DAC65D8C99BBFD3876
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/wu3B05DBg-PpHzIgWo7ASDnDmNM.asa
Signing time:             Tue 01 Sep 2026 15:13:12 +0000
ASPA not before:          Tue 01 Sep 2026 15:13:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49418
Providers:                AS: 30823
                          AS: 31500
                          AS: 35598
                          AS: 49612
                          AS: 59692
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5d:88:0d:b4:ee:fd:c6:da:c6:5d:8c:99:bb:fd:38:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
        Validity
            Not Before: Sep  1 15:13:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2edc1d390c183e3e91f32205a8ec04839c398d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:e6:b9:77:4c:08:e2:01:13:15:cb:a9:6a:
                    e4:bc:20:0b:ea:06:5b:d1:0d:3c:01:99:23:85:62:
                    c3:8d:87:1f:08:27:10:55:3a:3d:1a:e4:b6:a4:d4:
                    b2:23:92:b2:5d:ab:74:3d:54:18:ad:ba:68:b5:20:
                    30:54:e9:59:18:75:f9:ff:f0:4e:72:fe:6f:61:70:
                    da:f0:0d:70:9d:a7:64:0e:c5:12:a0:13:59:29:26:
                    a9:e8:f1:c9:a4:82:1b:0e:3e:c4:c5:55:a1:e1:81:
                    47:cf:b7:a9:26:94:6c:0b:11:3a:38:87:96:cf:3b:
                    98:5e:c1:ee:ee:ea:90:b7:40:71:98:b9:9b:6e:3a:
                    6b:a9:7a:09:66:71:bc:8e:d0:38:e3:80:bf:33:83:
                    5f:a3:bb:a2:a2:77:18:bf:a7:80:a6:e0:f9:09:c5:
                    9e:cc:66:f8:7c:63:24:34:cc:ee:cc:4f:62:56:19:
                    01:c0:1a:e9:95:34:7b:9e:c6:f9:86:3b:54:48:33:
                    7b:00:e9:e0:d5:63:ca:c2:85:b2:a5:9e:2a:06:28:
                    be:e5:28:df:cf:26:0c:5f:5a:bd:7d:37:4e:e4:12:
                    71:92:08:e0:0c:08:a3:51:a3:15:75:83:18:8c:0b:
                    a3:44:0f:a8:bb:ad:d7:46:86:8a:92:d1:c1:14:3d:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:C1:D3:90:C1:83:E3:E9:1F:32:20:5A:8E:C0:48:39:C3:98:D3
            X509v3 Authority Key Identifier:
                keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/wu3B05DBg-PpHzIgWo7ASDnDmNM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49418

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:d1:ba:8f:0d:3b:80:10:c4:74:8f:5c:d8:7a:47:da:58:
         41:f0:43:c7:fa:16:9f:c6:62:73:5d:7d:b7:48:a2:b2:d3:74:
         de:2f:44:36:a0:c5:97:5d:1b:f2:2b:63:a6:b6:f0:ee:4c:08:
         ef:58:24:f9:76:00:4c:85:36:2e:01:28:64:ed:85:c4:9e:c3:
         47:5b:ea:01:51:b0:f4:dd:69:bf:a8:1d:86:35:18:a7:31:f2:
         7a:b1:b4:2a:b7:7f:c3:8f:2a:36:d8:4a:a5:fc:99:49:d2:d6:
         e7:d1:ad:0d:d1:53:2d:53:c5:9e:58:18:45:7e:78:37:74:c5:
         9a:cc:e2:0e:98:fa:35:79:4a:3c:37:cf:68:5e:de:ad:48:30:
         ab:5a:78:81:d1:07:2e:99:c7:d6:59:b1:bf:00:0b:c7:3f:ea:
         98:96:05:49:6f:ca:30:c1:a3:44:02:69:dd:d0:19:db:5d:ce:
         87:94:f6:7a:74:96:12:e9:a2:25:dc:bf:f9:3f:bc:56:c5:89:
         28:a8:ee:ca:44:b7:ad:fd:e3:1e:69:46:2f:02:57:5a:93:71:
         03:a1:7f:c4:53:d5:b2:5d:c9:33:8a:88:85:b6:ec:0d:a1:90:
         f5:06:d0:c1:de:bc:c8:a4:58:bf:fc:4e:a6:e9:14:5a:fd:f7:
         65:a7:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:42 2026 by rpki-client