Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/LuOgAc37LU8V7dGgdj8hy6ymH64.asa
File:                     LuOgAc37LU8V7dGgdj8hy6ymH64.asa (raw, json)
Hash identifier:          pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=
Subject key identifier:   2E:E3:A0:01:CD:FB:2D:4F:15:ED:D1:A0:76:3F:21:CB:AC:A6:1F:AE
Certificate issuer:       /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial:       019F19013755AEDFF2A5FC4592A89A2440DC
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/LuOgAc37LU8V7dGgdj8hy6ymH64.asa
Signing time:             Tue 30 Jun 2026 14:48:57 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:57 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210591
Providers:                AS: 5518
                          AS: 8194
                          AS: 12578
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:37:55:ae:df:f2:a5:fc:45:92:a8:9a:24:40:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
        Validity
            Not Before: Jun 30 14:48:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2ee3a001cdfb2d4f15edd1a0763f21cbaca61fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:c3:b5:2b:95:c6:97:d3:d1:0c:1b:24:f0:
                    fd:73:95:f7:43:fa:d3:d4:e2:66:8e:f4:3e:5a:af:
                    c2:ee:82:f1:04:b0:b7:d6:15:a0:a3:6f:44:b7:76:
                    30:db:bc:a5:03:20:e5:a5:16:d5:21:22:f3:3b:49:
                    67:b2:8e:64:5c:14:1d:84:1b:52:46:e3:d9:3a:72:
                    23:1c:bc:53:b6:0e:90:21:37:1b:f7:df:cc:b9:5c:
                    66:15:f1:73:ad:5c:1a:bc:73:2a:3d:44:a5:89:9b:
                    e7:5c:5e:cf:4f:6e:81:9b:01:25:b6:5b:f4:6d:d7:
                    13:8c:72:a7:dc:aa:5d:74:66:1f:4a:76:56:4a:4f:
                    b9:bc:9b:50:bc:2d:d6:d0:28:f4:75:c0:82:18:33:
                    d9:1e:59:8e:c2:1b:bf:73:a4:a1:d1:46:89:f6:0f:
                    c9:54:15:8d:ff:c2:9c:1f:7e:87:45:7d:ee:eb:5d:
                    df:8a:57:3f:6c:3f:ad:1a:e4:82:19:f3:8d:c9:a2:
                    e2:52:c2:39:78:d1:bf:4e:4a:8c:b6:72:ee:f4:45:
                    31:bb:6e:0c:b0:e5:0f:8b:0b:16:9e:09:0d:d0:54:
                    e2:e0:00:3c:62:b5:48:ff:ea:b0:4e:ed:f3:f0:fe:
                    59:97:1d:43:c1:00:72:8d:3b:e3:d1:f1:9a:19:29:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:A0:01:CD:FB:2D:4F:15:ED:D1:A0:76:3F:21:CB:AC:A6:1F:AE
            X509v3 Authority Key Identifier:
                keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/LuOgAc37LU8V7dGgdj8hy6ymH64.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210591

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:70:41:73:9d:9f:65:64:65:09:5f:06:82:06:39:cc:72:
         b0:22:98:c2:77:4c:ff:1c:3d:56:27:23:bc:d7:97:b6:f0:f0:
         24:8d:7b:72:7b:49:e3:99:c8:0d:c1:cb:ca:57:56:1a:7e:dc:
         6d:2a:f3:54:32:25:41:7e:cf:1d:14:25:55:c2:3a:f7:67:ad:
         2c:22:cd:71:32:ab:aa:74:71:55:f8:4b:aa:d8:20:4e:32:61:
         5c:38:6b:49:6b:ac:06:1d:cb:86:aa:90:00:b3:85:6a:17:eb:
         8c:4c:27:ab:68:45:f6:c2:d3:5f:eb:77:2d:64:20:ab:9f:05:
         15:4f:89:5b:7f:d6:29:a0:94:1e:46:2e:df:e4:6f:1e:bd:c2:
         9a:e3:1e:da:9b:33:48:ce:67:b1:d1:a4:70:a4:05:a2:ec:72:
         f2:ce:5e:26:dc:9a:4a:37:bd:1d:c9:fe:1c:64:46:40:47:67:
         e3:1c:1f:99:74:14:11:91:53:c2:22:df:96:d7:39:81:c2:2d:
         69:e4:c9:a8:3c:89:5a:50:f8:ce:b0:1e:44:14:d1:2a:9c:07:
         5c:54:5a:a0:ad:18:47:b8:e3:e3:7a:53:81:6d:3f:f4:36:c0:
         e9:be:a3:78:98:bb:ad:27:99:67:e7:b0:f7:a3:f7:3f:2a:55:
         35:89:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:57 2026 by rpki-client