Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/PAO244om0Fr0Musi1s0esP2NOB4.asa
File:                     PAO244om0Fr0Musi1s0esP2NOB4.asa (raw, json)
Hash identifier:          Ehru3kLzNTNBpFtfBqxo1KsMajNddqgKolan5EA4b7I=
Subject key identifier:   3C:03:B6:E3:8A:26:D0:5A:F4:32:EB:22:D6:CD:1E:B0:FD:8D:38:1E
Certificate issuer:       /CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
Certificate serial:       01A03B7AA1E60C560915551DEAFB00D5AA6C
Authority key identifier: EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/PAO244om0Fr0Musi1s0esP2NOB4.asa
Signing time:             Wed 26 Aug 2026 00:31:27 +0000
ASPA not before:          Wed 26 Aug 2026 00:31:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42290
Providers:                AS: 174
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 03:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:7a:a1:e6:0c:56:09:15:55:1d:ea:fb:00:d5:aa:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaa00b0a134cc3e59c3bed5f06e90e97acc69226
        Validity
            Not Before: Aug 26 00:31:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c03b6e38a26d05af432eb22d6cd1eb0fd8d381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:5d:09:e6:e1:19:96:41:d1:a7:a5:4c:9b:
                    70:f9:96:3d:64:77:70:0b:26:62:a0:5d:4a:61:f5:
                    8e:2c:8b:89:08:f3:0d:b7:9b:79:63:12:a2:df:2d:
                    c2:59:20:68:3f:d3:42:15:eb:4e:80:50:c3:91:73:
                    d5:72:ca:e7:24:97:c7:79:c8:33:09:4b:1f:79:05:
                    3d:f1:51:62:cc:24:5b:6b:a0:84:e9:2c:30:d7:5f:
                    da:41:99:ab:da:05:00:c8:23:2e:3c:b1:3e:98:99:
                    cc:98:72:8f:33:b6:ef:cd:12:d7:7e:dc:68:b7:70:
                    f1:c8:9f:92:7a:29:42:da:28:c5:19:c2:cf:0f:ff:
                    48:4a:80:e6:9e:92:0c:67:02:b3:6f:26:61:7a:7c:
                    93:e5:68:26:66:2b:f5:59:59:f5:ed:5c:64:70:6a:
                    e4:d5:2a:ce:fd:83:c8:d7:e6:71:1c:46:62:c7:43:
                    85:c6:a6:6e:b7:b4:50:af:40:b9:a6:14:8e:82:2d:
                    1e:b4:f3:cf:6a:38:b3:6b:a0:fe:7a:ad:99:f8:d6:
                    1f:08:24:63:67:a6:3d:10:6f:03:0e:66:24:72:80:
                    3c:c5:50:b0:2c:27:58:f8:bb:af:89:9f:d4:61:a5:
                    b4:ce:df:ed:0e:d4:81:1e:9a:fd:ef:43:6c:b9:4a:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:03:B6:E3:8A:26:D0:5A:F4:32:EB:22:D6:CD:1E:B0:FD:8D:38:1E
            X509v3 Authority Key Identifier:
                keyid:EA:A0:0B:0A:13:4C:C3:E5:9C:3B:ED:5F:06:E9:0E:97:AC:C6:92:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qALChNMw-WcO-1fBukOl6zGkiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/PAO244om0Fr0Musi1s0esP2NOB4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/81be14-ffba-42e0-ae93-22aaf540eb5e/1/6qALChNMw-WcO-1fBukOl6zGkiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42290

    Signature Algorithm: sha256WithRSAEncryption
         04:28:e4:dc:42:53:9c:54:48:fe:87:94:86:a4:23:e3:67:20:
         61:be:0e:d8:b3:e4:e9:98:0c:d5:01:2e:c9:af:d9:45:15:f5:
         2d:53:ec:2c:3d:cb:c7:d0:c1:86:36:70:f5:dd:aa:1b:b2:55:
         46:11:19:cc:62:14:ab:19:86:93:cf:34:18:33:68:98:85:a9:
         d3:88:28:3b:89:6d:b2:dc:0e:50:c5:fa:1c:ad:5d:60:06:db:
         9f:b4:71:7d:5c:bd:47:c2:52:4d:64:ac:99:54:32:75:7d:d5:
         62:c7:5c:15:71:c2:82:47:2a:b1:2e:4e:8b:87:45:37:fd:6c:
         e9:5c:8f:f6:f6:de:c9:8b:50:24:c2:02:25:b8:b2:a8:26:1c:
         fb:17:5c:f8:cc:71:a8:80:9e:c2:7f:82:7a:88:a8:7d:89:65:
         f3:4a:8b:8c:80:f1:f5:d9:62:33:ff:c5:6f:a8:f5:7d:8a:47:
         9f:d0:b1:42:58:e3:c7:2f:70:bc:9b:6a:e1:37:41:81:96:54:
         06:ce:c0:15:df:1b:bd:28:96:8c:b7:da:4c:8a:89:bd:3f:06:
         92:40:0b:ed:30:17:a7:d5:ef:08:13:b7:e4:22:fd:10:50:59:
         9f:6b:fd:62:81:f3:7f:aa:e7:3e:9a:a2:af:b9:a2:c9:eb:08:
         10:ef:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:02 2026 by rpki-client