Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/LTVOJrN7tMu87dFspIcmBlzwME4.asa
File:                     LTVOJrN7tMu87dFspIcmBlzwME4.asa (raw, json)
Hash identifier:          tHJyxmUmJCWBdZOh74CFjQH4LfeAyi34h5vxnLm7Pjk=
Subject key identifier:   2D:35:4E:26:B3:7B:B4:CB:BC:ED:D1:6C:A4:87:26:06:5C:F0:30:4E
Certificate issuer:       /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial:       019F190101D62946DC50322A2FFBF76F8B58
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/LTVOJrN7tMu87dFspIcmBlzwME4.asa
Signing time:             Tue 30 Jun 2026 14:48:44 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:44 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49697
Providers:                AS: 47536
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:01:d6:29:46:dc:50:32:2a:2f:fb:f7:6f:8b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
        Validity
            Not Before: Jun 30 14:48:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2d354e26b37bb4cbbcedd16ca48726065cf0304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:3a:4e:c1:db:42:58:f6:9d:44:0e:13:e9:
                    f9:5c:dd:2f:35:c9:48:8e:91:81:c9:38:73:42:c2:
                    c6:1e:8c:d6:0d:f6:ba:26:16:88:10:28:27:db:f8:
                    b0:4d:0f:46:8d:f6:98:3e:81:ba:a2:38:0f:3d:d7:
                    12:3d:a0:b1:a0:20:b6:62:dc:92:f1:96:54:a9:52:
                    6e:38:6b:a7:76:bb:44:ab:5d:17:d4:d2:32:a9:83:
                    6f:a3:30:5f:47:70:8d:f3:1c:92:9d:fe:3c:63:c2:
                    26:af:24:c7:8e:ee:8f:ba:94:d5:c0:d4:ec:e4:ab:
                    ec:4f:8e:47:3f:55:b6:ec:dc:de:04:d2:36:31:6b:
                    fc:be:9f:48:70:c9:57:6a:d2:11:2c:9b:1d:90:a2:
                    75:c1:df:f5:a3:04:a1:52:11:c6:1c:fd:16:96:49:
                    cf:1c:2f:5d:86:97:dc:72:0c:73:8d:e0:c1:d8:d4:
                    81:e8:84:5e:37:44:b0:58:df:61:7f:35:ea:6b:9e:
                    03:b9:98:e1:e6:40:86:2f:49:6a:bf:44:7c:03:9f:
                    82:31:83:9a:e7:90:25:c4:6c:50:74:be:8f:21:5b:
                    3f:77:c8:82:82:6c:7a:66:8f:95:f1:dd:05:72:cb:
                    5d:54:8f:2e:c1:00:7b:3d:30:58:35:69:3c:93:cb:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:4E:26:B3:7B:B4:CB:BC:ED:D1:6C:A4:87:26:06:5C:F0:30:4E
            X509v3 Authority Key Identifier:
                keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/LTVOJrN7tMu87dFspIcmBlzwME4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49697

    Signature Algorithm: sha256WithRSAEncryption
         13:df:34:c1:12:3c:25:6b:77:00:86:ab:b4:4d:56:a1:27:de:
         44:47:b0:09:71:9c:8b:a0:c6:5a:84:a1:ee:27:3d:57:65:ef:
         66:ab:3c:4d:5a:02:cb:d8:d3:cb:42:0e:4c:62:a7:14:b0:ad:
         ce:c7:42:63:4f:7a:01:87:cc:50:09:8c:de:ce:2f:80:98:02:
         03:f9:28:a5:53:09:ab:02:ba:4a:ad:d6:98:d1:6f:4f:dd:70:
         d3:8e:16:5c:0a:d7:3b:9b:43:cd:e6:87:59:dc:bc:7b:c3:03:
         8e:e6:3b:31:3a:68:d4:8c:44:91:30:5e:99:a1:46:85:2c:be:
         89:b7:fd:b2:70:b7:4f:7d:53:de:11:5f:47:d0:ca:66:e8:fd:
         0b:1c:f7:93:da:7f:e7:19:09:ef:18:32:6e:83:12:96:e6:d7:
         fd:24:41:b7:3e:1d:dc:dc:af:16:96:59:a1:e4:94:b5:bb:c2:
         9f:e7:58:54:6e:13:8c:e3:dd:bc:b8:d1:ce:72:6f:43:a8:1d:
         d1:d3:58:3e:1b:cc:d6:64:c4:de:e4:ef:96:f0:d8:1a:49:a5:
         ed:d1:29:2c:3a:7e:fc:9e:37:7d:54:58:30:38:59:ed:57:18:
         d6:c1:80:ba:45:08:ff:1f:6b:a0:41:27:90:20:b6:01:f6:45:
         25:4f:03:22
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAQHWKUbcUDIqL/v3b4tYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzkxNmYzNjA5ODM0ZWQ0MDE0ZGE4YzY5NWIzNDBhN2Iw
YTU4MGUwHhcNMjYwNjMwMTQ0ODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDM1NGUyNmIzN2JiNGNiYmNlZGQxNmNhNDg3MjYwNjVjZjAzMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFs6TsHbQlj2nUQOE+n5XN0vNclI
jpGByThzQsLGHozWDfa6JhaIECgn2/iwTQ9GjfaYPoG6ojgPPdcSPaCxoCC2YtyS
8ZZUqVJuOGundrtEq10X1NIyqYNvozBfR3CN8xySnf48Y8ImryTHju6PupTVwNTs
5KvsT45HP1W27NzeBNI2MWv8vp9IcMlXatIRLJsdkKJ1wd/1owShUhHGHP0WlknP
HC9dhpfccgxzjeDB2NSB6IReN0SwWN9hfzXqa54DuZjh5kCGL0lqv0R8A5+CMYOa
55AlxGxQdL6PIVs/d8iCgmx6Zo+V8d0FcstdVI8uwQB7PTBYNWk8k8v2JQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFC01Tiaze7TLvO3RbKSHJgZc8DBOMB8GA1UdIwQY
MBaAFKt5FvNgmDTtQBTajGlbNAp7ClgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEt
YjY2MzAwYTdmOWYxLzEvTFRWT0pyTjd0TXU4N2RGc3BJY21CbHp3TUU0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEtYjY2MzAwYTdmOWYx
LzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDCITANBgkqhkiG
9w0BAQsFAAOCAQEAE980wRI8JWt3AIartE1WoSfeREewCXGci6DGWoSh7ic9V2Xv
Zqs8TVoCy9jTy0IOTGKnFLCtzsdCY096AYfMUAmM3s4vgJgCA/kopVMJqwK6Sq3W
mNFvT91w044WXArXO5tDzeaHWdy8e8MDjuY7MTpo1IxEkTBemaFGhSy+ibf9snC3
T31T3hFfR9DKZuj9Cxz3k9p/5xkJ7xgyboMSlubX/SRBtz4d3NyvFpZZoeSUtbvC
n+dYVG4TjOPdvLjRznJvQ6gd0dNYPhvM1mTE3uTvlvDYGkml7dEpLDp+/J43fVRY
MDhZ7VcY1sGAukUI/x9roEEnkCC2AfZFJU8DIg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:28 2026 by rpki-client