Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/Wd51v5bh6CVZd6bJidGHZJXb2us.asa
File:                     Wd51v5bh6CVZd6bJidGHZJXb2us.asa (raw, json)
Hash identifier:          7OczW/y3GKch9e1XpUdfbwi9oN+4AbqKJfslhUFyQQo=
Subject key identifier:   59:DE:75:BF:96:E1:E8:25:59:77:A6:C9:89:D1:87:64:95:DB:DA:EB
Certificate issuer:       /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial:       019E15BF917D1C70388856D460C3673BD92A
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/Wd51v5bh6CVZd6bJidGHZJXb2us.asa
Signing time:             Mon 11 May 2026 06:35:36 +0000
ASPA not before:          Mon 11 May 2026 06:35:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            28730
Providers:                AS: 47887
                          AS: 50670
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:15:bf:91:7d:1c:70:38:88:56:d4:60:c3:67:3b:d9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
        Validity
            Not Before: May 11 06:35:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=59de75bf96e1e8255977a6c989d1876495dbdaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:45:bb:12:0c:60:42:a9:f5:a3:c6:b8:d2:
                    2c:25:54:93:4e:9c:53:30:73:5a:9c:72:6f:5d:76:
                    9c:c2:8b:eb:e3:5a:8b:54:b7:3a:04:36:b8:a5:b0:
                    ed:ed:78:16:ff:71:45:ef:0d:ca:1f:7d:59:ba:d4:
                    af:21:15:21:9f:8a:af:aa:25:20:57:d2:2d:19:59:
                    80:b6:8c:1c:dd:c1:d7:0f:01:6c:34:67:81:fe:bf:
                    1d:c3:2a:d0:7e:3a:7c:a3:c3:8e:ee:1d:1a:4c:44:
                    6f:ec:5d:0c:7c:31:99:87:e4:c5:89:05:52:66:de:
                    3b:0b:d2:ec:e6:4f:38:17:2f:6a:6f:ed:ba:80:e4:
                    a2:96:82:6b:1a:96:27:dd:ad:4b:cf:e6:69:1a:76:
                    08:dc:b3:54:5f:67:8f:5c:ab:0c:b3:81:d6:26:d4:
                    66:81:7e:78:63:f9:d6:3c:08:d9:fe:28:cc:39:71:
                    84:80:84:27:ee:2b:c1:d6:f5:df:76:ab:5f:85:d7:
                    f7:d2:99:cc:a0:04:5c:a4:c1:08:48:c0:e3:34:b4:
                    d8:41:42:29:34:78:47:5d:52:b7:ae:01:c5:2d:55:
                    e0:bf:f1:54:eb:89:44:82:dc:79:92:27:7d:aa:67:
                    bd:dc:66:a8:0c:25:a9:66:51:55:8f:52:7b:44:40:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:75:BF:96:E1:E8:25:59:77:A6:C9:89:D1:87:64:95:DB:DA:EB
            X509v3 Authority Key Identifier:
                keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/Wd51v5bh6CVZd6bJidGHZJXb2us.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28730

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:93:34:0d:ba:e7:08:64:d0:99:65:ae:f8:a7:cc:ff:86:
         c2:42:db:5d:ff:c8:e4:a2:e6:1c:cd:96:37:14:bc:bd:b9:9c:
         a0:cc:95:26:22:69:22:a7:d5:d1:cf:d3:92:66:59:f0:ba:fd:
         2a:8b:9d:65:67:27:46:d7:0d:c8:b7:4f:d9:8e:b2:25:01:16:
         2d:3a:6b:97:52:2d:0d:21:f1:93:ce:0a:e3:f7:01:6f:98:e7:
         7e:e6:23:ce:e0:fd:d3:26:b6:f3:87:08:9e:bd:b8:82:22:c1:
         3c:6d:9c:79:3a:4c:0f:db:1a:cb:f0:f0:44:26:fc:ea:f9:65:
         e9:3d:7b:49:a0:28:2f:2e:69:8e:60:07:01:24:d5:ce:1f:15:
         4b:b9:52:84:c9:ba:2c:87:6e:77:93:10:6f:db:1a:47:b5:42:
         e8:34:8e:5e:8f:4a:8b:5b:9b:e2:12:6b:a1:f7:2e:5e:5a:5f:
         16:a4:7a:89:26:21:86:1a:21:44:3e:d1:d1:2f:b0:e3:ec:37:
         ae:0c:c1:8d:6e:95:16:39:c0:e9:ae:d5:f0:be:71:f8:ce:83:
         c3:28:b3:33:cf:85:47:64:76:ac:40:d8:f9:ba:f4:61:3f:04:
         50:70:84:2b:4a:68:62:79:dd:d1:0f:1b:2c:ad:2b:94:34:56:
         f9:f9:36:20
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ4Vv5F9HHA4iFbUYMNnO9kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2I0ZjZjZDg0ODlmZGRkMTczOTcwYTBlZjQ0ZDRlMTU0
N2E0MDUwHhcNMjYwNTExMDYzNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWRlNzViZjk2ZTFlODI1NTk3N2E2Yzk4OWQxODc2NDk1ZGJkYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRtFuxIMYEKp9aPGuNIsJVSTTpxT
MHNanHJvXXacwovr41qLVLc6BDa4pbDt7XgW/3FF7w3KH31ZutSvIRUhn4qvqiUg
V9ItGVmAtowc3cHXDwFsNGeB/r8dwyrQfjp8o8OO7h0aTERv7F0MfDGZh+TFiQVS
Zt47C9Ls5k84Fy9qb+26gOSiloJrGpYn3a1Lz+ZpGnYI3LNUX2ePXKsMs4HWJtRm
gX54Y/nWPAjZ/ijMOXGEgIQn7ivB1vXfdqtfhdf30pnMoARcpMEISMDjNLTYQUIp
NHhHXVK3rgHFLVXgv/FU64lEgtx5kid9qme93GaoDCWpZlFVj1J7REAffwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFFnedb+W4eglWXemyYnRh2SV29rrMB8GA1UdIwQY
MBaAFGXLT2zYSJ/d0XOXCg70TU4VR6QFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2It
MDgyZDkyNGMyZjMzLzEvV2Q1MXY1Ymg2Q1ZaZDZiSmlkR0haSlhiMnVzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2ItMDgyZDkyNGMyZjMz
LzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnA6MA0GCSqGSIb3
DQEBCwUAA4IBAQAdPZM0DbrnCGTQmWWu+KfM/4bCQttd/8jkouYczZY3FLy9uZyg
zJUmImkip9XRz9OSZlnwuv0qi51lZydG1w3It0/ZjrIlARYtOmuXUi0NIfGTzgrj
9wFvmOd+5iPO4P3TJrbzhwievbiCIsE8bZx5OkwP2xrL8PBEJvzq+WXpPXtJoCgv
LmmOYAcBJNXOHxVLuVKEybosh253kxBv2xpHtULoNI5ej0qLW5viEmuh9y5eWl8W
pHqJJiGGGiFEPtHRL7Dj7DeuDMGNbpUWOcDprtXwvnH4zoPDKLMzz4VHZHasQNj5
uvRhPwRQcIQrSmhied3RDxssrSuUNFb5+TYg
-----END CERTIFICATE-----
Generated at Tue May 12 21:24:41 2026 by rpki-client