Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/X-k71aDoZWtFtR_cnu9r97seWXY.asa
File:                     X-k71aDoZWtFtR_cnu9r97seWXY.asa (raw, json)
Hash identifier:          lw8Nl/kqTmv0YBXcCPnKH/oG1mGI+Wcg8DdG5SlWra4=
Subject key identifier:   5F:E9:3B:D5:A0:E8:65:6B:45:B5:1F:DC:9E:EF:6B:F7:BB:1E:59:76
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       019E23B14701CFF610EF586AE626D9550B35
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/X-k71aDoZWtFtR_cnu9r97seWXY.asa
Signing time:             Wed 13 May 2026 23:34:40 +0000
ASPA not before:          Wed 13 May 2026 23:34:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62443
Providers:                AS: 39421
                          AS: 47160
                          AS: 62000
                          AS: 203698
                          AS: 207992
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:23:b1:47:01:cf:f6:10:ef:58:6a:e6:26:d9:55:0b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: May 13 23:34:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5fe93bd5a0e8656b45b51fdc9eef6bf7bb1e5976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:18:4b:ff:98:6e:c1:cf:58:2d:13:8d:01:
                    3b:ca:7f:f1:d0:81:7d:f3:ab:68:72:57:31:d0:79:
                    fb:7a:aa:72:a5:a5:66:27:2c:8b:3a:ea:2d:79:28:
                    33:cd:e0:a9:e4:93:9d:70:0e:36:32:6e:3c:79:cd:
                    d8:a1:cf:d3:e5:25:5b:b1:6c:14:cb:d1:7f:c6:61:
                    f7:7b:d1:f8:f3:d7:cd:80:58:ad:9f:ca:c0:6a:c5:
                    b0:6d:e2:73:d1:55:2f:50:f5:f1:d2:c8:d2:64:ac:
                    5b:58:07:cf:51:76:d7:54:91:a8:a0:9f:dc:e6:12:
                    41:ce:2b:3f:5a:1f:6f:87:be:f4:eb:d6:a6:19:83:
                    d0:73:de:19:e0:db:22:c3:6c:da:0a:02:9d:8e:64:
                    05:71:ba:94:b9:32:3a:58:cf:2f:b3:e8:bc:07:fc:
                    07:1e:92:70:e0:9d:04:27:70:90:20:0f:14:ce:8d:
                    ab:08:ec:33:3f:ac:dd:e9:dd:8e:7b:eb:84:ac:c8:
                    1e:77:a8:31:8b:40:f1:60:8c:3b:1f:6a:24:58:9b:
                    e5:bd:30:a2:a3:12:e3:b2:71:9a:b1:75:54:db:ca:
                    db:ce:0e:c9:75:e4:4b:34:5a:e7:c4:49:12:bf:29:
                    7c:40:5c:84:e8:24:6e:5a:2f:d5:01:64:f1:9c:fa:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:3B:D5:A0:E8:65:6B:45:B5:1F:DC:9E:EF:6B:F7:BB:1E:59:76
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/X-k71aDoZWtFtR_cnu9r97seWXY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62443

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:6c:1a:8b:98:53:6f:bf:9e:ce:8e:c5:04:66:02:87:21:
         b9:73:ce:48:15:1e:b2:d6:a2:93:f6:c2:a7:c1:11:d0:05:4d:
         1f:f7:7a:3f:f1:59:f0:e9:23:03:33:20:46:d5:e9:a3:4c:10:
         68:e4:2f:f5:5a:cf:f4:25:18:d9:1c:af:83:b5:e8:3d:9c:38:
         3e:42:f8:d0:d7:45:64:25:1f:e5:b0:c3:d3:16:6a:d5:ad:30:
         02:a8:19:3a:3f:7c:2e:54:0e:51:b2:58:82:8f:47:f1:ab:b8:
         5e:72:9b:26:dd:4e:77:92:ea:34:1a:fe:fd:b1:97:4f:ba:7e:
         6e:39:0c:96:f2:1a:2e:4b:11:95:62:e6:0e:01:55:00:e0:03:
         cd:e1:21:65:53:3d:d4:aa:b9:e8:a6:56:c2:ba:5c:a2:1a:12:
         68:db:20:33:c0:f5:df:2f:bd:7f:66:a2:8d:6b:8c:61:94:17:
         86:e2:22:49:b3:2c:0e:d0:ee:fb:77:f3:f3:d4:88:7a:bc:45:
         c4:ae:d0:01:0a:b7:5b:ca:d1:ce:41:29:7e:ff:d4:3e:dd:b6:
         5a:7c:e6:4e:dd:9f:05:1e:45:af:f7:28:8d:29:41:cb:49:18:
         c0:05:21:21:ca:77:39:b4:69:13:f7:11:b8:3d:f4:48:93:f0:
         7f:5c:21:a5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ4jsUcBz/YQ71hq5ibZVQs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy
YTUzYjkwHhcNMjYwNTEzMjMzNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmU5M2JkNWEwZTg2NTZiNDViNTFmZGM5ZWVmNmJmN2JiMWU1OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kgYS/+YbsHPWC0TjQE7yn/x0IF9
86toclcx0Hn7eqpypaVmJyyLOuoteSgzzeCp5JOdcA42Mm48ec3Yoc/T5SVbsWwU
y9F/xmH3e9H489fNgFitn8rAasWwbeJz0VUvUPXx0sjSZKxbWAfPUXbXVJGooJ/c
5hJBzis/Wh9vh77069amGYPQc94Z4Nsiw2zaCgKdjmQFcbqUuTI6WM8vs+i8B/wH
HpJw4J0EJ3CQIA8Uzo2rCOwzP6zd6d2Oe+uErMged6gxi0DxYIw7H2okWJvlvTCi
oxLjsnGasXVU28rbzg7JdeRLNFrnxEkSvyl8QFyE6CRuWi/VAWTxnPqlZwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFF/pO9Wg6GVrRbUf3J7va/e7Hll2MB8GA1UdIwQY
MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt
YjBlYjY3MTVlMGFmLzEvWC1rNzFhRG9aV3RGdFJfY251OXI5N3NlV1hZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm
LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDz6zANBgkqhkiG
9w0BAQsFAAOCAQEAOudsGouYU2+/ns6OxQRmAochuXPOSBUestaik/bCp8ER0AVN
H/d6P/FZ8OkjAzMgRtXpo0wQaOQv9VrP9CUY2Ryvg7XoPZw4PkL40NdFZCUf5bDD
0xZq1a0wAqgZOj98LlQOUbJYgo9H8au4XnKbJt1Od5LqNBr+/bGXT7p+bjkMlvIa
LksRlWLmDgFVAOADzeEhZVM91Kq56KZWwrpcohoSaNsgM8D13y+9f2aijWuMYZQX
huIiSbMsDtDu+3fz89SIerxFxK7QAQq3W8rRzkEpfv/UPt22WnzmTt2fBR5Fr/co
jSlBy0kYwAUhIcp3ObRpE/cRuD30SJPwf1whpQ==
-----END CERTIFICATE-----
Generated at Fri May 15 05:35:37 2026 by rpki-client