Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa
File:                     lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa (raw, json)
Hash identifier:          eIPKlqsvVegPXqVxpzyVoeYK0GG8XvbcCgUygdwYgwU=
Subject key identifier:   96:8E:42:B9:49:FA:29:8B:61:49:22:74:26:E4:D6:EA:97:63:86:3F
Certificate issuer:       /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial:       019D3E09BA862541FF482CA1F92C8A528EC0
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa
Signing time:             Mon 30 Mar 2026 09:18:38 +0000
ASPA not before:          Mon 30 Mar 2026 09:18:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            5426
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3e:09:ba:86:25:41:ff:48:2c:a1:f9:2c:8a:52:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
        Validity
            Not Before: Mar 30 09:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=968e42b949fa298b6149227426e4d6ea9763863f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:b6:8e:60:c8:8c:cc:ea:67:6a:11:a2:dd:
                    15:9e:7b:3e:10:e7:c9:1f:a5:59:f9:6d:3f:1e:a2:
                    ed:b9:4a:f6:ef:68:62:c7:75:29:1e:88:f1:0f:e9:
                    24:6f:c7:c4:01:3f:11:be:e7:ac:8b:51:da:f9:1f:
                    a9:77:55:b3:96:53:8c:d2:07:f7:fd:30:f8:d6:fd:
                    9f:b7:fa:b5:8d:43:68:03:d4:ba:9b:9a:fe:c4:5d:
                    bf:b5:f1:ff:14:6a:4e:11:12:ef:5e:5a:88:99:f8:
                    bf:7f:16:21:d5:27:8b:5b:eb:1d:be:79:72:ea:d2:
                    5c:b8:63:c1:01:52:b1:96:1d:e3:63:2b:09:5e:57:
                    20:1d:6a:70:d9:21:46:f9:44:1b:0c:68:bf:f3:3a:
                    43:92:39:c4:35:77:00:a0:5c:ca:9b:8d:10:97:ae:
                    40:58:eb:31:c8:f9:60:95:12:72:1c:09:b4:97:04:
                    0b:f9:80:3d:fa:51:7b:19:7d:ab:1c:77:ac:cb:06:
                    04:0e:95:22:01:7a:fb:65:d8:cc:8e:1d:e9:63:a2:
                    b2:d5:ed:60:4d:09:15:73:6b:e8:22:e6:be:c3:7d:
                    93:18:66:0a:15:1c:4e:cf:76:66:de:ef:1e:92:f1:
                    50:db:09:42:87:c5:aa:97:03:2d:be:6d:e0:45:44:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:42:B9:49:FA:29:8B:61:49:22:74:26:E4:D6:EA:97:63:86:3F
            X509v3 Authority Key Identifier:
                keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/lo5CuUn6KYthSSJ0JuTW6pdjhj8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5426

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:3e:e5:4e:50:24:41:b9:b8:f2:2c:35:af:11:8d:6a:00:
         ef:c1:46:e8:20:43:0b:36:97:c7:71:6a:12:a2:5f:89:88:1e:
         63:8d:8d:c9:a1:64:f3:96:60:e0:55:3d:61:68:bd:da:17:36:
         e8:9f:2e:7c:97:fa:bb:87:e3:ac:52:ba:34:45:e6:01:45:7d:
         14:f7:e7:bd:57:ce:0d:15:8f:4c:92:68:0c:af:a4:b5:b6:96:
         bd:69:36:b5:1b:16:3c:ce:7c:62:e9:c8:8d:b2:d8:98:98:11:
         dd:2e:5e:38:aa:05:c0:58:72:27:ad:a5:9d:70:51:2a:b7:ad:
         57:25:b8:89:ea:df:54:e3:db:32:16:8c:a7:d2:89:74:5d:fe:
         04:fd:ef:ed:cb:1e:ae:10:84:42:f2:4d:37:82:8d:06:97:38:
         5c:66:4f:87:9a:4a:c1:5c:ac:b8:3d:06:fb:a0:01:3d:0a:af:
         09:3e:3b:17:22:f8:d0:6f:eb:f0:4d:0b:f8:e9:05:b1:17:b4:
         47:73:c5:58:34:04:c1:ad:c9:72:9f:85:57:c0:42:3d:2d:6a:
         06:30:1f:c0:3a:11:89:eb:85:73:22:ba:b8:09:9e:fc:fd:7e:
         d0:b5:fd:45:0c:d0:e3:1e:6c:68:33:8a:10:8a:4b:28:9c:cf:
         80:a6:47:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:19 2026 by rpki-client