Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/Em9mVTNEq4gNB-Xm0pww2ANvcrY.asa
File:                     Em9mVTNEq4gNB-Xm0pww2ANvcrY.asa (raw, json)
Hash identifier:          iLf13+8dZq1D1jXLapBh9/+YUrT+EfALC60UVoChVyw=
Subject key identifier:   12:6F:66:55:33:44:AB:88:0D:07:E5:E6:D2:9C:30:D8:03:6F:72:B6
Certificate issuer:       /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial:       019FB26C637CAD36AB29AA58E81D66DE8ED6
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/Em9mVTNEq4gNB-Xm0pww2ANvcrY.asa
Signing time:             Thu 30 Jul 2026 09:47:55 +0000
ASPA not before:          Thu 30 Jul 2026 09:47:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215957
Providers:                AS: 13287
                          AS: 29119
                          AS: 31577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b2:6c:63:7c:ad:36:ab:29:aa:58:e8:1d:66:de:8e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
        Validity
            Not Before: Jul 30 09:47:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=126f66553344ab880d07e5e6d29c30d8036f72b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:b9:48:47:10:c2:05:bd:76:5d:b8:2c:66:
                    ae:ae:79:2e:ab:75:90:52:fd:14:95:a1:be:ab:dc:
                    41:7c:cb:65:0f:5f:28:f5:46:01:91:1c:72:b6:49:
                    45:03:53:1c:e0:7a:29:60:d1:7e:7f:07:86:e9:c5:
                    93:2f:f8:32:0b:7f:9c:0d:78:89:17:d5:4b:58:29:
                    22:a5:6d:8c:bf:d5:ad:d8:91:4c:a6:a4:44:54:4f:
                    80:6f:94:7d:0b:26:df:15:31:bf:b2:f0:25:c1:dc:
                    22:c7:87:1a:b6:68:0f:45:e7:3b:ba:2c:c5:4d:b4:
                    b6:8a:02:e8:d4:f6:6d:b2:e9:ab:8a:87:03:79:1e:
                    f5:86:8d:9c:9e:db:54:f6:ff:f2:21:63:03:8e:a4:
                    9b:65:7b:63:e1:02:bf:62:d5:ef:ff:3a:c3:5a:e4:
                    4b:f9:d3:8c:5e:a8:db:59:c7:ec:20:c2:60:74:08:
                    ac:c6:41:d5:9c:2f:54:d6:e9:a6:37:97:71:70:e2:
                    85:bd:fb:18:11:ac:df:d2:f7:9e:2f:06:59:47:3c:
                    6a:3d:ce:ab:0d:26:0a:c3:59:96:47:f0:ec:14:34:
                    f3:ad:b8:2e:2e:8a:fc:93:fa:3c:2c:d6:6d:67:75:
                    0f:14:c8:5a:c5:58:0f:08:f7:0e:fa:ce:47:f8:4d:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6F:66:55:33:44:AB:88:0D:07:E5:E6:D2:9C:30:D8:03:6F:72:B6
            X509v3 Authority Key Identifier:
                keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/Em9mVTNEq4gNB-Xm0pww2ANvcrY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215957

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:d2:fb:40:36:96:cf:68:35:6e:ab:52:fd:29:f9:01:8a:
         7c:79:ae:52:99:21:fa:e2:66:90:49:27:e8:cf:4b:51:f5:b2:
         08:33:28:e2:3c:40:0e:ee:21:b1:b7:93:09:fc:d1:df:97:c6:
         42:9e:a8:1b:d5:73:8b:01:f3:98:81:b8:a5:58:2c:7e:46:69:
         d9:34:94:ec:97:b5:91:a0:d5:c0:be:a5:c3:d4:c1:7d:d5:90:
         b4:bb:50:f5:55:d1:cd:f5:69:f6:1c:e1:1a:15:11:a5:d1:9c:
         1f:0f:eb:c4:74:10:48:b8:6e:7a:11:62:bf:f3:b7:68:8a:4a:
         2e:fa:33:49:c8:07:bc:14:52:be:b7:43:79:54:72:c9:af:46:
         ca:cb:d6:a0:38:01:76:d6:cc:e7:23:26:7d:44:09:16:f1:2d:
         21:eb:71:28:f8:61:aa:89:f4:3f:3f:e4:41:97:5f:ca:46:12:
         0d:4d:3f:f4:98:8b:a2:b2:e4:a0:c8:3e:01:fd:4d:47:fb:af:
         73:a9:fc:67:74:1a:d0:c4:e0:c8:be:7f:8a:4f:a7:6b:24:78:
         02:0a:8a:7f:98:c4:3f:58:46:e3:70:e6:ba:56:8c:17:96:53:
         ea:6d:a9:b6:b4:60:b5:20:fe:6f:f4:52:12:a3:4f:be:42:f9:
         de:d2:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:22 2026 by rpki-client