Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/dEnHFZk05aY4cgV0s2QNjTG_aiE.asa
File:                     dEnHFZk05aY4cgV0s2QNjTG_aiE.asa (raw, json)
Hash identifier:          85J9mRxBgzT4mAYbFVUMmPvP7vuAIQqlGKi5trfW7P8=
Subject key identifier:   74:49:C7:15:99:34:E5:A6:38:72:05:74:B3:64:0D:8D:31:BF:6A:21
Certificate issuer:       /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial:       019DDD5D8E54FA0A6A31218A79F34B680A44
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/dEnHFZk05aY4cgV0s2QNjTG_aiE.asa
Signing time:             Thu 30 Apr 2026 07:49:49 +0000
ASPA not before:          Thu 30 Apr 2026 07:49:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208816
Providers:                AS: 21488
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:5d:8e:54:fa:0a:6a:31:21:8a:79:f3:4b:68:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
        Validity
            Not Before: Apr 30 07:49:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7449c7159934e5a638720574b3640d8d31bf6a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:8e:b9:2d:c1:28:68:ff:e4:e8:ad:64:a9:
                    c9:59:ce:03:ac:d6:dd:ed:b4:6b:85:51:9e:94:c9:
                    39:b9:57:9f:cf:be:97:52:7d:8b:58:d6:6a:af:b6:
                    dc:11:3a:98:ee:6a:94:dc:4c:4f:1f:0e:03:54:7a:
                    38:d1:8f:a8:ae:9c:6b:66:c0:86:10:01:14:8d:bd:
                    8d:f1:bb:d5:43:be:b9:c5:5b:dc:41:f0:2f:07:9f:
                    ba:83:68:2d:96:99:8b:cb:ab:8d:d3:3c:cc:4b:f9:
                    84:8c:e0:e4:30:2e:f3:77:7e:ea:94:17:cc:ca:8d:
                    51:44:92:6b:e4:65:c3:ac:b2:ef:27:16:05:d7:64:
                    8e:3a:04:57:cd:10:21:7b:b5:8c:c7:b9:67:14:f5:
                    cc:9d:68:d0:ca:cd:cf:26:f7:b4:24:7b:02:a8:13:
                    ff:24:41:93:ac:f9:d5:b5:45:4d:a7:97:4d:ea:fe:
                    9a:5f:16:d2:a4:ae:84:07:ba:6e:8b:19:b2:c6:35:
                    2a:5f:33:d4:cf:37:39:f3:d6:f5:b1:0e:21:88:48:
                    4f:c2:af:6d:35:2d:9e:07:75:54:93:93:7b:6f:7b:
                    7d:35:50:16:fb:fb:27:67:cb:d5:36:f5:d0:f5:96:
                    92:85:2d:27:d8:93:22:16:56:e6:6f:57:e6:15:c1:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:49:C7:15:99:34:E5:A6:38:72:05:74:B3:64:0D:8D:31:BF:6A:21
            X509v3 Authority Key Identifier:
                keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/dEnHFZk05aY4cgV0s2QNjTG_aiE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208816

    Signature Algorithm: sha256WithRSAEncryption
         d2:0a:0d:c1:3c:27:ba:3b:be:5e:3e:7a:d4:a2:e9:84:3e:60:
         a1:cf:b2:db:be:b7:46:a8:66:5e:44:40:ce:0e:ac:f7:5c:f6:
         c9:ab:af:dc:58:84:f3:2d:8c:37:52:6e:a4:9c:24:17:f9:06:
         23:a3:96:d3:1c:9d:ab:fb:77:57:35:b3:54:c2:60:e7:3a:c3:
         d6:39:b7:12:ba:a4:78:2c:4e:1e:b3:fc:5a:d3:9a:24:73:e4:
         5e:0f:10:0e:00:a2:e8:69:8a:fa:97:44:74:39:48:ea:a3:a6:
         30:a6:d0:42:77:91:ab:91:45:f5:25:98:60:5b:e8:c9:d8:8c:
         17:23:dc:1d:a8:23:a9:2d:4a:83:5e:bf:1d:e7:ce:24:af:31:
         2d:0f:44:fc:68:d7:b9:f2:56:03:fc:d2:98:2a:80:5c:5d:b3:
         4b:d0:1b:f9:fd:d6:a3:f0:4a:5b:b4:51:19:e5:9c:1a:f3:57:
         28:41:bd:8f:10:df:1c:26:39:3c:d4:c9:2d:ee:42:e6:88:1c:
         8f:be:28:e8:43:fd:fc:e6:87:7e:e9:7c:22:2c:7c:7d:0f:df:
         55:2c:da:54:20:b5:84:ae:bf:0f:2a:75:84:96:11:0f:e0:70:
         49:cd:ff:62:1f:3c:49:05:eb:23:7b:be:40:8d:7d:8b:8d:ff:
         48:72:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:16 2026 by rpki-client