Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/50j8_HuHODQIe2eT-6aD-p6l-h4.asa
File:                     50j8_HuHODQIe2eT-6aD-p6l-h4.asa (raw, json)
Hash identifier:          I27xhWeKtNBWndpThHmZhmkmpsOGvksM/Q5MGYA68f4=
Subject key identifier:   E7:48:FC:FC:7B:87:38:34:08:7B:67:93:FB:A6:83:FA:9E:A5:FA:1E
Certificate issuer:       /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial:       019FE7EAC76443C555005211F7441CFEA8A2
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/50j8_HuHODQIe2eT-6aD-p6l-h4.asa
Signing time:             Sun 09 Aug 2026 19:05:51 +0000
ASPA not before:          Sun 09 Aug 2026 19:05:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48885
Providers:                AS: 174
                          AS: 1299
                          AS: 3303
                          AS: 31500
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e7:ea:c7:64:43:c5:55:00:52:11:f7:44:1c:fe:a8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
        Validity
            Not Before: Aug  9 19:05:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e748fcfc7b873834087b6793fba683fa9ea5fa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:cd:ac:a3:9e:3c:5e:0c:16:d5:f7:24:73:
                    3d:5a:b1:28:3f:3a:e6:22:58:30:c8:0b:91:28:41:
                    74:74:e2:1c:2d:09:13:ee:ca:97:e5:37:e0:c2:97:
                    63:67:42:5a:4b:9c:9b:2e:9d:a2:27:4d:d8:a7:9f:
                    61:8b:c1:08:dc:3e:5a:52:67:13:6b:ce:8e:1d:cb:
                    4d:2e:92:8d:37:50:f2:61:13:8c:3b:b0:0b:6a:b1:
                    12:06:50:45:57:dc:00:1b:c0:20:7a:cb:59:b1:af:
                    d9:71:b5:93:67:14:e6:af:53:65:09:9f:59:ee:73:
                    5f:7c:49:3e:68:3f:79:7a:f1:ff:06:2e:87:64:5f:
                    f4:d2:1a:e4:38:3a:44:8c:07:6f:32:b5:01:be:eb:
                    be:6d:42:75:2c:b7:c7:de:6f:00:0b:1c:9b:98:df:
                    4d:9b:66:63:84:47:b2:3e:35:85:0f:74:41:58:33:
                    75:0b:3b:50:a7:f8:7a:3c:13:25:7c:e9:5d:18:f0:
                    bd:5c:fb:8e:45:9e:20:94:8d:e6:54:6e:15:4d:89:
                    08:f4:5b:0d:9b:cd:3e:fb:1b:3a:48:94:bd:26:43:
                    5d:10:a6:9e:9e:ce:fa:24:bc:43:71:33:7e:34:ef:
                    42:f8:07:71:ee:d5:c4:c5:8b:59:e0:b2:49:d7:3d:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:FC:FC:7B:87:38:34:08:7B:67:93:FB:A6:83:FA:9E:A5:FA:1E
            X509v3 Authority Key Identifier:
                keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/50j8_HuHODQIe2eT-6aD-p6l-h4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48885

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:61:a8:9a:80:43:8a:c0:c9:73:c5:5d:85:73:6f:46:ce:
         1d:94:82:b3:87:f6:28:4f:2a:36:75:d7:26:08:d0:af:a7:d8:
         11:91:c1:ee:8a:00:6e:86:ae:e8:fd:a2:b0:c8:43:38:ea:4e:
         a9:15:00:50:74:99:dd:30:16:60:1c:fe:e7:24:c1:70:b5:9a:
         bf:c0:f4:1f:2e:5f:18:7a:23:35:d8:3d:be:22:bc:af:0e:cd:
         69:64:45:f9:93:51:0c:66:a5:83:60:80:5a:b6:bb:1c:96:32:
         75:9a:d7:e8:1f:d4:f9:b8:27:7f:af:84:9b:00:c5:5d:1f:50:
         be:df:cd:e0:07:eb:43:e3:ee:32:b9:db:a8:e8:eb:c6:b1:e5:
         d9:70:44:4c:a5:3c:ce:70:70:bd:1d:93:de:8f:4d:b8:87:7b:
         e5:21:ff:80:1d:7d:61:41:68:bf:23:64:58:e2:2b:9a:21:8d:
         ba:46:97:bd:58:60:b5:2a:2a:c8:01:cf:09:28:9a:64:7d:a4:
         83:64:c7:b0:a0:0e:d1:b5:d7:a3:f0:f0:fd:01:7f:00:a8:85:
         82:b7:a4:ce:73:49:76:c0:4c:2d:15:0e:df:34:ab:ac:d2:b3:
         1e:09:48:b0:1b:de:98:5c:58:11:73:9c:07:ea:d0:6c:64:e4:
         a3:6b:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:13 2026 by rpki-client