Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/QOv9AtzM59S_WNU7KUIEWRfJl68.asa
File:                     QOv9AtzM59S_WNU7KUIEWRfJl68.asa (raw, json)
Hash identifier:          6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=
Subject key identifier:   40:EB:FD:02:DC:CC:E7:D4:BF:58:D5:3B:29:42:04:59:17:C9:97:AF
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019E99C86E5A52ADDAB4D1A17719BBF58E52
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/QOv9AtzM59S_WNU7KUIEWRfJl68.asa
Signing time:             Fri 05 Jun 2026 21:55:09 +0000
ASPA not before:          Fri 05 Jun 2026 21:55:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            29529
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:c8:6e:5a:52:ad:da:b4:d1:a1:77:19:bb:f5:8e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jun  5 21:55:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=40ebfd02dccce7d4bf58d53b2942045917c997af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:22:ca:9f:4d:9c:88:89:d4:d1:03:ae:38:
                    7d:69:d6:bc:0b:21:90:75:43:f7:e2:61:27:6e:af:
                    7f:ee:6c:38:68:50:49:ff:99:02:e2:12:8b:e4:b0:
                    d2:ce:89:b2:4e:a4:73:93:27:23:c9:12:3d:60:c2:
                    b6:91:8f:4a:52:40:bb:d2:68:31:8c:b2:2a:28:38:
                    fe:b3:1f:24:2a:3d:85:0a:28:fe:ea:0f:c1:af:39:
                    19:fd:e9:d3:3a:c9:63:64:75:f7:85:46:18:b3:a5:
                    49:fe:46:74:57:3c:eb:7f:58:e3:24:07:73:85:ce:
                    25:6c:11:9c:b7:a9:87:91:31:ee:4e:6c:4f:ee:ee:
                    0b:6e:22:cc:05:27:5e:8b:e6:d4:99:c4:1e:85:81:
                    3d:bc:ce:3c:75:a3:6a:7c:b2:77:f5:44:4b:5b:83:
                    28:a5:88:e9:84:c9:44:69:38:a8:44:1d:d8:82:0b:
                    33:16:ed:04:5a:f2:52:bb:33:71:e9:42:6f:64:7f:
                    91:5d:5c:89:44:72:85:cf:84:58:81:35:b9:00:34:
                    78:c7:97:db:72:0b:14:dd:29:86:f5:dd:2c:0c:77:
                    f3:6c:8b:24:25:20:ab:19:19:00:a5:76:5a:c0:d6:
                    70:33:bd:b9:28:d0:29:8c:c4:ff:d9:c8:5c:9b:c3:
                    48:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:FD:02:DC:CC:E7:D4:BF:58:D5:3B:29:42:04:59:17:C9:97:AF
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/QOv9AtzM59S_WNU7KUIEWRfJl68.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29529

    Signature Algorithm: sha256WithRSAEncryption
         7e:b7:3c:4d:00:25:76:49:e0:1c:af:13:36:df:70:05:0f:85:
         c0:75:8b:0c:91:70:78:d6:21:4e:a2:91:25:ca:d6:53:53:e1:
         a3:ea:1f:3b:e8:25:86:0a:7d:50:45:93:18:ce:2f:79:4d:b1:
         8a:67:ce:d8:6a:f2:49:07:e9:71:48:49:07:8d:ce:77:02:ee:
         fc:c0:ab:96:2a:6d:52:f2:1a:80:66:33:55:c6:86:9e:57:16:
         ca:3a:89:d3:e2:b1:92:d4:6a:09:26:35:45:31:d6:c9:5e:33:
         c8:de:99:71:1c:52:d5:59:b3:df:fd:d8:48:0e:ae:f0:1c:57:
         a5:92:2c:c7:b0:81:48:83:dc:17:98:5d:80:0a:0e:c8:59:c1:
         0f:0f:ed:0e:20:28:32:e6:6d:69:c7:1b:a8:1a:9a:b3:5e:4b:
         88:b7:43:47:32:ac:9b:5f:2c:a7:03:7a:43:af:55:64:b4:e7:
         85:cd:50:e5:7b:75:f9:43:b4:ad:4f:fd:18:f5:5d:db:9d:39:
         2b:41:78:28:80:0e:8f:0d:96:94:a6:e3:ab:db:86:a1:ad:df:
         51:1a:49:2c:b1:e2:5a:cd:dc:cb:14:f6:56:a7:48:f8:dc:77:
         8a:f9:fc:cb:c8:f2:cc:41:01:0d:31:e3:6c:74:64:39:cd:99:
         4b:3e:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:28 2026 by rpki-client