Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/eNxkL16VsfbxNpT4qIe7Vwh1riY.asa
File:                     eNxkL16VsfbxNpT4qIe7Vwh1riY.asa (raw, json)
Hash identifier:          ZmJ1Py74vcSNkNeWOaFBer3G+b9/WXs2+n2RLvj/wcM=
Subject key identifier:   78:DC:64:2F:5E:95:B1:F6:F1:36:94:F8:A8:87:BB:57:08:75:AE:26
Certificate issuer:       /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial:       019DD45F00C7E44B7187EE63A7B96FA1E113
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/eNxkL16VsfbxNpT4qIe7Vwh1riY.asa
Signing time:             Tue 28 Apr 2026 13:54:49 +0000
ASPA not before:          Tue 28 Apr 2026 13:54:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58171
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d4:5f:00:c7:e4:4b:71:87:ee:63:a7:b9:6f:a1:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
        Validity
            Not Before: Apr 28 13:54:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78dc642f5e95b1f6f13694f8a887bb570875ae26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:ef:9a:9f:cd:98:ea:dc:a5:71:6f:11:8b:
                    66:10:2c:ee:ad:cc:24:7e:52:c7:8f:ac:6a:ad:f5:
                    dc:fe:cd:e8:bc:16:33:27:56:5b:10:13:4d:3b:be:
                    cc:31:cc:0f:dd:6b:5a:2c:c4:47:8a:c0:ed:73:49:
                    00:19:80:2b:e7:1f:56:96:ca:6e:42:0b:0d:62:28:
                    a9:ff:c4:6a:ce:f0:af:10:4b:2e:db:a6:21:95:b1:
                    0d:c2:ea:e2:50:dc:da:1e:19:c0:79:14:2b:6a:3e:
                    7f:42:04:d3:95:9a:be:62:cf:02:90:84:aa:af:60:
                    91:46:01:65:07:97:fa:08:43:ec:c5:7e:2d:53:cf:
                    ac:02:ed:30:dd:32:76:6f:bd:7b:28:62:14:22:43:
                    a8:3b:8b:58:19:af:61:fa:95:64:40:3d:14:d8:33:
                    e1:c9:4b:7e:7c:fb:95:06:c8:50:20:a3:51:2f:6f:
                    70:7a:20:98:ff:e4:7e:88:29:37:9f:34:47:43:b3:
                    7a:e0:2f:4c:ef:a4:b1:30:f3:47:7e:06:c4:83:0d:
                    fe:54:93:53:fe:c6:03:04:31:91:5a:d2:9b:5e:24:
                    97:80:99:64:69:34:2e:f2:19:06:96:a1:93:6e:bf:
                    2b:b5:6c:94:35:1b:8f:c5:e7:0a:dd:6c:aa:00:3d:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:64:2F:5E:95:B1:F6:F1:36:94:F8:A8:87:BB:57:08:75:AE:26
            X509v3 Authority Key Identifier:
                keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/eNxkL16VsfbxNpT4qIe7Vwh1riY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58171

    Signature Algorithm: sha256WithRSAEncryption
         2c:16:f3:55:a4:26:43:80:a3:f6:d0:43:3d:2c:5c:26:df:49:
         c4:61:d3:34:df:52:10:dd:fc:c6:53:2d:3f:cb:a5:74:c1:c8:
         d2:9a:a5:b5:87:80:80:9f:3d:b6:ac:ab:d7:81:ed:5a:b7:b5:
         a7:15:90:86:ca:f0:b5:8f:99:8a:ba:d9:99:92:19:4f:5c:2f:
         77:bb:a1:fb:a2:f4:a7:13:47:de:d4:b0:e8:03:ae:07:3a:da:
         10:8a:7f:39:7c:02:fd:72:ef:1e:e1:10:6b:56:8c:8f:8f:6f:
         50:69:3c:01:0a:37:44:72:cd:49:55:75:55:b2:86:23:df:25:
         f5:cd:55:5f:89:a8:4b:c3:a3:74:26:25:84:9c:97:c6:b9:b8:
         1f:1c:bd:2a:1a:2b:78:a3:3e:4b:3c:d4:ce:4c:ff:9b:ff:7f:
         cb:0f:36:fe:c1:ec:91:34:72:e6:dc:43:bb:32:2b:18:14:4b:
         80:ce:2f:b7:3c:ed:89:28:d9:4f:ba:1b:ba:e4:a6:7c:c8:7e:
         ef:92:ca:47:e3:9c:0c:5e:08:fc:48:f8:ec:f3:86:c8:85:33:
         e3:7b:fb:3a:e4:86:0c:55:9a:9c:59:a4:4e:7f:41:77:7a:b9:
         dd:d9:0d:76:3a:82:5b:f1:6f:68:70:82:64:b1:63:ee:88:5a:
         4c:dd:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:07 2026 by rpki-client