Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS58299.asa
File:                     AS58299.asa (raw, json)
Hash identifier:          lS6Cqta7yyc3bcH0lCFZvPEcgeVYDt45v3fuV6uqR4M=
Subject key identifier:   DB:45:A7:8E:99:A2:95:7A:0C:27:CE:5A:E5:04:94:08:FA:55:10:74
Certificate issuer:       /CN=fac4708d7e265db1044f9bb0ee8728587f48b484
Certificate serial:       0A90CD963E035809D358E36D44F8D8C563F2F27F
Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS58299.asa
Signing time:             Thu 08 Oct 2026 18:07:38 +0000
ASPA not before:          Thu 08 Oct 2026 18:02:38 +0000
ASPA not after:           Thu 07 Oct 2027 18:07:38 +0000
Customer ASID:            58299
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 6830
                          AS: 6939
                          AS: 9002
                          AS: 13030
                          AS: 25369
                          AS: 34549
                          AS: 41666
                          AS: 58115
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:90:cd:96:3e:03:58:09:d3:58:e3:6d:44:f8:d8:c5:63:f2:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484
        Validity
            Not Before: Oct  8 18:02:38 2026 GMT
            Not After : Oct  7 18:07:38 2027 GMT
        Subject: CN=DB45A78E99A2957A0C27CE5AE5049408FA551074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:57:f1:45:3b:6a:cd:cf:36:7a:02:29:06:
                    de:ca:3a:b2:03:14:90:da:95:b5:b6:cb:fa:b5:8e:
                    6c:55:4d:b6:f7:8b:23:5e:50:d4:59:0d:08:81:a7:
                    39:3a:24:53:51:b4:a7:17:3e:1d:47:3b:d0:98:a3:
                    01:39:ad:59:37:a9:d8:07:0d:61:c2:54:62:35:78:
                    a1:95:7d:70:14:74:a6:09:9e:47:d3:1d:82:18:81:
                    23:2f:73:6d:cf:6a:f0:bc:48:93:94:40:f6:78:cc:
                    0c:91:8c:88:8b:c4:2e:23:39:b1:09:e6:f7:2b:6c:
                    15:50:0a:97:3b:3e:12:ca:33:e1:e4:84:68:33:66:
                    d0:db:96:7e:63:bb:a9:bc:2f:87:ec:2e:f5:19:16:
                    f0:6b:61:4d:3e:bb:a7:29:83:36:c2:aa:bd:e7:48:
                    db:af:98:f4:6c:91:ca:36:cd:23:f7:20:68:ff:76:
                    2b:f1:21:59:66:ef:a0:9d:68:34:3c:7a:5d:26:0f:
                    d9:8b:51:bb:db:92:05:ab:11:fe:2d:cd:55:ea:d8:
                    1c:b9:f5:18:b8:77:99:90:7b:1a:d2:ba:45:7b:4f:
                    6e:31:9b:b7:04:0b:69:24:cc:61:e0:92:0f:5d:85:
                    c9:4d:58:36:c1:b3:22:d4:35:bf:66:ad:1c:20:cb:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:A7:8E:99:A2:95:7A:0C:27:CE:5A:E5:04:94:08:FA:55:10:74
            X509v3 Authority Key Identifier:
                keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/AS58299.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58299

    Signature Algorithm: sha256WithRSAEncryption
         01:19:aa:0c:05:c8:cd:df:88:12:4c:40:ac:0c:e2:be:57:c1:
         e2:97:37:b6:75:b8:5f:74:09:b6:83:33:9c:90:7b:67:72:0e:
         71:19:65:e0:3b:6d:12:ea:5c:bb:30:ed:c8:1f:20:fe:b4:c8:
         3e:55:ca:49:9b:ca:cb:6d:9c:b7:82:41:e3:19:d3:68:b1:3c:
         1b:c6:3b:4c:c3:99:40:b7:6a:cc:82:79:39:92:59:75:6d:b8:
         a4:55:09:6f:9a:21:41:2f:76:66:60:18:e4:46:dc:51:bd:1b:
         6a:dd:f6:81:e0:a9:92:33:d8:9b:e9:c9:f7:29:54:15:59:6b:
         c8:55:1c:e8:0b:21:46:92:b2:3c:15:16:df:e6:37:e2:f5:48:
         27:ef:3b:3f:16:9a:0d:91:94:45:2c:e4:c6:7c:49:20:30:0d:
         4e:b4:07:d3:e5:8b:f1:06:f9:cf:f3:a6:eb:b3:da:03:07:88:
         01:66:29:d8:09:09:9a:71:36:82:4d:12:17:51:a9:12:57:05:
         31:5f:98:85:e5:45:97:4a:95:48:2d:38:0d:87:07:61:1a:92:
         ae:88:07:66:9d:e1:77:9b:b4:ba:70:36:38:d6:e2:6c:e7:a5:
         62:44:67:87:15:c5:c8:2b:2b:89:31:ed:50:2b:b6:5b:00:a6:
         d4:ce:2f:98
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUCpDNlj4DWAnTWONtRPjYxWPy8n8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3
ZjQ4YjQ4NDAeFw0yNjEwMDgxODAyMzhaFw0yNzEwMDcxODA3MzhaMDMxMTAvBgNV
BAMTKERCNDVBNzhFOTlBMjk1N0EwQzI3Q0U1QUU1MDQ5NDA4RkE1NTEwNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVFfxRTtqzc82egIpBt7KOrID
FJDalbW2y/q1jmxVTbb3iyNeUNRZDQiBpzk6JFNRtKcXPh1HO9CYowE5rVk3qdgH
DWHCVGI1eKGVfXAUdKYJnkfTHYIYgSMvc23PavC8SJOUQPZ4zAyRjIiLxC4jObEJ
5vcrbBVQCpc7PhLKM+HkhGgzZtDbln5ju6m8L4fsLvUZFvBrYU0+u6cpgzbCqr3n
SNuvmPRskco2zSP3IGj/divxIVlm76CdaDQ8el0mD9mLUbvbkgWrEf4tzVXq2By5
9Ri4d5mQexrSukV7T24xm7cEC2kkzGHgkg9dhclNWDbBsyLUNb9mrRwgyxXVAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU20WnjpmilXoMJ85a5QSUCPpVEHQwHwYDVR0j
BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5
MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j
cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI
OUl0SVEuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81YjU4ZTY0Ni1lN2Ey
LTQ2NWMtODdjNS00M2MzNTlhZDkzNjkvMC9BUzU4Mjk5LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDjuzANBgkq
hkiG9w0BAQsFAAOCAQEAARmqDAXIzd+IEkxArAzivlfB4pc3tnW4X3QJtoMznJB7
Z3IOcRll4DttEupcuzDtyB8g/rTIPlXKSZvKy22ct4JB4xnTaLE8G8Y7TMOZQLdq
zIJ5OZJZdW24pFUJb5ohQS92ZmAY5EbcUb0bat32geCpkjPYm+nJ9ylUFVlryFUc
6AshRpKyPBUW3+Y34vVIJ+87PxaaDZGURSzkxnxJIDANTrQH0+WL8Qb5z/Om67Pa
AweIAWYp2AkJmnE2gk0SF1GpElcFMV+YheVFl0qVSC04DYcHYRqSrogHZp3hd5u0
unA2ONbibOelYkRnhxXFyCsriTHtUCu2WwCm1M4vmA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:00:47 2026 by rpki-client