Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/Zf7DrK8VgTcUBYLpDP6TFzvtYb4.asa
File:                     Zf7DrK8VgTcUBYLpDP6TFzvtYb4.asa (raw, json)
Hash identifier:          zQXIIEVa+4GIr6adcdZrybN+3Q6Rn0+pi8q/LwSjWvw=
Subject key identifier:   65:FE:C3:AC:AF:15:81:37:14:05:82:E9:0C:FE:93:17:3B:ED:61:BE
Certificate issuer:       /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial:       019D72A047DE43728901351B342D6CD16BC3
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/Zf7DrK8VgTcUBYLpDP6TFzvtYb4.asa
Signing time:             Thu 09 Apr 2026 14:23:19 +0000
ASPA not before:          Thu 09 Apr 2026 14:23:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57998
Providers:                AS: 29535
                          AS: 56449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:72:a0:47:de:43:72:89:01:35:1b:34:2d:6c:d1:6b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
        Validity
            Not Before: Apr  9 14:23:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=65fec3acaf158137140582e90cfe93173bed61be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:88:61:e0:ec:e9:b9:d6:82:ce:3f:a4:1d:
                    98:e2:d8:46:09:e9:f3:c8:9e:7f:5c:9a:2c:87:0e:
                    ef:36:bd:2c:3f:ea:a5:4f:b8:b6:b0:5f:f7:c9:3a:
                    34:bf:f3:14:e9:35:99:44:5f:9c:95:a1:35:53:49:
                    f5:69:85:47:0f:77:77:a0:9a:51:7d:99:bd:9a:33:
                    03:16:5b:e5:14:5b:97:ac:c3:63:6d:b3:1f:3f:fc:
                    e0:6f:e4:e6:dc:c8:b4:28:ee:a5:7a:62:6c:70:e5:
                    38:ed:69:71:9a:40:49:24:ce:92:e9:b4:7b:61:48:
                    bf:90:54:60:ad:1b:fc:1e:2b:ba:2d:8d:e7:0b:32:
                    c6:58:e4:75:d2:97:a5:be:c1:b0:7e:9b:af:91:1c:
                    a5:5a:d2:54:4e:84:b4:e8:9b:1c:86:0c:00:9b:7c:
                    c9:80:10:d8:af:58:71:70:1c:fc:ad:68:9b:88:ca:
                    54:1e:c8:d0:49:e3:dd:66:1f:1d:6f:e8:47:82:2d:
                    41:a0:46:76:c5:5c:c1:43:11:eb:b7:78:aa:50:31:
                    c6:34:36:5d:c8:53:60:d0:76:de:cf:93:f3:ac:00:
                    bd:07:ac:c6:17:1b:90:63:19:49:19:ae:4f:7a:2e:
                    c1:04:a3:01:33:5c:3f:f4:22:2a:61:d9:de:03:be:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FE:C3:AC:AF:15:81:37:14:05:82:E9:0C:FE:93:17:3B:ED:61:BE
            X509v3 Authority Key Identifier:
                keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/Zf7DrK8VgTcUBYLpDP6TFzvtYb4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57998

    Signature Algorithm: sha256WithRSAEncryption
         54:94:0a:25:93:74:0a:bf:67:56:bd:35:aa:d3:bd:fe:ce:e9:
         cb:96:04:6c:3a:1e:ae:2a:2e:66:c9:eb:ea:d1:0f:0a:e1:e5:
         41:f2:7e:9b:96:14:ca:e4:0b:c9:6b:fa:db:8a:48:99:de:e1:
         f3:69:e9:c7:9f:ed:cb:ef:8e:e4:d4:23:59:8c:f9:be:4e:74:
         ff:01:8d:be:38:07:60:b1:eb:f8:f8:22:92:ea:4f:8e:73:45:
         1d:f4:6d:f6:cb:84:3a:34:b8:16:c5:6a:6c:de:c3:1f:02:74:
         ea:ab:45:99:b3:a6:a4:fc:a8:9c:22:88:78:a4:ee:2a:2d:c6:
         e9:18:d4:a1:59:c7:20:65:c0:54:84:eb:63:2e:88:4f:81:82:
         0e:89:32:12:ed:2c:8e:71:2b:ce:5c:98:90:c5:22:f6:32:f4:
         70:04:37:19:f7:d3:2e:5c:1c:92:ec:16:64:da:c0:42:9c:e3:
         1d:57:07:30:35:89:b0:d0:41:b6:f4:88:87:81:a1:c8:8f:66:
         ff:c3:6c:09:f2:06:f7:a5:b8:3e:8c:d0:42:f6:b6:8d:04:49:
         8c:6d:a2:a0:41:e0:e8:5c:da:9c:df:67:fe:00:8d:36:03:10:
         a9:b3:d2:ee:2b:87:b4:c7:1b:69:60:71:2c:fa:6c:ee:8b:82:
         14:2a:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:37 2026 by rpki-client