Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/iS4aP9tMsLMEBkI89bWWRaKMKGk.asa
File:                     iS4aP9tMsLMEBkI89bWWRaKMKGk.asa (raw, json)
Hash identifier:          MDkJJc2R+eFDooxAw3E2bgJVuPEghC4CFwikOlAVImQ=
Subject key identifier:   89:2E:1A:3F:DB:4C:B0:B3:04:06:42:3C:F5:B5:96:45:A2:8C:28:69
Certificate issuer:       /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial:       01A0DA505AE34EB2DB3C82C5F7A23A3DC3A3
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/iS4aP9tMsLMEBkI89bWWRaKMKGk.asa
Signing time:             Fri 25 Sep 2026 20:44:54 +0000
ASPA not before:          Fri 25 Sep 2026 20:44:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58088
Providers:                AS: 9002
                          AS: 59766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:50:5a:e3:4e:b2:db:3c:82:c5:f7:a2:3a:3d:c3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
        Validity
            Not Before: Sep 25 20:44:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=892e1a3fdb4cb0b30406423cf5b59645a28c2869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:67:c5:41:6e:f1:b9:03:40:be:1e:9a:c8:
                    c6:f1:95:aa:02:61:0c:4c:db:c3:3b:14:0c:41:97:
                    61:8f:81:c9:67:ac:27:9b:d0:8b:3e:63:f5:4b:50:
                    3d:43:d3:3f:c7:c8:fe:8c:8e:cd:ef:8d:f3:25:3f:
                    89:94:38:e3:08:73:6b:bb:b1:ee:21:7e:a9:7e:f5:
                    73:08:db:b7:8e:f2:15:82:f8:bf:98:c6:eb:45:4e:
                    fc:da:83:39:da:d4:d6:2b:a5:bb:79:36:90:66:b5:
                    ec:3a:a7:da:bd:83:67:17:28:42:90:64:9d:6e:56:
                    e5:bd:d9:34:96:55:c3:5c:c9:24:6b:ae:73:b6:0c:
                    7b:77:2e:ff:66:05:98:49:fe:e3:ec:b1:fb:09:7a:
                    6f:5c:44:59:9a:3a:7c:09:5d:2b:6a:9d:cd:6d:d8:
                    7f:7d:d5:ff:76:bf:b5:7a:98:97:65:4f:d9:15:bf:
                    84:d0:c7:98:40:25:9a:e7:ac:2f:75:31:9a:8b:74:
                    cf:01:d4:2d:ec:c4:dd:b6:a6:b2:47:75:f9:de:84:
                    47:d1:0f:19:9d:f5:2b:ac:1f:de:c2:6a:13:d0:48:
                    34:83:bc:25:97:3d:c8:2c:39:5e:2c:14:a7:c0:b0:
                    6e:24:77:1b:3e:04:7b:25:6d:3f:07:6d:35:08:28:
                    cc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2E:1A:3F:DB:4C:B0:B3:04:06:42:3C:F5:B5:96:45:A2:8C:28:69
            X509v3 Authority Key Identifier:
                keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/iS4aP9tMsLMEBkI89bWWRaKMKGk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58088

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:e6:88:d6:c3:2f:74:4d:7f:b2:cb:11:47:c4:e9:89:9b:
         60:25:6b:4c:31:6c:54:7f:4a:51:ee:35:b1:b0:2d:f7:c6:59:
         7f:07:ed:e0:f6:2f:46:13:8f:45:07:6b:2f:36:a0:44:6e:06:
         21:78:72:99:2d:19:a1:cf:4c:37:d7:c5:a1:21:e5:95:bc:52:
         79:f7:13:05:9b:20:bb:f7:c6:3d:0a:60:76:f3:32:ee:b4:17:
         54:7f:b8:fc:6d:52:70:b1:e4:e2:30:e1:a3:e6:1c:ff:da:0e:
         5d:30:7c:25:90:dd:6e:35:9d:52:3b:66:6a:fc:81:27:6d:cb:
         dd:e6:5e:c1:86:c5:db:49:a6:3d:8a:ab:ea:9a:05:ca:72:8f:
         b0:6d:61:06:e5:88:be:21:da:0e:13:0e:19:3c:31:24:91:ab:
         77:be:a9:cd:4d:4c:e5:1f:e4:c9:76:54:19:70:f4:c5:d2:8b:
         11:e5:e5:84:d6:e0:5d:c0:a4:76:4a:ef:86:9a:a0:86:40:52:
         d5:ac:95:c4:a7:fe:8a:79:89:1e:8a:2c:4b:00:87:01:df:d7:
         17:3b:8e:59:57:71:80:0f:04:58:e2:35:59:19:e6:92:27:b7:
         45:a6:24:29:ff:1f:13:b0:a9:c0:8c:43:f1:55:cd:16:07:87:
         14:7d:36:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 14:24:58 2026 by rpki-client