Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/3OlFo1BIMO58jOKinsgaHCIGcPI.asa
File:                     3OlFo1BIMO58jOKinsgaHCIGcPI.asa (raw, json)
Hash identifier:          It3e1tK83I/+WtTNXWRr1Q1FRwlRAB4eApvNExQnd0Y=
Subject key identifier:   DC:E9:45:A3:50:48:30:EE:7C:8C:E2:A2:9E:C8:1A:1C:22:06:70:F2
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       019FC6B54204CA1797BB42000660715071C8
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/3OlFo1BIMO58jOKinsgaHCIGcPI.asa
Signing time:             Mon 03 Aug 2026 08:19:55 +0000
ASPA not before:          Mon 03 Aug 2026 08:19:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49685
Providers:                AS: 8455
                          AS: 20562
                          AS: 24785
                          AS: 200020
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c6:b5:42:04:ca:17:97:bb:42:00:06:60:71:50:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Aug  3 08:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dce945a3504830ee7c8ce2a29ec81a1c220670f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:d6:39:e2:e4:91:62:e5:86:3f:b3:20:28:
                    75:fe:30:64:18:35:c4:8b:48:b8:72:cb:35:d8:cd:
                    57:e2:43:88:8d:47:7d:c0:a5:1d:6c:f8:1c:36:3e:
                    43:e6:a2:e3:fc:9d:c1:39:e4:8d:ab:1a:f2:00:f1:
                    99:98:1d:30:c1:67:92:39:e4:f3:e6:82:69:ef:ad:
                    33:a4:9f:47:a2:c7:e5:3c:65:8c:3b:cf:07:f9:02:
                    76:4f:dd:ba:bf:57:e7:c2:6e:9f:95:6b:4e:6e:2f:
                    eb:f9:7c:46:40:b8:4f:36:80:74:40:f0:ad:68:fa:
                    2d:d5:79:e8:4f:45:7f:22:23:fd:0b:ec:28:60:45:
                    d1:00:8a:71:a2:51:17:b8:81:03:a2:23:95:a1:6c:
                    95:e4:09:2e:e1:24:47:30:4a:75:a1:77:a1:4b:b6:
                    dc:12:20:fe:9a:8a:d7:b9:ae:e5:a6:ed:60:fa:4c:
                    cc:17:aa:b5:4d:d2:24:c9:b6:d8:9f:18:9d:ca:22:
                    e0:c8:dc:68:d2:18:4a:76:6d:77:dc:fa:40:8e:5a:
                    08:73:ab:2f:76:4d:ab:13:3b:77:39:e7:82:b5:30:
                    13:04:21:e6:4f:a0:97:e0:00:fd:6e:ef:b3:48:d0:
                    68:19:f0:95:10:1a:06:16:ee:f5:b1:29:e9:d7:07:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E9:45:A3:50:48:30:EE:7C:8C:E2:A2:9E:C8:1A:1C:22:06:70:F2
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/3OlFo1BIMO58jOKinsgaHCIGcPI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49685

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:5a:bf:1e:fe:b1:ce:3c:ce:3a:7b:87:57:27:38:35:49:
         70:8c:4d:23:fe:47:92:f6:c3:d4:1c:06:fd:a8:a4:d3:7b:b3:
         54:c1:56:75:ab:7f:89:a3:69:2d:c1:d7:82:53:5e:66:26:68:
         2e:bf:bc:48:e6:9b:b6:9f:19:79:32:c4:4c:63:88:6e:24:d9:
         8c:e9:b1:5a:0a:d3:9e:fd:0a:00:bf:5c:c0:62:80:6d:2b:ed:
         4e:ad:2e:82:71:bd:49:f8:4b:46:76:50:63:49:55:03:17:f4:
         fa:2b:f3:c4:24:cb:69:4a:cc:b2:40:46:01:88:95:f6:ad:2f:
         53:2d:6d:48:84:2f:97:14:10:a4:7f:30:f1:af:97:d4:52:05:
         d3:3c:7c:d9:5f:e3:cb:fe:b3:e9:50:79:f0:96:a0:9b:26:9b:
         bb:f7:a7:77:27:6f:f6:fa:b9:0c:e8:eb:e5:96:21:60:4a:ad:
         d6:7d:33:46:5c:ee:76:42:0c:13:f8:0d:77:da:ab:4a:68:28:
         0e:97:6b:2b:4f:7c:ae:7c:8e:87:57:f2:7b:1a:f7:6a:46:f3:
         a3:d1:ec:9e:ad:04:6c:ce:d5:63:04:59:93:12:9e:5f:f7:0b:
         16:01:2c:fe:16:d1:35:bc:e1:91:b1:9c:f4:d9:eb:9c:84:17:
         ad:e9:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:46 2026 by rpki-client