Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa
File:                     Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (raw, json)
Hash identifier:          6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=
Subject key identifier:   2A:5F:00:BF:C1:D3:4A:AA:AD:B0:82:8F:14:9F:5E:00:CD:6D:71:6F
Certificate issuer:       /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial:       019D90B4C83DD058F635AD698FAF0C82FC0A
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa
Signing time:             Wed 15 Apr 2026 10:34:20 +0000
ASPA not before:          Wed 15 Apr 2026 10:34:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15713
Providers:                AS: 34187
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:90:b4:c8:3d:d0:58:f6:35:ad:69:8f:af:0c:82:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
        Validity
            Not Before: Apr 15 10:34:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2a5f00bfc1d34aaaadb0828f149f5e00cd6d716f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:cc:f3:6e:17:2b:97:85:aa:71:52:f3:53:
                    83:03:e0:31:f2:b4:f0:6b:f8:e5:95:53:0e:2a:11:
                    f8:ef:a4:c1:ed:ad:02:ba:74:4e:c9:91:e3:76:a0:
                    14:77:a8:78:06:3e:38:ad:1e:c5:91:a4:dd:14:3b:
                    f2:1c:16:9c:5e:44:60:4c:9c:b8:57:0e:ed:8a:78:
                    f8:c6:fb:f0:5d:90:4c:14:96:77:7d:91:bb:6c:01:
                    e0:d7:bd:2d:e7:10:27:97:e2:48:2b:93:39:3f:95:
                    e0:bb:a6:0e:1c:7e:c2:07:ce:9b:ba:a8:4b:db:f7:
                    c4:6b:0b:b2:ab:25:63:fd:ff:75:7d:15:b6:98:64:
                    db:a7:12:23:17:d6:3e:ac:18:3d:12:fe:da:a7:1c:
                    68:6c:19:38:32:a4:ae:36:ba:37:14:4d:5c:a6:2e:
                    8a:76:e5:3a:e8:a1:9b:ca:69:3f:e8:58:8a:ac:f3:
                    e6:73:80:3d:4c:67:85:ed:81:dc:c7:e4:c2:22:0b:
                    4c:18:8d:26:f2:35:2d:41:53:08:42:0a:22:c2:bf:
                    44:16:50:36:58:8a:c6:d5:9b:b9:fa:21:fc:9e:72:
                    10:87:07:2e:89:91:86:7a:b0:3f:79:fb:db:9e:1e:
                    41:42:98:10:a1:fa:95:62:4f:b7:0a:e1:91:fb:f1:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5F:00:BF:C1:D3:4A:AA:AD:B0:82:8F:14:9F:5E:00:CD:6D:71:6F
            X509v3 Authority Key Identifier:
                keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15713

    Signature Algorithm: sha256WithRSAEncryption
         0c:a1:0f:b4:e7:87:39:63:d3:fb:3e:cf:9b:9f:1a:f9:7b:54:
         63:6a:50:a3:db:cc:c7:9c:84:3b:20:c1:34:19:c0:c6:71:19:
         9a:a4:4a:fc:79:ee:fb:5a:76:0e:de:81:cb:ba:32:2f:93:6f:
         25:a0:57:fa:77:bb:07:91:93:9c:be:ba:d7:00:47:e1:dc:cc:
         5e:ff:bb:cb:7c:2c:cd:a8:57:d1:78:1c:da:e1:bf:75:bb:ea:
         6c:c0:5c:d4:bf:f8:a5:08:85:21:5e:b5:af:7d:fe:3a:21:94:
         2c:6c:e0:23:8d:a2:1c:d5:fc:ff:37:f4:90:fd:7c:8b:72:21:
         99:30:10:29:06:cb:34:04:61:2c:b4:48:11:b5:6f:28:d2:e3:
         f7:27:e0:0c:ae:96:60:6f:0e:24:b3:79:27:a8:a1:8e:e0:c2:
         7a:7a:a0:69:df:2e:47:2d:d3:93:29:3a:7c:9b:8e:e9:b0:75:
         c2:91:52:9d:19:07:ab:8c:fe:7f:fc:55:6a:dc:37:71:f6:ec:
         d1:75:f3:1d:87:71:ad:d9:4d:8c:46:74:dc:44:88:90:fe:75:
         1a:40:ee:f6:26:12:f7:7c:13:39:af:b0:76:7a:aa:7d:63:5d:
         c8:15:aa:74:0a:00:d6:31:e4:00:36:5d:b3:c0:ea:48:63:7f:
         cd:65:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:19 2026 by rpki-client