Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/Tx4rGOskR8UsbyOhXGF9kJnJ7vw.asa
File:                     Tx4rGOskR8UsbyOhXGF9kJnJ7vw.asa (raw, json)
Hash identifier:          IR65pK4PSkniZY6Jc9WLdUsu5O9juE1eZaJzF2M4+RM=
Subject key identifier:   4F:1E:2B:18:EB:24:47:C5:2C:6F:23:A1:5C:61:7D:90:99:C9:EE:FC
Certificate issuer:       /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial:       019E3EFC842B5A4339DCBA6DACDA6928322A
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/Tx4rGOskR8UsbyOhXGF9kJnJ7vw.asa
Signing time:             Tue 19 May 2026 06:46:36 +0000
ASPA not before:          Tue 19 May 2026 06:46:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41863
Providers:                AS: 30781
                          AS: 34019
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:3e:fc:84:2b:5a:43:39:dc:ba:6d:ac:da:69:28:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d5894923bb002a434128810607dfb526722004f
        Validity
            Not Before: May 19 06:46:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f1e2b18eb2447c52c6f23a15c617d9099c9eefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:00:ff:1d:6d:4b:16:43:c2:ee:9c:45:7b:
                    55:68:07:7d:52:1f:58:97:e3:d7:a7:8c:e6:83:9c:
                    be:8d:1b:1b:15:7c:82:90:15:bd:06:ab:eb:20:27:
                    77:cb:44:03:68:d8:3e:91:53:63:ed:2e:58:2c:6f:
                    aa:b3:94:4c:1a:60:6e:d5:1e:5d:e8:8c:98:64:2f:
                    7a:b2:fd:cb:c9:1e:c5:41:06:ee:5c:a5:6d:65:35:
                    2a:db:87:59:75:45:17:31:aa:d4:b9:f9:c7:74:1f:
                    df:60:64:e6:60:33:46:8f:f6:a1:88:2b:dd:af:ff:
                    e7:93:f9:81:18:1d:79:16:67:53:8d:b6:12:b5:8f:
                    3f:cb:40:3d:d5:71:53:c4:e9:e1:57:28:a5:35:19:
                    36:d3:b9:b3:61:72:68:c1:a6:56:75:f1:ab:a3:22:
                    43:e6:2d:7e:22:42:9d:87:69:a5:8e:2f:ab:ee:d3:
                    42:0b:51:d7:04:3b:0f:e4:84:0b:6e:76:f4:ef:23:
                    08:0c:62:ae:1d:ed:ee:1a:9c:52:5c:9d:24:26:fa:
                    07:53:55:ba:3f:2b:ed:cd:70:70:07:d6:ef:99:c5:
                    fe:39:8d:72:e9:39:a3:0e:79:17:da:98:52:79:41:
                    87:de:ab:e4:5c:04:fa:28:96:16:5f:4f:39:20:e6:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1E:2B:18:EB:24:47:C5:2C:6F:23:A1:5C:61:7D:90:99:C9:EE:FC
            X509v3 Authority Key Identifier:
                keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/Tx4rGOskR8UsbyOhXGF9kJnJ7vw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41863

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:07:0c:ea:a3:f4:18:98:7a:1b:91:6c:37:d2:41:2e:7e:
         58:11:b6:7f:be:db:c8:fc:10:72:eb:d3:48:4f:7c:ae:3b:9a:
         3d:64:b3:2a:0c:aa:ca:e4:c9:dd:eb:7d:42:d1:a1:9c:c1:cf:
         fa:5f:63:c8:da:51:ab:69:22:b4:9e:a2:26:3c:c6:d1:0b:16:
         92:30:cf:b1:58:17:5d:f8:47:3c:1a:f2:4b:e5:9c:e4:09:0f:
         da:10:a3:b0:d0:b1:93:a6:f2:02:fd:50:a6:4a:87:f6:61:a6:
         65:f8:69:f5:d4:0a:30:52:94:3f:07:15:0d:ab:a1:e9:b5:ed:
         51:81:99:85:6c:99:6b:7a:9c:f1:c3:a0:02:b4:35:37:8d:9d:
         a1:1f:d2:c6:20:9c:da:3d:a4:24:93:9d:9f:cb:30:af:8d:99:
         7d:fd:19:74:d1:bc:e9:11:ee:74:fb:c6:7e:9f:08:e7:c7:3d:
         30:10:e6:76:51:9e:1c:75:3d:97:af:cf:d7:17:b9:40:51:d0:
         89:1b:da:09:a7:7f:cc:ba:17:b0:9e:a4:e8:34:c7:63:2f:67:
         c6:14:53:7d:3c:ed:36:b2:29:82:40:96:91:b8:2d:86:61:2e:
         5a:8b:d4:39:28:71:3b:52:4b:b7:7d:0e:dd:75:21:cb:22:33:
         5f:da:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:29:19 2026 by rpki-client