Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/lMXK44QhM_XGZjingG-V3KvqKAE.asa
File:                     lMXK44QhM_XGZjingG-V3KvqKAE.asa (raw, json)
Hash identifier:          zRgv5ZQ5iUse5otb1U22dglWvU7KGSbM/j6SQavWefk=
Subject key identifier:   94:C5:CA:E3:84:21:33:F5:C6:66:38:A7:80:6F:95:DC:AB:EA:28:01
Certificate issuer:       /CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
Certificate serial:       01A115BCF163443EE34E67EA4E2A3FE87DF4
Authority key identifier: 72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/lMXK44QhM_XGZjingG-V3KvqKAE.asa
Signing time:             Wed 07 Oct 2026 09:41:06 +0000
ASPA not before:          Wed 07 Oct 2026 09:41:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58317
Providers:                AS: 1299
                          AS: 2914
                          AS: 3399
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:bc:f1:63:44:3e:e3:4e:67:ea:4e:2a:3f:e8:7d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72769d6e4a0fc2c98013b722eb2beb9e6e871fc6
        Validity
            Not Before: Oct  7 09:41:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94c5cae3842133f5c66638a7806f95dcabea2801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:47:ca:ea:c9:34:cd:5e:dc:1e:a5:13:6b:
                    d1:4e:be:fd:71:7e:dd:f3:e3:70:f7:a4:ff:59:95:
                    2d:70:4a:3d:31:39:65:29:1d:f5:ee:30:93:04:66:
                    1d:97:e4:a4:df:a3:3d:0b:3c:00:e2:db:a3:d9:52:
                    d2:10:31:28:72:c4:a9:3b:d4:bf:f0:0c:09:98:88:
                    a0:eb:6c:4c:2a:85:f3:f0:26:cb:f3:71:a4:96:d5:
                    be:d0:e6:60:48:c9:de:c2:fe:07:f3:2b:c6:99:11:
                    88:59:65:46:cc:f3:51:6d:1e:f8:91:63:95:29:c2:
                    ec:b8:eb:55:48:08:2c:d9:ca:a4:54:22:56:e8:af:
                    f5:58:0b:74:98:e7:3e:3b:49:11:75:ce:bf:25:2c:
                    e9:df:bf:00:3a:67:14:ce:e7:74:7d:e8:84:bd:7c:
                    c3:3d:4f:65:99:d4:2d:eb:bc:2c:a9:28:bb:1e:58:
                    4b:c1:1f:cc:5a:65:4d:c9:13:92:3e:5c:de:13:44:
                    28:5b:16:3b:5a:27:8e:6f:48:05:90:9d:de:16:47:
                    4f:cc:70:56:06:0f:df:cb:d9:94:5f:38:d1:f5:46:
                    16:2b:f0:10:3a:9a:dd:30:3e:70:76:00:94:c1:f8:
                    03:cb:4a:3e:96:a1:7e:cd:99:d2:7a:f8:5e:65:9c:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C5:CA:E3:84:21:33:F5:C6:66:38:A7:80:6F:95:DC:AB:EA:28:01
            X509v3 Authority Key Identifier:
                keyid:72:76:9D:6E:4A:0F:C2:C9:80:13:B7:22:EB:2B:EB:9E:6E:87:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnadbkoPwsmAE7ci6yvrnm6HH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/lMXK44QhM_XGZjingG-V3KvqKAE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c67522-71c5-4061-a18b-6933a90c53fa/1/cnadbkoPwsmAE7ci6yvrnm6HH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58317

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:41:49:f1:54:7b:33:d6:fd:25:d7:2b:4a:8e:ff:5a:8d:
         ae:bd:a4:71:f3:74:ee:69:be:50:ed:cb:1f:a9:61:46:7f:a9:
         4c:35:63:47:72:05:6f:1d:0a:94:4d:14:6b:c5:e2:09:d3:bf:
         6f:9e:fb:5b:37:26:ac:2b:b4:b6:76:61:16:e9:6c:90:33:de:
         bf:fa:fe:12:2d:6d:32:2e:5b:79:6b:e7:7c:5d:e1:8c:f5:42:
         e4:c0:e2:10:36:76:bf:be:34:80:07:94:c2:54:ee:df:37:dc:
         06:6e:75:0b:f7:70:74:7b:d5:f4:2f:bc:19:48:85:f7:ce:c9:
         0b:16:71:c4:e8:73:1a:3f:12:63:77:f4:da:ef:bf:b1:4b:0b:
         72:f0:7f:b5:fa:3b:e0:10:cb:4d:2f:a6:bd:e1:a6:28:42:d1:
         6e:52:71:06:1a:ff:f2:21:92:9a:5b:dc:9b:32:36:c7:7f:fb:
         8c:5f:1b:13:fe:2c:bf:77:fd:dd:64:e3:a3:b1:c5:34:8c:3b:
         c0:da:2d:c3:04:a8:3b:c9:e5:5a:24:61:fe:bf:ec:ea:b6:fe:
         16:d4:07:75:e6:64:19:aa:42:d1:8c:d8:0e:1b:96:fb:15:94:
         55:19:39:75:48:c8:cc:10:ba:c8:fc:2c:f5:5e:62:14:56:3d:
         c4:a5:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:06:47 2026 by rpki-client