Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/jLdlTOvaTnLzdI384tzQjMmvuCQ.asa
File:                     jLdlTOvaTnLzdI384tzQjMmvuCQ.asa (raw, json)
Hash identifier:          AtE6QEed/vH4h+oZyqsi/AUwZuEeulzvIR1SmrbV2x4=
Subject key identifier:   8C:B7:65:4C:EB:DA:4E:72:F3:74:8D:FC:E2:DC:D0:8C:C9:AF:B8:24
Certificate issuer:       /CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
Certificate serial:       01A1738348F0C88829CD82E844914C010EF5
Authority key identifier: 64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/jLdlTOvaTnLzdI384tzQjMmvuCQ.asa
Signing time:             Sun 25 Oct 2026 14:42:25 +0000
ASPA not before:          Sun 25 Oct 2026 14:42:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15562
Providers:                AS: 2914
                          AS: 3257
                          AS: 51088
                          AS: 206238
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:83:48:f0:c8:88:29:cd:82:e8:44:91:4c:01:0e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64496c4a7d3a23c38d2aacb46b06cb617547b11f
        Validity
            Not Before: Oct 25 14:42:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8cb7654cebda4e72f3748dfce2dcd08cc9afb824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:b5:a7:b7:ab:3d:d3:0e:8e:1a:3c:de:40:
                    e2:ab:5e:0c:1c:e5:d7:7a:0e:b1:48:23:ed:9c:9f:
                    bb:fa:0c:d7:83:e9:64:81:99:7f:d8:2f:6d:e7:03:
                    09:36:f7:2d:67:99:ca:72:21:b3:20:fe:fb:19:15:
                    de:2c:14:08:4e:4e:d1:29:96:28:c4:09:fb:d3:cc:
                    9c:d9:af:d9:e5:73:76:4f:48:37:96:c5:5d:c3:16:
                    17:c6:40:d6:9c:eb:7c:3b:c4:35:47:95:07:96:36:
                    d2:4e:fb:10:f1:de:c3:6a:75:25:0d:8c:6b:c4:97:
                    a2:9f:0d:ac:c9:dd:24:8b:85:4b:10:1d:ac:f2:c4:
                    3c:b3:d3:85:69:3b:3c:7d:f0:82:90:d2:a6:22:75:
                    29:e0:76:b7:fc:43:28:89:ea:21:ca:56:54:16:ec:
                    5a:d4:6b:f8:af:0f:8c:c6:b0:33:eb:d9:c0:1b:dd:
                    db:e3:02:1c:52:bb:d7:42:98:1e:14:ce:e1:72:bf:
                    74:79:04:a3:98:8d:ee:89:00:fd:50:ce:dc:78:bf:
                    94:b5:8c:bf:20:21:a1:57:cb:b5:38:b0:83:aa:ba:
                    be:5e:d4:d4:af:78:67:0c:d1:14:b7:49:6c:a6:af:
                    bd:8a:e5:71:36:03:49:fc:2e:21:7a:57:b2:1f:d0:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:65:4C:EB:DA:4E:72:F3:74:8D:FC:E2:DC:D0:8C:C9:AF:B8:24
            X509v3 Authority Key Identifier:
                keyid:64:49:6C:4A:7D:3A:23:C3:8D:2A:AC:B4:6B:06:CB:61:75:47:B1:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZElsSn06I8ONKqy0awbLYXVHsR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/jLdlTOvaTnLzdI384tzQjMmvuCQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/493283-e6cd-41bb-b5bc-78f60522d035/1/ZElsSn06I8ONKqy0awbLYXVHsR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15562

    Signature Algorithm: sha256WithRSAEncryption
         10:07:45:bc:88:db:fa:f9:8b:76:19:32:ac:be:5c:3c:8c:81:
         64:e2:f9:d6:06:30:f6:d8:a2:63:71:03:00:cf:eb:63:73:72:
         83:f8:36:fb:2d:d2:9e:4a:1d:d5:99:4e:4c:4c:2a:d7:b0:d7:
         ed:18:af:ed:c1:22:35:73:c0:00:d7:fe:fc:80:33:ae:a5:1e:
         0c:f0:05:43:13:83:de:74:8b:83:4d:2b:c9:93:39:0b:03:a8:
         ed:32:9a:3d:a7:fc:73:c1:34:c7:a5:0e:f5:8c:f2:57:8b:b2:
         09:46:fb:0a:90:a1:04:42:1f:ba:76:9a:0c:72:43:a7:1d:37:
         2c:7b:6d:c3:a4:ff:af:62:23:d8:d1:29:24:73:fb:00:69:71:
         ba:0d:5e:b5:6d:db:8d:0e:9a:f0:81:02:f1:96:19:28:81:70:
         c6:72:48:c6:8a:8d:8d:de:0f:9c:72:8d:2c:5e:34:7d:00:34:
         5a:ac:cc:bc:37:d1:55:5b:26:d4:14:af:14:56:14:dd:6e:bd:
         ab:cc:17:c6:f2:43:0a:1a:f7:26:d7:4d:ab:00:94:da:38:36:
         cb:82:e5:6b:0c:d9:f8:29:30:3a:25:f0:28:7a:33:5c:7f:c8:
         57:1c:b8:51:10:26:50:3e:ac:21:31:8f:60:cf:d4:6b:7f:93:
         0b:dd:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:14:31 2026 by rpki-client