Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/TDYx4RU_5msTXBzzqtleEDHuezI.asa
File:                     TDYx4RU_5msTXBzzqtleEDHuezI.asa (raw, json)
Hash identifier:          fgxQ1mMTeL9sK07O8eSPI1phJJQrNDTUGz0YKGk3ZQk=
Subject key identifier:   4C:36:31:E1:15:3F:E6:6B:13:5C:1C:F3:AA:D9:5E:10:31:EE:7B:32
Certificate issuer:       /CN=f4a0d21b7d3b95b2ba49c93a21489a79a3a9f4df
Certificate serial:       019F049D790A6242FBEEAC8EE49AFDBC7AF8
Authority key identifier: F4:A0:D2:1B:7D:3B:95:B2:BA:49:C9:3A:21:48:9A:79:A3:A9:F4:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/TDYx4RU_5msTXBzzqtleEDHuezI.asa
Signing time:             Fri 26 Jun 2026 15:47:36 +0000
ASPA not before:          Fri 26 Jun 2026 15:47:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50364
Providers:                AS: 3342
                          AS: 31027
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:04:9d:79:0a:62:42:fb:ee:ac:8e:e4:9a:fd:bc:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a0d21b7d3b95b2ba49c93a21489a79a3a9f4df
        Validity
            Not Before: Jun 26 15:47:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c3631e1153fe66b135c1cf3aad95e1031ee7b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:ac:cf:f2:58:0e:56:09:7b:b8:72:df:5c:
                    fa:80:ec:5c:2c:9b:25:b5:5d:d9:10:d8:0a:36:92:
                    ed:cd:f0:37:f7:9e:e6:9c:4a:28:c4:0f:53:98:d1:
                    37:4a:78:72:e3:d6:0a:f0:bc:3c:be:f1:dc:6c:57:
                    c9:45:d1:b5:9b:4f:1f:5d:7d:27:43:11:95:90:50:
                    2b:12:e2:f5:bb:00:37:0f:fe:94:2b:52:1d:49:e1:
                    fe:fa:a1:33:7f:1e:a8:a2:d0:93:a7:83:7f:7a:40:
                    8c:9d:f7:84:6a:03:4d:83:f3:db:5f:f3:a8:17:68:
                    fe:7b:ab:b9:d1:33:7b:60:68:85:cc:5f:d7:01:21:
                    c5:de:ce:13:a2:20:5b:29:53:bb:4c:c7:20:2e:89:
                    1a:b9:c0:4a:86:19:c4:c0:e8:67:68:c5:65:6e:6f:
                    60:81:49:50:8f:c9:ad:c6:0b:aa:96:cd:6f:7d:cd:
                    82:28:d1:87:d7:20:2d:c6:b1:81:23:e7:58:53:0a:
                    7f:79:22:7e:65:1e:14:e7:2a:ee:d9:c0:df:ea:e0:
                    a1:e1:83:89:be:f2:0b:de:81:f3:a7:27:bb:f7:78:
                    79:da:84:9e:0f:86:a6:e5:f9:b9:49:a6:cd:89:29:
                    5c:ca:ce:0a:52:13:cd:91:95:ae:25:68:c9:8a:09:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:31:E1:15:3F:E6:6B:13:5C:1C:F3:AA:D9:5E:10:31:EE:7B:32
            X509v3 Authority Key Identifier:
                keyid:F4:A0:D2:1B:7D:3B:95:B2:BA:49:C9:3A:21:48:9A:79:A3:A9:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/TDYx4RU_5msTXBzzqtleEDHuezI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50364

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:dc:4f:1e:8b:e3:17:41:08:98:71:16:2c:7b:dc:81:af:
         e2:eb:75:20:63:92:9e:29:d7:ba:6f:7b:7d:a0:a1:23:41:3e:
         0c:cf:d2:b8:99:e6:8a:8e:15:2e:fa:45:75:96:60:65:02:e9:
         f6:92:65:cc:2a:f6:97:37:33:f2:b4:c2:a2:1d:ef:97:06:33:
         78:3e:7b:b2:ec:fb:7a:23:64:4f:8d:66:61:1c:b5:30:89:5a:
         a8:7c:da:89:c5:14:8f:d4:26:48:54:ab:33:df:86:91:6e:de:
         dd:a3:1b:1a:aa:b3:ab:10:03:4a:93:00:56:12:49:ce:06:a8:
         f3:62:34:8d:00:21:e5:b5:07:f1:6e:02:77:08:c8:eb:ba:75:
         3f:69:5f:c0:46:23:94:55:fb:cd:6c:8f:06:c2:c1:4f:97:6e:
         fa:b7:07:12:3c:e3:0b:c4:ad:a2:77:89:a9:7c:09:6a:83:4f:
         8f:53:a1:22:7b:51:5f:e2:bf:03:8d:f9:59:88:cc:97:8d:d0:
         fd:1b:6f:aa:0a:8c:b0:d6:d6:04:43:6c:10:4c:d5:f5:45:80:
         33:3c:f9:22:e6:f9:a5:e8:4e:57:ae:02:51:c3:2b:69:13:9b:
         e6:b5:a9:9e:17:6f:a5:b4:98:c7:64:b9:12:54:12:0c:63:01:
         22:20:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:35 2026 by rpki-client