Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/h7z0dcjyEiQrTlWfLJHvO8mytLk.asa
File:                     h7z0dcjyEiQrTlWfLJHvO8mytLk.asa (raw, json)
Hash identifier:          wvs5YngkGWwMTiaT1xG6NC51mWPXd//9JXNAJ/RSeS4=
Subject key identifier:   87:BC:F4:75:C8:F2:12:24:2B:4E:55:9F:2C:91:EF:3B:C9:B2:B4:B9
Certificate issuer:       /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial:       019CD745A251ED3A43F09EC54484E25A72F0
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/h7z0dcjyEiQrTlWfLJHvO8mytLk.asa
Signing time:             Tue 10 Mar 2026 10:23:10 +0000
ASPA not before:          Tue 10 Mar 2026 10:23:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58069
Providers:                AS: 34878
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d7:45:a2:51:ed:3a:43:f0:9e:c5:44:84:e2:5a:72:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
        Validity
            Not Before: Mar 10 10:23:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87bcf475c8f212242b4e559f2c91ef3bc9b2b4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:4e:60:80:5d:39:4e:87:79:73:78:ca:a3:
                    ae:d8:37:70:43:32:cb:7b:ae:76:60:6a:eb:3a:5f:
                    58:66:66:27:8d:30:85:36:c4:ba:69:5a:b5:20:47:
                    8f:75:8b:6e:3d:e8:27:76:4f:63:34:5d:4f:90:ab:
                    09:91:46:13:18:86:2c:69:f2:bd:5d:02:84:4b:18:
                    f7:64:61:86:4d:70:28:7c:83:4e:f2:9b:75:30:88:
                    ab:1b:d9:29:71:2a:82:7a:de:37:09:03:7e:df:b7:
                    5e:22:49:56:bb:d7:38:c6:76:c7:7c:95:03:41:e9:
                    a6:cc:57:5e:1c:4f:3e:08:74:60:29:24:93:be:57:
                    a6:bd:7b:04:4b:e5:8b:db:2d:fa:7d:07:d0:7a:ff:
                    36:86:5d:0e:85:93:55:5b:e0:1f:b5:ff:8a:86:1e:
                    9b:2b:81:41:7c:fb:b2:a2:8a:19:be:af:56:88:76:
                    ce:dd:22:c8:b1:39:04:4f:89:56:30:6a:4c:c4:ef:
                    0c:25:1c:7b:5a:3b:bf:00:be:c0:8f:0a:a7:d5:6f:
                    3c:50:e5:67:b6:4c:22:95:9f:cf:99:39:47:b9:0f:
                    da:36:ff:ee:da:b3:7b:de:c5:81:10:85:e4:0d:f9:
                    de:f1:7e:7e:c6:d9:30:3c:34:5f:9c:81:23:2c:ef:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:F4:75:C8:F2:12:24:2B:4E:55:9F:2C:91:EF:3B:C9:B2:B4:B9
            X509v3 Authority Key Identifier:
                keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/h7z0dcjyEiQrTlWfLJHvO8mytLk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58069

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:d0:c7:bd:65:87:46:d8:58:02:d7:07:00:d2:0b:68:ce:
         78:ec:ea:a8:fd:99:5f:ba:77:51:cf:ec:0f:09:6c:7d:b7:81:
         bc:88:7f:60:20:63:37:dc:d1:e4:4f:f9:96:27:49:b3:ab:c4:
         89:60:c4:34:11:09:33:ae:b6:f1:81:a4:70:a2:43:50:ca:cc:
         cc:43:b8:54:86:71:c0:da:51:51:44:61:c6:ea:0c:73:84:db:
         0c:c6:f2:6e:86:d8:0f:90:16:e0:77:37:c3:7b:70:39:55:b9:
         26:8f:fd:f5:36:5f:3d:52:72:7b:de:28:ca:96:1c:30:38:0c:
         ac:e7:51:bb:0a:32:e5:22:a8:f8:8b:94:17:2c:30:b5:19:46:
         85:18:5e:54:ba:8e:ff:4e:10:33:f6:62:45:ed:03:4c:2c:59:
         ed:2f:a6:13:9d:a2:ac:53:ab:ef:15:c8:b2:d3:c6:ff:47:ae:
         07:27:3e:19:ff:5d:fb:92:94:2d:3b:d4:62:23:82:c4:22:1b:
         b6:e1:85:43:22:4e:e7:e5:53:96:c6:f3:7d:e6:7f:be:66:1e:
         3e:c0:03:93:ea:c2:74:b8:5d:98:9c:91:22:46:0b:99:6e:a1:
         b1:16:e8:bf:0e:cd:3c:09:20:dd:1c:87:d8:79:0e:8a:5d:65:
         04:16:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:51:12 2026 by rpki-client