Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/lafGWRBlTtZ8jNLom3QoN2jqZ0w.asa
File:                     lafGWRBlTtZ8jNLom3QoN2jqZ0w.asa (raw, json)
Hash identifier:          83VNXN8tEOCjD3fPGmS3NatvQ7ZJcMUFAgpWQM/5mUY=
Subject key identifier:   95:A7:C6:59:10:65:4E:D6:7C:8C:D2:E8:9B:74:28:37:68:EA:67:4C
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       019E4B522B9EF40B793662AD7D1F54D1A87F
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/lafGWRBlTtZ8jNLom3QoN2jqZ0w.asa
Signing time:             Thu 21 May 2026 16:15:36 +0000
ASPA not before:          Thu 21 May 2026 16:15:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15945
Providers:                AS: 174
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4b:52:2b:9e:f4:0b:79:36:62:ad:7d:1f:54:d1:a8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: May 21 16:15:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=95a7c65910654ed67c8cd2e89b74283768ea674c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:6c:4f:4b:5a:44:95:cb:c1:8c:3e:be:c7:
                    06:cd:aa:08:0e:95:d9:82:92:58:98:09:57:56:29:
                    a2:a2:46:54:37:01:54:a5:0c:e9:0a:35:fb:2a:d8:
                    cf:7f:7a:20:f7:18:e2:a1:ce:41:b0:f5:4f:0a:4b:
                    b8:d4:e7:00:dc:21:0e:2f:f5:40:e0:b5:17:db:db:
                    f8:f1:e0:82:83:1f:cb:4e:06:84:90:21:3c:c7:88:
                    f5:2b:27:dd:26:b9:9e:9e:8e:3e:7f:9a:85:bb:96:
                    5b:98:29:6a:0d:d4:2c:2a:1b:8f:7a:74:33:06:0d:
                    8f:8f:03:3f:17:cd:c7:98:bf:f1:e6:f2:22:25:ac:
                    42:2a:87:5c:8d:9d:c6:9e:61:9d:4a:81:8a:bb:c1:
                    bd:94:80:1d:17:8d:a2:26:3f:9a:01:22:be:a8:75:
                    9f:43:d2:25:8a:71:94:37:8e:81:60:53:ff:29:8c:
                    e6:94:6a:60:88:e5:13:9c:8e:d2:d1:47:fa:67:93:
                    82:46:7b:b4:e1:0c:dd:e5:a4:01:73:2b:97:bf:84:
                    8a:1e:2f:03:84:ab:aa:10:40:45:ed:f6:cb:e0:7f:
                    a1:67:a5:55:fd:ab:f6:fc:22:b8:77:41:66:72:53:
                    00:6a:ff:54:7c:6a:ca:3a:c6:73:8e:ee:bc:98:ce:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A7:C6:59:10:65:4E:D6:7C:8C:D2:E8:9B:74:28:37:68:EA:67:4C
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/lafGWRBlTtZ8jNLom3QoN2jqZ0w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15945

    Signature Algorithm: sha256WithRSAEncryption
         73:91:ca:c8:ce:84:ef:69:02:1c:93:27:a0:16:4f:19:4c:2e:
         59:f9:9d:88:33:34:38:ee:11:44:47:d2:d1:fa:c2:e2:23:ac:
         00:ad:95:fb:58:6e:e7:92:25:6e:62:7d:2f:0e:da:71:41:cd:
         af:d9:d6:ba:08:db:d4:e3:9f:e4:bb:45:98:9d:a9:94:48:19:
         6a:30:5c:6d:d9:18:9e:92:38:9c:19:51:a2:e8:2e:56:fe:93:
         6d:ce:89:b7:3f:3d:ba:c3:2f:52:9c:a3:6f:8f:a7:14:5a:2f:
         e9:3d:14:7b:0d:6f:7c:68:e8:a4:5c:35:84:8c:e9:75:5e:f6:
         6d:8d:43:05:7e:70:db:09:2d:6c:23:8d:1a:8b:89:34:5e:60:
         29:de:4f:53:c7:0d:b9:3e:ac:9b:ad:56:13:5d:a4:f3:98:82:
         08:c4:2a:89:5b:dc:e7:61:ff:21:48:a4:6e:22:43:64:82:ad:
         6a:12:46:c6:c4:15:1e:ff:56:e3:b0:f4:a9:59:c6:bd:2c:be:
         71:0a:73:0e:41:96:63:c9:19:78:82:3e:fa:05:cb:4d:a1:00:
         98:0d:87:db:e0:b5:5c:10:84:52:53:ed:41:3b:fe:c5:63:37:
         08:52:ea:05:ad:9a:3d:b2:77:32:36:5d:40:c1:4c:4f:f4:6f:
         f2:8a:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:04:39 2026 by rpki-client