Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/gDO3yGlii3vGStP0g8IXSinnODc.asa
File:                     gDO3yGlii3vGStP0g8IXSinnODc.asa (raw, json)
Hash identifier:          4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=
Subject key identifier:   80:33:B7:C8:69:62:8B:7B:C6:4A:D3:F4:83:C2:17:4A:29:E7:38:37
Certificate issuer:       /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial:       019D860186BDF0C91499CF92D660360C9E46
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/gDO3yGlii3vGStP0g8IXSinnODc.asa
Signing time:             Mon 13 Apr 2026 08:42:20 +0000
ASPA not before:          Mon 13 Apr 2026 08:42:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56488
Providers:                AS: 1299
                          AS: 3356
                          AS: 31034
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:86:01:86:bd:f0:c9:14:99:cf:92:d6:60:36:0c:9e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
        Validity
            Not Before: Apr 13 08:42:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8033b7c869628b7bc64ad3f483c2174a29e73837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:6b:e8:40:86:99:0c:c4:63:aa:10:38:7e:
                    1f:70:71:54:54:16:d0:a6:71:a8:b8:c9:d8:10:7a:
                    4c:87:5c:59:e1:07:e2:ff:81:bf:19:3a:66:4e:7b:
                    40:5e:b4:f6:f4:de:70:db:fb:59:0f:9c:e3:76:ae:
                    11:08:44:5e:db:91:55:3f:be:8a:89:b1:16:24:99:
                    f4:25:b0:1a:1c:ff:c4:ff:b1:23:50:32:b0:1e:e3:
                    1d:d0:7f:6b:37:16:bd:b6:24:e6:d4:3f:53:d4:9e:
                    0c:d6:a2:fa:f8:b0:4c:4e:33:50:54:71:7a:10:77:
                    9d:7e:65:ae:4b:af:54:b2:14:52:2b:68:da:21:0b:
                    23:76:90:e0:4c:fa:69:9c:9b:4a:0e:d2:90:cc:01:
                    af:19:48:3d:00:e0:b1:a2:01:c0:af:c5:dd:c4:37:
                    5b:13:c8:2c:16:8d:f1:2a:76:94:4a:5d:d1:d4:48:
                    5c:68:e6:21:21:e0:88:c0:e6:61:b5:f2:b7:f1:f8:
                    22:8b:c3:b0:06:d7:29:34:3f:25:ea:6b:07:25:1d:
                    25:e4:69:ca:b1:35:01:ce:50:37:0a:f1:aa:7c:fb:
                    2a:51:b5:aa:37:ee:1c:92:46:97:7c:3e:98:66:28:
                    a4:ed:e7:a4:52:96:84:42:7c:5f:8d:29:0d:0a:ce:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:B7:C8:69:62:8B:7B:C6:4A:D3:F4:83:C2:17:4A:29:E7:38:37
            X509v3 Authority Key Identifier:
                keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/gDO3yGlii3vGStP0g8IXSinnODc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56488

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:c0:53:c8:56:fd:c0:63:b4:99:21:a7:74:4d:7e:7a:89:
         3f:8b:ef:b4:ec:f1:66:5d:8e:76:b8:ad:40:6d:49:0c:29:ac:
         ad:f1:5a:a2:18:3d:46:17:74:03:22:65:08:0d:ca:f7:34:3a:
         1d:ad:7e:34:f2:96:03:93:fd:88:32:87:d2:71:6f:09:d0:3f:
         b5:5a:14:8f:46:9b:19:0c:b8:d9:21:9a:9e:28:98:4d:9b:f1:
         ac:0d:dd:02:dd:23:b7:8c:3e:0b:90:e0:9a:58:4d:b5:b6:16:
         eb:53:38:de:56:9f:a8:d7:d3:cb:15:7f:ae:63:fd:d5:dc:3f:
         27:c7:98:66:36:e8:66:48:a8:c2:8d:36:97:ea:b5:9d:e5:03:
         d6:c8:66:52:3e:6a:74:52:34:32:d3:f4:44:99:3d:fe:64:d5:
         20:00:95:9a:b3:27:5a:0b:1e:9b:85:22:e9:74:10:3b:71:6a:
         10:06:fb:ea:1d:c7:f1:1d:b5:4b:b4:0c:42:14:88:54:8b:b6:
         d0:e6:6c:e8:e2:e1:b6:37:7d:c7:b4:9b:cb:b5:2f:a8:44:ed:
         52:a1:62:79:78:8e:3e:33:76:b1:20:eb:02:d0:3b:d1:42:6a:
         e5:1f:a5:e0:e5:2a:b8:1e:7b:21:2b:f2:2c:90:04:c5:85:cf:
         ed:c2:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:31 2026 by rpki-client