Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/o29__oQdnbomFl3MQLENCRHnRec.asa
File:                     o29__oQdnbomFl3MQLENCRHnRec.asa (raw, json)
Hash identifier:          J6NjYyKVFv6G/rdCPRpmKUPMf1HWG1qHi4BKzgQYofw=
Subject key identifier:   A3:6F:7F:FE:84:1D:9D:BA:26:16:5D:CC:40:B1:0D:09:11:E7:45:E7
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       019E69EC2FD6EDE8BF177FA64C8C670D470C
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/o29__oQdnbomFl3MQLENCRHnRec.asa
Signing time:             Wed 27 May 2026 14:52:26 +0000
ASPA not before:          Wed 27 May 2026 14:52:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62086
Providers:                AS: 5430
                          AS: 12731
                          AS: 24961
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:69:ec:2f:d6:ed:e8:bf:17:7f:a6:4c:8c:67:0d:47:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: May 27 14:52:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a36f7ffe841d9dba26165dcc40b10d0911e745e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:df:60:5e:5e:db:18:c0:f1:68:c2:fe:36:
                    7f:1d:df:46:19:95:65:33:69:c8:9a:cd:0a:78:ec:
                    98:c7:9a:54:2a:60:49:82:65:54:98:92:e3:08:7a:
                    1e:5a:b9:30:17:ed:f6:9c:17:24:a5:57:e0:09:d5:
                    14:72:b7:1e:f9:1f:d9:4d:69:be:d0:7b:99:4b:80:
                    8f:e9:59:aa:4f:0b:2c:15:21:f1:27:e0:88:6d:63:
                    0d:55:67:fe:fe:1b:6b:22:cd:80:7f:35:9d:ad:e2:
                    d9:42:6d:19:3d:73:af:59:c5:60:e3:d2:09:6a:64:
                    64:51:74:9a:ea:b4:0d:03:23:bc:cf:cb:a6:5b:7a:
                    44:00:42:95:99:a3:4d:49:bf:83:b1:28:42:97:7d:
                    80:07:fe:de:2c:d4:d4:eb:a5:5a:5f:55:d5:0d:c4:
                    53:9c:47:78:71:f2:bc:01:a7:cd:56:d8:41:6a:48:
                    f0:28:fd:87:ae:16:fd:58:02:12:be:64:0e:5f:04:
                    02:b6:8f:b6:9e:4e:06:e8:56:97:85:56:46:2d:46:
                    61:b6:00:fe:7d:b7:65:b0:1c:37:55:9d:74:54:91:
                    55:80:e8:50:9a:41:b3:23:c5:b6:59:d7:ff:6d:8f:
                    e5:f2:24:62:39:41:c0:ff:fc:4b:98:b2:cb:e8:12:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6F:7F:FE:84:1D:9D:BA:26:16:5D:CC:40:B1:0D:09:11:E7:45:E7
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/o29__oQdnbomFl3MQLENCRHnRec.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62086

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:08:bb:ba:31:10:cd:19:88:eb:e6:d8:57:94:77:f1:d2:
         be:f7:71:e0:23:d2:06:95:99:c5:4d:0d:43:4e:b8:e7:3c:90:
         c6:57:9b:53:05:be:60:9a:5c:d4:42:fe:55:af:fa:5c:0a:1b:
         ee:99:45:23:28:ee:52:f6:08:70:79:fe:f1:8b:4b:a6:f0:2f:
         ab:96:8c:91:db:eb:aa:55:7a:dd:33:8c:cc:bc:9f:d2:a8:5f:
         ba:6c:0f:68:31:b6:4d:cb:d7:f3:11:1b:73:43:af:cd:49:fe:
         70:64:b2:53:8a:01:94:13:79:05:fb:24:de:57:9c:aa:4a:0f:
         1e:ec:f1:42:6b:4f:e6:4e:30:a7:54:24:c8:56:30:6b:36:db:
         3f:4e:ce:3c:97:b3:27:aa:2b:3a:42:e9:2b:28:ee:74:35:b4:
         06:89:9f:9f:0d:8d:c3:2b:46:51:d8:7b:51:41:61:9e:44:6a:
         80:c2:b8:9e:46:3a:da:4a:a3:98:e0:25:b9:1c:a3:4d:31:18:
         9e:82:14:78:b8:2b:9f:21:d5:e8:aa:88:23:58:77:b5:aa:ec:
         21:09:27:6f:c1:74:15:ea:9c:7f:d4:28:ac:e1:cf:42:48:52:
         dd:b9:ea:6c:12:26:8c:00:11:99:e3:69:b9:6f:45:34:b6:14:
         66:03:3d:01
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ5p7C/W7ei/F3+mTIxnDUcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Mzc1ZmI2MTY4YjM1NDg0MWI5MWQzMDVmOWQwY2RjMGNi
MTUwMWQwHhcNMjYwNTI3MTQ1MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzZmN2ZmZTg0MWQ5ZGJhMjYxNjVkY2M0MGIxMGQwOTExZTc0NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzfYF5e2xjA8WjC/jZ/Hd9GGZVl
M2nIms0KeOyYx5pUKmBJgmVUmJLjCHoeWrkwF+32nBckpVfgCdUUcrce+R/ZTWm+
0HuZS4CP6VmqTwssFSHxJ+CIbWMNVWf+/htrIs2AfzWdreLZQm0ZPXOvWcVg49IJ
amRkUXSa6rQNAyO8z8umW3pEAEKVmaNNSb+DsShCl32AB/7eLNTU66VaX1XVDcRT
nEd4cfK8AafNVthBakjwKP2Hrhb9WAISvmQOXwQCto+2nk4G6FaXhVZGLUZhtgD+
fbdlsBw3VZ10VJFVgOhQmkGzI8W2Wdf/bY/l8iRiOUHA//xLmLLL6BIyuwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKNvf/6EHZ26JhZdzECxDQkR50XnMB8GA1UdIwQY
MBaAFHg3X7YWizVIQbkdMF+dDNwMsVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMt
MWMwZTMxZGUzMWM3LzEvbzI5X19vUWRuYm9tRmwzTVFMRU5DUkhuUmVjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMtMWMwZTMxZGUzMWM3
LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyhjANBgkqhkiG
9w0BAQsFAAOCAQEAIqoIu7oxEM0ZiOvm2FeUd/HSvvdx4CPSBpWZxU0NQ0645zyQ
xlebUwW+YJpc1EL+Va/6XAob7plFIyjuUvYIcHn+8YtLpvAvq5aMkdvrqlV63TOM
zLyf0qhfumwPaDG2TcvX8xEbc0OvzUn+cGSyU4oBlBN5Bfsk3lecqkoPHuzxQmtP
5k4wp1QkyFYwazbbP07OPJezJ6orOkLpKyjudDW0Bomfnw2NwytGUdh7UUFhnkRq
gMK4nkY62kqjmOAluRyjTTEYnoIUeLgrnyHV6KqII1h3tarsIQknb8F0Feqcf9Qo
rOHPQkhS3bnqbBImjAARmeNpuW9FNLYUZgM9AQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:21 2026 by rpki-client