Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa
File:                     wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (raw, json)
Hash identifier:          x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=
Subject key identifier:   C0:3C:86:8B:D8:D6:99:93:01:F2:56:07:56:12:0C:5E:F3:C5:8F:84
Certificate issuer:       /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial:       019D301D44A415663A72609E549127A37B33
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa
Signing time:             Fri 27 Mar 2026 16:25:17 +0000
ASPA not before:          Fri 27 Mar 2026 16:25:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31257
Providers:                AS: 3216
                          AS: 9049
                          AS: 12389
                          AS: 20485
                          AS: 31133
                          AS: 43298
                          AS: 48858
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:30:1d:44:a4:15:66:3a:72:60:9e:54:91:27:a3:7b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
        Validity
            Not Before: Mar 27 16:25:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c03c868bd8d6999301f2560756120c5ef3c58f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:4c:9d:b9:7b:41:01:a8:da:b2:13:b2:e9:
                    9a:95:f4:38:04:36:ec:21:d4:d1:3e:cb:af:9b:49:
                    25:0e:5c:e0:cd:24:a5:e4:5b:a7:8f:ac:61:cf:f4:
                    c8:16:23:e5:1b:e4:b0:62:42:ac:ea:31:60:1e:0d:
                    74:6c:6e:f4:9b:6d:12:70:0d:ac:25:31:ae:58:5c:
                    55:61:17:84:08:6f:13:1f:85:27:1d:5e:6a:e7:e7:
                    80:38:41:d6:b6:54:0f:9f:bb:01:b6:8a:4a:a4:ae:
                    57:de:68:18:f6:60:44:66:72:8c:05:b2:1f:5f:9a:
                    64:4e:d9:35:c4:14:28:2f:20:5d:ad:7b:f4:17:e4:
                    97:26:3f:cc:85:f9:3e:e9:56:91:63:fe:28:97:8a:
                    cf:cd:cf:64:ac:9b:ad:8f:cd:41:6a:75:bc:b8:3d:
                    52:d0:3c:95:d0:68:56:a7:3d:5b:b8:31:cb:63:31:
                    14:81:dd:d8:d8:8d:3c:df:65:3f:49:54:57:a9:ac:
                    d6:f8:68:30:f5:76:47:69:b3:83:7a:68:f0:d0:00:
                    33:5d:25:04:33:fc:34:fb:7f:2f:e0:6c:bf:f1:4f:
                    1e:ee:b7:19:fd:9e:7b:42:20:75:a2:6a:77:71:0e:
                    fe:98:89:36:36:b7:e8:54:c1:8f:f1:d0:82:be:b4:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:86:8B:D8:D6:99:93:01:F2:56:07:56:12:0C:5E:F3:C5:8F:84
            X509v3 Authority Key Identifier:
                keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31257

    Signature Algorithm: sha256WithRSAEncryption
         22:1c:ab:1b:a6:70:93:1c:0a:9d:fe:5b:5f:10:df:12:0d:ec:
         0c:01:81:22:5a:b4:b6:82:ae:e2:17:4c:5a:71:09:45:6c:71:
         9c:2a:66:2b:9e:05:d5:c6:ca:e9:75:69:0c:a8:29:13:ad:06:
         34:9b:ae:51:7a:99:ed:b5:6e:17:81:d9:13:ae:f5:00:a7:e8:
         b1:7f:67:d3:ee:6a:6f:aa:15:20:03:28:65:57:f8:ed:a5:fe:
         08:8f:20:48:d7:a6:a7:2c:30:7f:3d:8a:64:aa:97:e6:f4:99:
         48:62:fb:8b:02:d1:94:d7:a5:ba:37:ab:c8:d0:91:f5:38:8a:
         2e:15:fd:ab:5c:55:01:5f:32:10:c5:89:90:f4:28:85:b7:69:
         62:8b:9e:86:5f:3f:66:b7:24:a8:80:cc:c0:cc:17:d7:7e:2b:
         76:7b:51:40:50:f3:26:b9:3e:a7:5b:98:28:16:f6:97:3f:f4:
         20:60:31:a5:f8:4f:41:ec:50:e0:c7:4b:69:f3:98:29:b9:ac:
         37:cc:fa:2b:d0:e1:af:eb:94:6c:ab:04:4e:0b:98:af:12:e4:
         9f:d0:8d:ce:2b:ab:d9:cb:bb:d0:98:df:92:e4:1a:6f:65:94:
         de:ab:35:87:17:19:ba:af:6f:13:db:c9:a5:76:73:c6:96:5f:
         1a:7a:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:52 2026 by rpki-client