Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Im_-Uz2tqMoLUO0K7lAiChMaerA.asa
File:                     Im_-Uz2tqMoLUO0K7lAiChMaerA.asa (raw, json)
Hash identifier:          QEDvScemsSsXfJycofLB6Jaj+H/Hh6UPm9fvBoayQFU=
Subject key identifier:   22:6F:FE:53:3D:AD:A8:CA:0B:50:ED:0A:EE:50:22:0A:13:1A:7A:B0
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019D2FD2164EEAAD01F5498682A64CF8DF2E
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Im_-Uz2tqMoLUO0K7lAiChMaerA.asa
Signing time:             Fri 27 Mar 2026 15:03:10 +0000
ASPA not before:          Fri 27 Mar 2026 15:03:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39040
Providers:                AS: 29075
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2f:d2:16:4e:ea:ad:01:f5:49:86:82:a6:4c:f8:df:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Mar 27 15:03:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=226ffe533dada8ca0b50ed0aee50220a131a7ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:12:01:72:6a:f3:3f:a2:f0:40:1c:24:ea:67:
                    95:6c:38:7d:12:25:7f:8c:41:15:68:d4:64:c4:ee:
                    e1:e5:db:fb:96:42:31:7b:bf:98:93:4c:99:30:2f:
                    ae:60:0a:ac:64:01:88:42:2b:42:3b:98:26:3d:75:
                    83:b1:fc:e1:2d:2a:19:76:6f:2e:85:42:e1:91:2a:
                    9d:5e:d2:d3:a6:9e:1c:51:04:60:3b:d5:64:89:29:
                    f4:f3:70:d3:ec:aa:02:5b:5c:dd:53:aa:70:9d:56:
                    b7:c6:e5:d8:23:04:b3:03:1b:6c:ed:ee:40:cb:03:
                    65:71:96:a2:cc:33:ee:6f:ce:8d:77:7d:b3:c3:5c:
                    e1:9c:1d:49:f4:63:7f:e9:b0:71:2b:14:35:fc:9b:
                    1d:c3:f2:96:c3:74:a9:42:8e:3d:f4:22:bb:57:fe:
                    5b:4e:e2:64:53:54:a7:13:4d:05:f3:aa:df:aa:2b:
                    2b:3b:b8:26:13:2f:74:3a:b3:af:fb:d9:83:cd:34:
                    b2:db:66:98:b7:60:e0:77:ff:9f:b7:c6:9a:21:d3:
                    60:9b:23:64:2b:85:b4:70:03:dd:2b:24:1c:61:1a:
                    a2:ea:f9:b4:2d:a3:61:57:c9:2c:3e:1e:95:3a:06:
                    11:de:02:4d:50:dd:ff:67:38:99:f2:d8:4b:8e:88:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:FE:53:3D:AD:A8:CA:0B:50:ED:0A:EE:50:22:0A:13:1A:7A:B0
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Im_-Uz2tqMoLUO0K7lAiChMaerA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39040

    Signature Algorithm: sha256WithRSAEncryption
         72:e1:8a:ea:76:6e:cf:8d:9f:50:b6:05:d1:43:47:9a:9f:3b:
         25:f5:28:8a:5c:62:22:7f:98:4b:53:1a:d4:1c:0a:19:bc:44:
         15:37:5c:47:c0:0d:b7:82:f0:b7:93:3c:c4:d8:ff:6c:30:49:
         99:f1:9e:dc:ac:c7:aa:5e:d6:51:6f:58:9d:20:3f:06:39:2e:
         9d:b1:af:67:82:61:d4:28:9f:56:3e:35:cd:4a:4f:05:3c:44:
         49:af:ce:3c:c1:a1:0f:ae:60:c5:08:e0:a8:89:5d:b0:f7:ca:
         5a:43:a1:12:6f:37:4b:68:f9:99:2b:3c:69:ae:95:4e:a9:2e:
         cd:6f:2b:f9:40:48:d4:11:bf:45:40:47:81:48:f2:b0:ed:ea:
         1b:d9:9f:ce:1e:c9:3b:b6:8b:30:09:54:ca:81:dc:58:3a:58:
         f9:ec:b0:6f:21:70:cc:de:75:b7:22:ff:2a:29:1c:f2:91:74:
         b5:c5:0b:2f:0c:5a:4e:b9:37:62:89:4c:1f:0c:cb:89:2f:c6:
         99:36:25:ad:15:7c:8b:c6:da:c5:db:ee:02:c0:8d:de:42:dd:
         48:e4:37:7f:b6:8d:21:2e:ad:11:8a:16:21:24:e0:67:46:c0:
         eb:85:b6:1c:bf:6d:48:b1:d5:bb:40:56:4a:ed:14:c7:de:8e:
         f1:65:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:45 2026 by rpki-client