Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/5Z3rFTTUVFarxCx0ETOf8OX-AHY.asa
File:                     5Z3rFTTUVFarxCx0ETOf8OX-AHY.asa (raw, json)
Hash identifier:          qLcSsDup2eDHzjPG2eNkixnT3xnxS5Fkg08aTdj0wws=
Subject key identifier:   E5:9D:EB:15:34:D4:54:56:AB:C4:2C:74:11:33:9F:F0:E5:FE:00:76
Certificate issuer:       /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial:       019D6EB8D575EDE5C241AB25D1363310251E
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/5Z3rFTTUVFarxCx0ETOf8OX-AHY.asa
Signing time:             Wed 08 Apr 2026 20:11:40 +0000
ASPA not before:          Wed 08 Apr 2026 20:11:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205901
Providers:                AS: 58212
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6e:b8:d5:75:ed:e5:c2:41:ab:25:d1:36:33:10:25:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
        Validity
            Not Before: Apr  8 20:11:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e59deb1534d45456abc42c7411339ff0e5fe0076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:33:81:1c:ae:9d:0a:5d:f8:3a:7b:ce:de:
                    ef:9b:d3:7d:7d:24:ea:74:02:a3:78:ba:ee:c6:b4:
                    93:28:b2:b0:48:98:fb:4d:ca:98:79:48:29:6c:18:
                    ee:b1:5b:b6:ff:db:93:c4:a9:74:76:2d:47:ba:a6:
                    a4:40:d0:42:dd:42:65:9d:de:8e:81:0f:30:6e:62:
                    b2:3a:55:4c:4c:94:ce:ac:09:2b:5e:01:0b:e9:24:
                    f2:41:e4:fa:b0:f5:96:eb:3d:97:f7:70:3c:61:ed:
                    38:14:32:74:52:43:1d:dd:49:96:bc:f0:29:00:7d:
                    ff:5e:00:fa:1f:fd:25:c0:52:2c:bd:d3:44:ba:17:
                    2f:3e:59:05:27:b8:66:d5:7c:51:77:8d:d7:29:a7:
                    11:44:8a:28:c8:54:d9:09:c5:49:08:00:d1:d6:14:
                    d9:50:8e:67:c5:34:41:92:ca:64:50:28:dc:9f:0f:
                    d4:76:b9:29:4b:48:d0:69:70:77:7d:8b:1f:ef:95:
                    f2:ef:40:a6:93:46:96:d8:7d:f9:e1:cc:22:0a:e4:
                    56:ff:0d:a5:23:c7:02:77:6c:f2:1d:e8:2e:a2:fb:
                    39:04:27:56:e1:da:c9:cc:c3:6f:22:14:5b:0b:40:
                    e2:9f:eb:4b:bc:e2:bb:0a:8a:20:81:de:0f:6e:bf:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9D:EB:15:34:D4:54:56:AB:C4:2C:74:11:33:9F:F0:E5:FE:00:76
            X509v3 Authority Key Identifier:
                keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/5Z3rFTTUVFarxCx0ETOf8OX-AHY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205901

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:e8:b4:ef:f8:5a:89:d6:d6:00:c0:e1:83:13:65:02:3f:
         49:30:e6:5e:98:d6:16:32:19:a4:44:10:43:70:cd:bc:b9:9c:
         b1:f1:e4:73:80:a1:52:18:6a:7a:f6:d9:de:ea:3a:d3:ef:49:
         c7:0c:07:84:fd:f4:ef:a0:4e:34:10:78:da:1a:92:b6:11:ff:
         00:e6:56:fb:66:09:f4:98:02:a8:87:e0:90:4f:e5:f5:ac:0b:
         6b:64:36:1d:54:06:81:31:3d:58:3c:ad:61:db:34:20:8f:7a:
         ff:0a:97:d9:0f:ff:b5:e2:03:1d:3c:43:15:99:ba:cb:be:42:
         e5:65:e3:c1:39:00:f7:e5:8e:f9:3c:eb:00:9c:64:c1:b5:1f:
         15:e1:22:cf:fc:bc:70:24:cb:fd:93:73:4d:57:6a:3d:07:ed:
         09:bf:a0:9c:71:0c:4a:fa:43:61:5f:e6:9c:d4:76:14:61:6e:
         9c:c8:33:d9:6c:f6:82:7f:4a:36:c4:64:ea:d4:d1:75:ef:ef:
         96:9a:1a:fb:14:ca:ee:4c:23:73:57:1e:e6:ee:3b:6a:90:ff:
         77:44:cf:79:40:f2:e7:70:02:95:0b:cf:52:19:33:ec:82:19:
         50:19:b0:2a:f2:f7:12:a3:1b:d8:85:42:0d:2b:cb:37:8f:f1:
         fa:9e:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:47 2026 by rpki-client