Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/r5aXV61T92-yzOB2Z49Y9-3TynM.asa
File:                     r5aXV61T92-yzOB2Z49Y9-3TynM.asa (raw, json)
Hash identifier:          MvJ/DmH8Eg1ibE50/NXD4S3pB7Yv8nVCUiIqv5J7rtk=
Subject key identifier:   AF:96:97:57:AD:53:F7:6F:B2:CC:E0:76:67:8F:58:F7:ED:D3:CA:73
Certificate issuer:       /CN=d68483e19ac1356cedce2e2ac2aa266b4be5782a
Certificate serial:       01A15E240D8D358F844600EC65CFF2C4CF10
Authority key identifier: D6:84:83:E1:9A:C1:35:6C:ED:CE:2E:2A:C2:AA:26:6B:4B:E5:78:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oSD4ZrBNWztzi4qwqoma0vleCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/r5aXV61T92-yzOB2Z49Y9-3TynM.asa
Signing time:             Wed 21 Oct 2026 11:06:23 +0000
ASPA not before:          Wed 21 Oct 2026 11:06:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41292
Providers:                AS: 8717
                          AS: 41313
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oSD4ZrBNWztzi4qwqoma0vleCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 20:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:24:0d:8d:35:8f:84:46:00:ec:65:cf:f2:c4:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d68483e19ac1356cedce2e2ac2aa266b4be5782a
        Validity
            Not Before: Oct 21 11:06:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=af969757ad53f76fb2cce076678f58f7edd3ca73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:14:da:c6:0d:f3:1d:78:7a:7e:14:5e:b4:37:
                    ce:55:a1:1c:ef:f8:0c:bb:cc:99:46:bc:99:5f:bf:
                    b5:f1:ac:d0:96:64:0d:fd:44:67:e4:a1:0d:b0:ef:
                    17:8b:e1:9b:e5:79:0f:ad:d5:cc:ea:81:c9:3d:3c:
                    a9:9e:74:28:71:5f:de:55:53:2c:f1:b2:61:c9:91:
                    3c:97:1c:27:37:b1:9d:5e:50:71:bf:8e:da:09:86:
                    30:82:bb:2e:5b:88:0b:4f:ad:02:62:55:f9:8e:97:
                    00:45:2c:88:ae:14:8b:4f:c6:d6:cc:90:ee:6b:1a:
                    ef:da:c8:ee:9e:1c:b1:eb:3f:19:9d:c0:f2:7e:af:
                    96:18:25:fd:27:34:f1:cb:5d:a3:d2:5f:8c:ea:6f:
                    e6:df:1b:9e:9c:51:fd:fd:32:bb:ba:15:80:62:97:
                    56:30:54:36:7d:5e:b9:55:bd:f0:74:a7:bf:50:e8:
                    2e:5e:70:2e:e6:cd:aa:a1:dd:1d:11:9a:7d:38:59:
                    8a:e9:ff:3d:fa:56:df:e8:cc:85:01:c4:9a:0b:38:
                    c7:3b:fe:fa:e8:fb:ed:9d:85:94:78:a9:1c:54:f1:
                    d6:22:d0:b9:c5:8c:e9:ec:63:c0:1e:07:83:08:b0:
                    09:a5:06:19:bb:53:e4:c0:71:4a:76:04:92:72:31:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:96:97:57:AD:53:F7:6F:B2:CC:E0:76:67:8F:58:F7:ED:D3:CA:73
            X509v3 Authority Key Identifier:
                keyid:D6:84:83:E1:9A:C1:35:6C:ED:CE:2E:2A:C2:AA:26:6B:4B:E5:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oSD4ZrBNWztzi4qwqoma0vleCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/r5aXV61T92-yzOB2Z49Y9-3TynM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41292

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:b5:3e:78:95:70:44:a2:49:af:d9:68:04:bc:fb:92:37:
         b0:4c:fe:14:cc:bb:35:8e:59:34:26:b3:fc:1e:cb:0a:7e:af:
         53:37:f5:1f:2b:af:a4:b5:e3:79:01:32:13:93:1f:d3:ae:ca:
         98:06:c6:a2:dc:ad:ab:8a:0e:77:82:c3:5b:b4:c8:ee:63:7e:
         9d:49:68:f0:7e:92:2e:00:5a:08:d9:8b:a7:41:e1:0c:cd:bc:
         0a:86:75:ff:8a:e4:a9:c6:21:27:98:de:7e:f8:48:df:75:2d:
         c5:a8:04:49:b1:05:4f:a2:79:bf:0a:d3:d2:34:72:b5:e2:fc:
         39:85:f2:5e:d6:e5:40:83:e1:92:0c:68:22:38:f0:9b:f3:ef:
         dd:dd:ad:3a:84:1b:16:2c:ca:97:bf:2a:a4:ff:17:42:46:4c:
         e8:f2:f9:1d:52:ee:d6:7f:27:a4:37:a1:76:5b:2b:6c:ca:b3:
         b5:e0:d9:b3:10:ca:fe:e8:86:b5:ba:60:57:92:c0:d5:3d:72:
         c0:4e:3d:9a:45:8b:85:71:08:a1:5b:10:05:9f:3d:f2:94:f0:
         d7:69:e4:63:c9:aa:dd:c2:a3:5b:bb:d9:d9:76:0e:5b:30:10:
         80:43:53:2a:9e:06:5f:77:4b:19:7a:a7:a3:8a:de:fc:17:67:
         ad:7d:ca:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:01 2026 by rpki-client