Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/8L86gshlVnRWr5gdY2DjZCCezS4.asa
File:                     8L86gshlVnRWr5gdY2DjZCCezS4.asa (raw, json)
Hash identifier:          YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=
Subject key identifier:   F0:BF:3A:82:C8:65:56:74:56:AF:98:1D:63:60:E3:64:20:9E:CD:2E
Certificate issuer:       /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial:       019D0B43DACB962EA0D59F6BFEF346CE79C9
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/8L86gshlVnRWr5gdY2DjZCCezS4.asa
Signing time:             Fri 20 Mar 2026 12:41:29 +0000
ASPA not before:          Fri 20 Mar 2026 12:41:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58302
Providers:                AS: 224
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 09:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0b:43:da:cb:96:2e:a0:d5:9f:6b:fe:f3:46:ce:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
        Validity
            Not Before: Mar 20 12:41:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f0bf3a82c865567456af981d6360e364209ecd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:9f:d5:9e:6c:8b:7d:f3:4c:52:a7:aa:67:
                    68:88:e4:ab:aa:cf:9c:4c:35:44:54:24:5b:e2:08:
                    96:17:73:b2:c3:03:a9:81:4a:f4:52:ac:2b:54:07:
                    07:4d:90:79:c2:92:98:da:c8:13:1c:16:2a:91:f5:
                    51:bb:fb:8f:79:e8:e3:1b:6f:38:0d:0f:c9:8f:d4:
                    3d:b2:33:34:6a:2d:52:a1:da:58:0e:45:f9:f5:18:
                    7c:e0:d9:c9:a0:92:9b:e1:23:a7:d6:df:61:ca:d3:
                    1f:31:e5:67:60:2b:56:c7:34:90:85:ee:5b:de:95:
                    b3:d8:56:09:9b:6b:a9:9b:bb:e2:6b:af:3b:59:c6:
                    f9:cb:e1:fb:b2:79:75:a2:6f:75:85:8e:56:d9:40:
                    6c:c1:6b:b0:7d:b5:23:9f:4b:36:db:61:cd:4a:d0:
                    54:51:9d:79:5f:6f:de:44:85:b4:c7:fe:68:05:31:
                    d2:81:0c:69:2b:54:b2:79:c4:f0:14:11:23:aa:22:
                    a6:7e:a0:b0:4a:40:51:c1:a5:74:96:79:66:56:eb:
                    67:a6:d3:4c:16:29:22:a8:9c:ee:52:c2:ea:b3:e8:
                    a3:c2:33:33:3f:39:30:23:02:9a:3b:e7:86:8b:9a:
                    89:f9:31:5b:0e:14:d6:cc:e6:70:7f:19:f7:ec:ed:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BF:3A:82:C8:65:56:74:56:AF:98:1D:63:60:E3:64:20:9E:CD:2E
            X509v3 Authority Key Identifier:
                keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/8L86gshlVnRWr5gdY2DjZCCezS4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58302

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:ea:2e:41:9e:42:c5:57:d5:d5:99:74:30:e2:bb:d1:3d:
         16:bf:91:6e:cf:80:86:b3:17:39:11:9c:8e:d4:bb:c5:26:b4:
         64:bd:2c:03:ee:33:49:00:6a:cf:57:52:82:97:16:51:eb:61:
         0b:81:ed:93:c5:1d:56:1a:7c:68:b8:18:46:5d:29:ec:84:96:
         e4:91:89:1a:c2:2c:4b:ea:08:4d:bf:70:80:e2:36:e0:5c:e9:
         c4:af:0e:7f:10:52:97:58:27:c9:83:a6:5b:a6:73:53:88:23:
         2d:65:fc:0c:37:5b:88:6c:4e:66:ca:52:fb:22:4c:28:ac:d1:
         8a:5d:c3:df:01:00:9a:0d:18:e3:9f:dd:92:cd:41:1e:ee:14:
         f3:ed:32:d5:c3:0c:fd:70:5a:7e:61:f6:9b:a1:39:2b:da:86:
         3a:d0:90:ee:bd:0b:d4:3a:40:54:ea:5f:d6:61:35:d7:30:b6:
         a8:f4:c9:60:56:72:3a:93:8d:7a:0a:d1:ec:94:75:fa:37:57:
         a4:46:1e:e3:ef:6d:1f:c2:42:05:68:e9:72:4e:4e:95:05:0a:
         c7:8a:37:87:92:6f:18:c5:7e:c3:53:37:a9:8b:ad:56:e8:9d:
         64:4e:ce:8f:3a:7a:8d:19:dd:d3:7b:8a:b4:f1:5e:80:1b:5e:
         45:ae:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:05 2026 by rpki-client