Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/3SqaGJh1CAZSPdm7paJ5Lxw0R-E.asa
File:                     3SqaGJh1CAZSPdm7paJ5Lxw0R-E.asa (raw, json)
Hash identifier:          Qx2uSh9Bbe8qrzpUWt9UFlCgyrEzeWhs9geX1SlGDJI=
Subject key identifier:   DD:2A:9A:18:98:75:08:06:52:3D:D9:BB:A5:A2:79:2F:1C:34:47:E1
Certificate issuer:       /CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Certificate serial:       019DA60CA82D99203E5E9CE11DAF70919185
Authority key identifier: AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/3SqaGJh1CAZSPdm7paJ5Lxw0R-E.asa
Signing time:             Sun 19 Apr 2026 14:02:20 +0000
ASPA not before:          Sun 19 Apr 2026 14:02:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31598
Providers:                AS: 21437
                          AS: 21500
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a6:0c:a8:2d:99:20:3e:5e:9c:e1:1d:af:70:91:91:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
        Validity
            Not Before: Apr 19 14:02:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dd2a9a1898750806523dd9bba5a2792f1c3447e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ca:4b:3a:27:e9:60:0e:88:f1:ec:e4:e4:60:
                    07:da:83:11:2a:b7:14:32:85:3c:24:fa:63:0c:3f:
                    d1:c8:c3:83:f1:39:1e:c1:29:9d:93:fa:0c:fe:bc:
                    ab:d3:40:c0:2e:6a:79:77:50:41:5b:8e:ee:c8:34:
                    a7:88:47:93:9e:d7:6a:2b:cd:6e:e5:bd:14:7e:09:
                    6e:f0:64:b1:33:b2:0e:da:44:5c:25:cb:08:ec:e0:
                    fa:8f:37:6f:03:d0:9d:c8:f8:4e:f9:ca:17:0d:a9:
                    3b:81:08:1d:3f:fc:c6:50:ef:dc:bf:55:00:6d:2d:
                    04:e5:d7:9c:50:79:18:ff:cb:aa:86:f9:ac:d5:f2:
                    28:a8:3f:ac:8d:3c:01:92:70:db:16:26:c9:4f:dc:
                    33:d5:f7:f7:90:b2:29:5b:39:d2:b8:80:71:63:e8:
                    fc:8f:ec:17:32:ac:61:54:8a:a3:f1:c4:e7:49:5b:
                    48:b9:c2:f9:d1:14:b5:83:32:b1:18:64:fe:ea:b3:
                    75:6d:67:6b:cd:bd:9f:19:14:a6:54:41:03:79:c2:
                    23:98:df:0e:c6:d9:fb:6f:fd:ff:0f:46:c6:e5:3b:
                    2d:a2:4d:8f:c0:61:65:33:82:7a:3c:69:d8:99:f9:
                    66:a0:8c:e5:0b:19:0f:82:ce:8d:09:52:37:cb:06:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:9A:18:98:75:08:06:52:3D:D9:BB:A5:A2:79:2F:1C:34:47:E1
            X509v3 Authority Key Identifier:
                keyid:AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/3SqaGJh1CAZSPdm7paJ5Lxw0R-E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31598

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:06:7f:8e:0e:5c:91:d9:85:20:14:a1:6d:5f:95:91:16:
         69:13:77:1f:6c:e2:ce:fd:93:41:30:1f:2c:fc:96:b4:0d:1a:
         cd:b3:5d:67:f1:26:40:fd:0c:ba:59:90:0a:6b:17:29:54:db:
         26:a9:30:98:12:1f:e6:a4:4f:9e:55:f5:e3:23:9f:b9:4d:4d:
         d6:bb:b3:a3:0b:c6:c1:81:44:da:e2:e6:e8:c4:13:b4:87:db:
         0f:89:31:92:8e:d7:20:7c:3e:29:f0:b1:11:30:f9:7b:06:34:
         83:1f:d9:64:b1:c2:5e:e7:fc:0d:b1:7a:b2:38:44:56:82:ce:
         fc:05:4e:17:40:05:ed:c5:64:06:62:ea:f8:ef:3c:82:d3:d4:
         fe:48:28:d7:ca:74:b4:19:80:00:d3:7e:e6:e8:24:30:2b:5a:
         e6:c3:30:14:ab:b0:b2:e0:fa:ab:45:7b:86:1b:bc:2f:ef:01:
         95:fb:00:97:e8:bd:79:86:bf:26:b0:07:9a:c0:92:70:a4:16:
         b5:96:3e:43:57:ed:3a:40:82:ca:e1:d8:41:20:98:7a:8d:51:
         55:dc:a6:6a:96:99:f3:51:9a:b7:74:10:25:17:a0:c6:52:66:
         35:be:79:76:9f:06:33:11:bd:9e:13:43:12:f7:87:35:65:53:
         3f:d2:db:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:41 2026 by rpki-client