Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/SkFmwRRLunPOHlRnnuKswveNBwA.asa
File:                     SkFmwRRLunPOHlRnnuKswveNBwA.asa (raw, json)
Hash identifier:          m/1v8yk+9cFHErDoaSnJEhu9QFxv6ZZuR9u6kGbSMLw=
Subject key identifier:   4A:41:66:C1:14:4B:BA:73:CE:1E:54:67:9E:E2:AC:C2:F7:8D:07:00
Certificate issuer:       /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial:       01A067748D9BD5B979A0A70087E013046839
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/SkFmwRRLunPOHlRnnuKswveNBwA.asa
Signing time:             Thu 03 Sep 2026 13:28:06 +0000
ASPA not before:          Thu 03 Sep 2026 13:28:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13243
Providers:                AS: 5619
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:74:8d:9b:d5:b9:79:a0:a7:00:87:e0:13:04:68:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
        Validity
            Not Before: Sep  3 13:28:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a4166c1144bba73ce1e54679ee2acc2f78d0700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:3a:27:9b:0e:f7:50:72:4a:db:41:db:0e:
                    57:17:34:dc:4b:14:6f:cc:53:4c:e2:f4:f8:c2:85:
                    c3:c8:f4:0e:55:2b:e6:7e:13:d8:5e:77:8a:ca:ea:
                    a1:81:ef:5f:72:43:ba:82:7f:40:24:fe:de:15:2b:
                    0e:88:3e:f5:45:a3:6d:bd:73:fe:0b:fd:6c:a0:79:
                    15:d1:c3:dd:f0:65:e5:5a:71:4c:7d:d3:08:b8:68:
                    d5:b7:6f:06:0b:70:eb:cb:6a:3f:d7:53:21:c1:06:
                    8e:ae:4f:34:51:85:2d:d2:ef:49:98:11:55:c5:4b:
                    fd:1a:05:9f:37:4c:c5:26:fc:92:95:0e:0c:24:9e:
                    a3:6a:66:2e:4b:5d:23:96:1b:bd:1a:10:ba:59:41:
                    68:2f:e3:b3:d6:e3:c4:26:6d:52:95:ab:1e:e2:1e:
                    3e:10:b8:ad:a9:d7:db:c0:0b:5a:77:ba:d5:24:9e:
                    41:e9:8a:06:35:57:3e:48:a9:09:3c:14:f1:ca:d5:
                    bd:d4:fc:04:55:7e:7a:fd:ba:ea:0a:c3:de:a1:16:
                    cd:c1:fd:e0:3d:57:a0:20:05:f8:ae:4b:e3:b3:df:
                    ac:e7:af:44:d3:b8:79:aa:bb:97:6f:50:1c:80:31:
                    cf:58:74:87:44:ce:31:ba:7a:ca:fc:7b:91:84:94:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:41:66:C1:14:4B:BA:73:CE:1E:54:67:9E:E2:AC:C2:F7:8D:07:00
            X509v3 Authority Key Identifier:
                keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/SkFmwRRLunPOHlRnnuKswveNBwA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13243

    Signature Algorithm: sha256WithRSAEncryption
         90:ff:d5:40:44:9c:88:6c:4e:89:97:8c:1e:98:77:f4:a4:4c:
         a0:0d:2a:0e:ba:18:72:f1:c7:d6:4d:cf:e1:59:a4:f5:5c:ca:
         58:dd:56:45:34:89:4a:53:9b:d5:59:1a:1c:c4:e9:e5:cf:7a:
         a8:e6:fb:b9:f7:eb:dd:ef:8d:44:60:eb:cd:33:54:85:4a:77:
         1a:b4:6c:00:bc:5c:72:df:51:f7:af:76:c8:35:ec:8a:02:fa:
         a5:13:4a:19:e8:b8:44:e2:1c:64:db:88:11:dd:43:ae:6b:b4:
         86:df:89:54:cc:aa:19:ef:94:a2:9f:34:fa:fa:91:ca:6f:88:
         cc:2a:af:39:f4:a3:61:9b:63:63:d0:dc:af:7e:d4:a4:a7:32:
         df:b3:c1:c8:5a:15:6d:a5:dd:35:28:ea:af:a3:7f:e8:ea:25:
         33:50:46:9f:d5:eb:9b:3b:3b:86:4f:9a:2a:57:0f:63:bc:45:
         60:b3:f6:b7:46:4a:58:32:82:e2:4d:74:24:3a:78:38:38:8c:
         16:17:75:0e:89:31:67:f0:8d:e3:3d:c2:30:8a:88:fb:5f:37:
         e3:48:b8:b3:51:7d:89:21:be:94:2c:b6:2b:02:08:a0:54:b0:
         ec:a1:38:20:77:84:98:c7:6e:4c:43:f4:b4:ba:08:44:70:ec:
         e1:3c:22:c7
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAaBndI2b1bl5oKcAh+ATBGg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj
MzYyMmIwHhcNMjYwOTAzMTMyODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTQxNjZjMTE0NGJiYTczY2UxZTU0Njc5ZWUyYWNjMmY3OGQwNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLc6J5sO91BySttB2w5XFzTcSxRv
zFNM4vT4woXDyPQOVSvmfhPYXneKyuqhge9fckO6gn9AJP7eFSsOiD71RaNtvXP+
C/1soHkV0cPd8GXlWnFMfdMIuGjVt28GC3Dry2o/11MhwQaOrk80UYUt0u9JmBFV
xUv9GgWfN0zFJvySlQ4MJJ6jamYuS10jlhu9GhC6WUFoL+Oz1uPEJm1Slase4h4+
ELitqdfbwAtad7rVJJ5B6YoGNVc+SKkJPBTxytW91PwEVX56/brqCsPeoRbNwf3g
PVegIAX4rkvjs9+s569E07h5qruXb1AcgDHPWHSHRM4xunrK/HuRhJSSaQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFEpBZsEUS7pzzh5UZ57irML3jQcAMB8GA1UdIwQY
MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt
ZWYwNjNlNzg2ZTU0LzEvU2tGbXdSUkx1blBPSGxSbm51S3N3dmVOQndBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0
LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjO7MA0GCSqGSIb3
DQEBCwUAA4IBAQCQ/9VARJyIbE6Jl4wemHf0pEygDSoOuhhy8cfWTc/hWaT1XMpY
3VZFNIlKU5vVWRocxOnlz3qo5vu59+vd741EYOvNM1SFSncatGwAvFxy31H3r3bI
NeyKAvqlE0oZ6LhE4hxk24gR3UOua7SG34lUzKoZ75SinzT6+pHKb4jMKq859KNh
m2Nj0NyvftSkpzLfs8HIWhVtpd01KOqvo3/o6iUzUEaf1eubOzuGT5oqVw9jvEVg
s/a3RkpYMoLiTXQkOng4OIwWF3UOiTFn8I3jPcIwioj7XzfjSLizUX2JIb6ULLYr
AgigVLDsoTggd4SYx25MQ/S0ughEcOzhPCLH
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:13 2026 by rpki-client