Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/K1xnoiH1Rn_j36nT5aVQuvLx7M0.asa
File:                     K1xnoiH1Rn_j36nT5aVQuvLx7M0.asa (raw, json)
Hash identifier:          00yqS51TXpH+Jmo/kJ88OxoCxbqcu3yOvl8Vez20TGA=
Subject key identifier:   2B:5C:67:A2:21:F5:46:7F:E3:DF:A9:D3:E5:A5:50:BA:F2:F1:EC:CD
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       019F1901480A7CE9D5CC19E50128D481F40C
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/K1xnoiH1Rn_j36nT5aVQuvLx7M0.asa
Signing time:             Tue 30 Jun 2026 14:49:02 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:02 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57399
Providers:                AS: 47536
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:48:0a:7c:e9:d5:cc:19:e5:01:28:d4:81:f4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Jun 30 14:49:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2b5c67a221f5467fe3dfa9d3e5a550baf2f1eccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:ab:85:47:3c:03:f6:7a:9f:75:73:a1:b3:
                    50:0b:a7:39:32:06:6c:15:ba:ec:2f:e6:a4:26:d8:
                    42:4b:71:a3:a1:69:26:2c:56:a0:17:ea:10:28:4a:
                    00:ef:92:aa:32:50:74:02:88:39:b7:ce:cc:75:87:
                    a7:a3:27:17:67:c4:59:91:1c:11:95:87:3f:59:d8:
                    36:46:c4:8f:a3:d3:52:4d:0d:c7:0a:80:45:fd:b0:
                    f5:83:9e:40:4f:df:de:0d:c1:d4:0f:8d:b4:f6:4a:
                    9a:3b:9b:03:65:b3:14:03:c6:5c:8a:77:75:61:1d:
                    6d:71:61:38:26:8b:21:d3:a7:31:00:46:f7:60:9e:
                    d0:5d:fe:cb:21:13:67:13:09:fd:be:68:bf:ef:20:
                    8a:89:97:47:13:6c:7d:2c:08:6a:8b:c6:f9:d5:fe:
                    49:d0:de:14:f0:85:84:64:25:e3:61:78:14:e4:09:
                    6c:61:2c:0e:40:22:f0:72:36:a9:93:37:f7:03:83:
                    b8:f8:35:1d:c8:1e:0b:35:e7:cf:3a:63:e3:d6:ef:
                    ef:55:59:e7:19:8c:82:03:b2:94:4b:18:e2:87:5b:
                    b6:76:41:b6:e6:ef:b0:12:54:8f:28:6b:31:48:55:
                    71:fe:9d:6f:09:c8:29:e9:d1:b7:f8:53:9b:c9:fa:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5C:67:A2:21:F5:46:7F:E3:DF:A9:D3:E5:A5:50:BA:F2:F1:EC:CD
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/K1xnoiH1Rn_j36nT5aVQuvLx7M0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57399

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:40:30:b5:d8:6d:84:84:85:cd:5a:35:ca:d0:b1:8b:ee:
         39:0e:9e:57:cb:61:b4:14:9e:4c:68:37:05:14:93:1b:54:4a:
         7f:4e:49:a6:69:fb:b2:5a:04:5c:9f:06:c7:ea:b1:99:b5:9c:
         73:15:ef:bd:26:86:4b:20:ae:24:7a:77:b2:cb:e6:0b:53:14:
         cc:a0:38:13:a8:b6:b1:9b:b1:57:9f:47:87:6d:c6:82:b8:4d:
         f1:57:40:70:0b:d9:66:15:88:3c:d2:a7:c3:fe:47:cb:fb:08:
         c8:20:db:17:ba:b3:38:d6:07:6d:32:b4:14:cd:e8:13:89:39:
         e8:cb:93:d5:f7:09:34:30:d8:f1:9b:41:5e:87:24:48:7d:53:
         bf:05:fe:ce:7b:49:84:6b:06:ff:f8:a3:45:56:2a:c3:f7:95:
         46:55:42:20:63:67:9d:b1:9d:aa:08:f6:c5:3f:1a:aa:dc:b3:
         36:cd:24:38:18:e1:b5:c3:e8:ba:01:68:a3:60:dd:c7:e1:45:
         3e:a5:7f:78:16:95:7f:4c:86:08:b8:27:e4:81:0d:e2:cc:43:
         d4:cf:0d:fc:b0:fd:61:12:d9:05:59:a5:84:ad:16:13:59:0a:
         e6:16:67:53:15:33:db:e1:4f:60:7c:a9:67:1a:5e:45:2b:11:
         39:3f:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:46 2026 by rpki-client