Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/5AArOA0LkskA5tw5SWJx3j9Dv6g.asa
File:                     5AArOA0LkskA5tw5SWJx3j9Dv6g.asa (raw, json)
Hash identifier:          g3ncVbCPorzKexZkECV8nZNdPxcAqa14QO98wuTocr8=
Subject key identifier:   E4:00:2B:38:0D:0B:92:C9:00:E6:DC:39:49:62:71:DE:3F:43:BF:A8
Certificate issuer:       /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial:       019E506CA01DE8E281FC475C69F7A04D820A
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/5AArOA0LkskA5tw5SWJx3j9Dv6g.asa
Signing time:             Fri 22 May 2026 16:02:36 +0000
ASPA not before:          Fri 22 May 2026 16:02:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50433
Providers:                AS: 12389
                          AS: 31357
                          AS: 49235
                          AS: 49414
                          AS: 50928
                          AS: 62399
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:50:6c:a0:1d:e8:e2:81:fc:47:5c:69:f7:a0:4d:82:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
        Validity
            Not Before: May 22 16:02:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4002b380d0b92c900e6dc39496271de3f43bfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4f:8a:47:e1:6d:dc:15:c7:b7:f9:85:66:5a:
                    ce:93:92:59:db:f0:12:c8:31:f4:15:bc:95:6b:ed:
                    bb:c5:69:10:85:ef:f0:f8:e8:33:b3:58:80:4e:27:
                    4c:bb:ad:ae:25:7d:6f:64:86:1e:9f:df:59:b8:6f:
                    fb:09:bc:28:14:5f:67:d3:7b:8f:e7:5d:7b:f9:d3:
                    2f:07:3c:b3:87:32:5c:bd:b4:af:30:d4:cd:84:98:
                    85:48:18:c6:23:90:06:d4:64:60:f4:d3:01:63:01:
                    af:d7:1c:a1:63:6a:61:55:94:00:65:69:84:f2:d6:
                    c9:16:46:54:02:96:cf:6d:78:29:03:4e:75:14:5f:
                    94:86:f4:f0:f8:22:b5:36:04:74:2e:31:d1:4e:d4:
                    5b:95:fb:5e:8e:3c:45:ed:b3:de:53:bb:57:ac:04:
                    71:7b:54:96:04:c0:91:b4:ec:7d:05:d4:2d:7f:d7:
                    27:b5:66:69:ae:f3:28:6d:8f:77:75:01:a9:3b:ea:
                    d6:b6:6f:4f:1b:96:d1:0e:9f:0b:88:c7:b0:08:12:
                    89:7f:13:e2:70:12:9d:b4:dd:17:db:de:d6:2b:d0:
                    0a:bd:35:9a:bc:bf:7d:63:e8:80:43:02:c4:e8:23:
                    8a:6a:3a:38:b0:4e:36:cd:20:62:90:53:13:16:cf:
                    2a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:2B:38:0D:0B:92:C9:00:E6:DC:39:49:62:71:DE:3F:43:BF:A8
            X509v3 Authority Key Identifier:
                keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/5AArOA0LkskA5tw5SWJx3j9Dv6g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50433

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:cd:d5:ad:f6:20:c9:87:44:96:0c:04:78:eb:71:b6:1a:
         90:2c:db:92:26:04:ae:fe:d4:a3:95:bd:03:bc:90:9f:34:87:
         92:d1:bf:5d:d9:4a:eb:49:42:c6:a5:2e:9f:aa:2c:6c:be:3e:
         fc:ff:c9:87:9a:75:48:a8:0e:28:b9:fe:d7:5c:f4:8d:18:37:
         fb:5d:95:36:07:bf:7f:00:a6:d1:b2:6f:72:94:e7:3a:a1:25:
         b0:a9:1b:f1:4a:ff:9e:6f:16:ae:08:52:be:dc:c5:ac:a9:b5:
         ae:39:13:c1:74:9e:9b:c2:02:34:f9:29:3b:0f:af:c8:53:86:
         0d:55:81:2d:20:b6:8a:e2:ae:c5:cb:1a:5c:c3:b2:f9:c2:a3:
         89:1e:d4:8f:b8:c8:5e:41:57:8d:63:04:76:45:6a:2f:2a:ab:
         41:65:a2:c2:37:b4:5b:da:05:41:3d:c2:83:5e:d7:fb:20:a3:
         00:0c:78:04:2f:3d:bb:d2:41:0d:0c:1b:ab:b9:92:52:ee:45:
         5b:9b:ed:c8:77:4c:14:16:fc:b0:6b:40:af:4a:21:7e:df:6e:
         1e:8e:8d:bd:9e:0d:19:cf:33:e8:76:8c:2d:57:f5:e5:e7:3b:
         a2:c0:ef:90:0c:10:8e:bd:91:c1:a3:f6:fe:57:50:05:af:b9:
         94:65:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:22 2026 by rpki-client