Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa
File:                     ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (raw, json)
Hash identifier:          hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=
Subject key identifier:   65:87:38:47:56:54:A0:B1:4B:0D:BD:04:C6:20:4C:A8:D6:68:E0:F2
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019D2A5048C4EF7F1F27C2F345D29CCFB903
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa
Signing time:             Thu 26 Mar 2026 13:23:17 +0000
ASPA not before:          Thu 26 Mar 2026 13:23:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            5462
Providers:                AS: 5089
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:50:48:c4:ef:7f:1f:27:c2:f3:45:d2:9c:cf:b9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Mar 26 13:23:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=658738475654a0b14b0dbd04c6204ca8d668e0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:4b:76:00:8f:bf:1c:f9:39:ed:b6:a4:45:
                    90:c8:3d:82:49:de:d7:06:82:32:c0:0a:c6:be:40:
                    ba:85:60:db:3c:b6:81:2a:8e:3b:66:e6:93:1c:42:
                    1c:f5:89:ab:75:06:80:9a:76:3e:e7:cf:28:0b:2d:
                    f8:cf:af:a1:50:c4:0c:ff:10:96:3d:79:cc:4c:0f:
                    5f:0d:3c:9e:4c:00:7a:38:10:fb:18:6d:d8:dc:3c:
                    49:d6:72:17:87:e1:17:af:cf:de:e4:40:a3:5f:90:
                    a4:0c:72:d8:67:d2:39:99:b1:05:3f:c0:71:49:76:
                    5c:8d:1c:2a:21:9f:ab:69:d9:a0:ef:f1:ad:1a:a8:
                    1b:66:95:f6:13:a6:68:c4:b0:09:65:01:33:1e:93:
                    be:0d:ea:5f:85:94:00:3d:e1:5c:32:51:76:9e:2c:
                    e3:92:05:c2:d4:b9:d8:ce:87:14:ac:57:1d:2a:76:
                    c9:b0:82:e5:f5:4c:a9:40:c7:ec:76:29:fd:5b:83:
                    5e:c8:4d:b9:91:5c:17:91:bc:f3:28:51:05:94:09:
                    15:0e:b3:8e:fe:46:76:58:5b:90:e2:e9:68:43:5b:
                    6f:12:bd:ec:ca:1b:01:b4:8b:9a:7b:fc:01:c9:5d:
                    b0:ac:d9:a0:cb:dc:d4:0f:ea:54:22:b6:30:b6:1d:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:38:47:56:54:A0:B1:4B:0D:BD:04:C6:20:4C:A8:D6:68:E0:F2
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5462

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:9f:f4:60:7c:52:a1:27:0a:7f:c2:ad:6d:16:ef:84:7f:
         30:a7:94:56:a1:c1:af:77:54:a1:54:7a:96:2e:0b:00:c4:21:
         b5:8d:c5:77:a6:f5:ad:fd:1f:70:07:3d:7a:b2:b2:b8:16:48:
         81:53:55:ca:c5:ba:98:54:78:99:06:b2:7c:53:1b:d5:f0:ec:
         7a:d4:1f:ab:7d:3a:e9:65:7a:f2:a9:5f:c9:f1:c1:14:07:30:
         5c:5a:32:22:c5:b6:94:4a:0e:c3:62:a9:75:a4:85:c5:67:5b:
         49:6f:8d:a5:a7:ed:aa:4f:e9:42:6e:54:26:00:2b:00:f6:03:
         50:0f:6e:aa:28:4a:e1:b4:fd:9e:6c:b5:07:cf:4a:3e:ef:c0:
         af:ac:a4:bb:79:f2:a3:52:82:ea:81:9c:8e:79:d4:32:8f:37:
         74:9c:77:d0:32:08:79:70:94:f6:ad:0f:a0:11:96:dd:82:40:
         ed:bd:08:2d:2b:a3:d7:4b:fe:bb:95:b0:46:c1:db:b2:97:8f:
         15:6b:61:98:55:4c:4c:2e:b4:84:d4:84:18:30:7a:b5:c0:37:
         72:df:7c:8f:8a:00:8b:87:d9:53:f1:09:f5:d9:ab:a3:74:ed:
         c0:98:7c:2b:61:1d:ae:c1:98:54:f2:80:63:68:af:23:a4:01:
         29:2c:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:21 2026 by rpki-client