Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/TO6nqQhnOsZjFu2as_fLfCF9jiU.asa
File:                     TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (raw, json)
Hash identifier:          AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=
Subject key identifier:   4C:EE:A7:A9:08:67:3A:C6:63:16:ED:9A:B3:F7:CB:7C:21:7D:8E:25
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       019D1B46CFF4A3AA3A48B4EA535746B6C7D6
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/TO6nqQhnOsZjFu2as_fLfCF9jiU.asa
Signing time:             Mon 23 Mar 2026 15:18:38 +0000
ASPA not before:          Mon 23 Mar 2026 15:18:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58280
Providers:                AS: 6939
                          AS: 34549
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1b:46:cf:f4:a3:aa:3a:48:b4:ea:53:57:46:b6:c7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Mar 23 15:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ceea7a908673ac66316ed9ab3f7cb7c217d8e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:9c:6a:01:67:09:15:8c:f3:1d:e7:49:67:
                    9b:74:55:af:ea:dd:aa:08:62:8f:13:fd:d3:02:be:
                    9b:de:59:3d:b2:dd:ff:73:9f:5d:6f:b9:0c:19:5d:
                    26:72:3f:d8:f0:8b:c4:e2:eb:f3:a3:53:d3:3c:ff:
                    d1:3a:03:69:dc:f1:15:5a:3c:c8:28:68:b9:25:40:
                    a6:0e:37:9e:30:5c:be:a9:af:e4:ba:3a:c2:cc:2d:
                    a3:16:62:c9:27:84:73:c2:79:30:9b:a5:68:5d:cd:
                    f7:b0:df:2c:2b:54:5b:59:25:55:b2:08:ea:7b:4c:
                    58:5d:8c:a9:52:77:3f:a1:72:fd:53:51:47:93:49:
                    a5:dc:5f:f7:2e:4f:79:9e:1b:cc:c3:26:64:ca:7d:
                    da:3b:cb:b9:bc:60:a9:6c:8a:fd:23:73:2a:72:62:
                    02:33:a3:2c:28:7c:b0:de:45:30:02:92:ac:23:8c:
                    42:c9:e8:93:ec:90:bb:90:2d:d4:e2:12:1c:06:96:
                    f3:33:f7:63:56:d7:4a:fc:2e:87:ba:34:c8:bf:12:
                    96:fa:03:04:29:8b:ad:66:62:ab:c7:78:31:72:c2:
                    9e:89:9d:6b:4e:05:26:67:3e:d5:1c:d3:05:86:8d:
                    d4:ca:1d:02:c0:91:93:65:3c:cb:22:ad:35:7d:25:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EE:A7:A9:08:67:3A:C6:63:16:ED:9A:B3:F7:CB:7C:21:7D:8E:25
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/TO6nqQhnOsZjFu2as_fLfCF9jiU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58280

    Signature Algorithm: sha256WithRSAEncryption
         97:02:58:55:59:8b:78:df:2d:07:b9:df:fb:b1:01:c9:70:de:
         10:4c:25:dc:cd:7b:d6:b5:46:eb:76:de:fa:d0:b6:c4:7e:64:
         88:5c:f0:22:dc:0d:6d:58:7a:6f:22:18:6e:ae:29:96:1c:98:
         8c:6e:88:71:44:98:61:68:83:89:ef:46:d8:58:a9:ab:99:d3:
         7c:c1:75:f2:a4:ef:62:1a:22:05:64:39:fc:8f:b8:fa:5a:5a:
         9a:54:23:08:11:c3:69:25:6e:b3:ca:8d:82:3c:d9:1a:d8:cb:
         f8:cd:de:6d:26:c0:a1:54:42:de:a0:2b:bb:4a:7d:c1:7d:e2:
         cb:a2:65:8b:2a:35:87:91:04:ae:92:39:ba:49:22:c5:81:9d:
         cb:87:8e:fa:c4:82:d2:44:4d:22:73:5c:ad:bd:7c:40:f1:4f:
         4a:3e:07:d1:c9:b3:23:80:56:19:e1:0a:9d:bf:c9:8b:70:f0:
         9e:8b:6c:30:f8:55:fa:c6:ca:9a:be:14:33:c9:71:f4:47:45:
         39:9c:d2:5c:f2:dc:a7:37:44:fb:9f:0e:1e:32:9f:09:a5:03:
         fd:92:7c:70:f4:91:ee:b5:d5:b6:b6:cc:84:c9:f1:59:3f:73:
         f7:75:1f:2b:53:10:56:e3:2f:42:18:0f:53:3e:cb:c5:9d:c1:
         94:07:bb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:32 2026 by rpki-client