Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/lpQrTkr0k_OuZGdH3_fHrWniaOY.asa
File:                     lpQrTkr0k_OuZGdH3_fHrWniaOY.asa (raw, json)
Hash identifier:          Yr5IGKpmnM61RrjmriwDAZ7TXsl85VFEBylZPxGRepg=
Subject key identifier:   96:94:2B:4E:4A:F4:93:F3:AE:64:67:47:DF:F7:C7:AD:69:E2:68:E6
Certificate issuer:       /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial:       01A067748E1DD80C17773B2C701585598619
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/lpQrTkr0k_OuZGdH3_fHrWniaOY.asa
Signing time:             Thu 03 Sep 2026 13:28:06 +0000
ASPA not before:          Thu 03 Sep 2026 13:28:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            5619
Providers:                AS: 2116
                          AS: 2119
                          AS: 55002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:74:8e:1d:d8:0c:17:77:3b:2c:70:15:85:59:86:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
        Validity
            Not Before: Sep  3 13:28:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=96942b4e4af493f3ae646747dff7c7ad69e268e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:12:7b:b0:4d:09:4c:db:62:da:5f:bb:e6:f1:
                    af:57:48:ec:42:41:14:84:25:66:68:22:69:3c:45:
                    7f:1b:3b:c3:a0:84:69:7c:f8:e0:42:a1:2f:2d:98:
                    a2:e3:8b:91:27:9d:18:e2:49:2c:86:eb:08:69:99:
                    32:ba:6f:82:b7:d3:45:a6:82:8c:a9:8d:09:c3:f5:
                    6a:a9:37:e1:a0:a0:15:8d:09:42:55:77:fc:c8:81:
                    55:49:1c:df:0a:87:8f:f6:2d:8d:dd:ca:dc:91:83:
                    74:e4:67:44:d1:2d:5c:95:6b:0c:6f:57:d9:fc:df:
                    40:c0:21:c6:f0:b2:14:3b:1f:29:69:3a:2d:d4:8c:
                    c3:0e:1e:31:15:5d:68:bf:4b:dc:d5:ee:67:23:e7:
                    53:73:9c:27:5c:40:fc:bf:b8:3c:77:12:49:4d:97:
                    6d:5c:bc:db:ba:f9:91:2a:5c:a3:45:9f:a0:7a:60:
                    28:a0:aa:97:d4:a1:b9:63:5a:62:8f:03:67:e6:21:
                    f8:b8:f4:13:46:7a:13:d2:eb:d8:58:ad:cc:32:24:
                    04:02:0a:1d:74:e9:d4:42:1c:46:b1:c8:0a:7c:13:
                    64:0e:10:3c:9f:ee:1f:c9:63:d9:10:0c:b9:ad:04:
                    dd:82:5c:c4:c1:0c:b5:c3:c6:42:20:75:3a:7d:92:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:2B:4E:4A:F4:93:F3:AE:64:67:47:DF:F7:C7:AD:69:E2:68:E6
            X509v3 Authority Key Identifier:
                keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/lpQrTkr0k_OuZGdH3_fHrWniaOY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5619

    Signature Algorithm: sha256WithRSAEncryption
         29:bb:eb:a1:82:9d:e9:3a:19:50:59:55:32:5c:c0:61:48:b9:
         37:b5:49:39:89:0f:e4:83:41:f7:97:21:53:bd:b4:85:23:20:
         11:38:7d:74:f5:c4:6e:e1:3b:33:27:64:66:ee:59:7b:ff:1f:
         11:50:7c:12:ed:05:cb:ad:d3:05:16:d5:2b:ef:6b:6f:45:66:
         25:3e:95:bb:11:73:36:a8:2c:22:12:ef:38:c3:72:9b:4a:57:
         f1:6b:53:ed:d4:3f:dd:ad:5d:e2:d1:78:35:d5:6c:0d:b6:72:
         8d:94:f0:9b:0c:fd:19:54:07:aa:af:ec:f1:72:41:0c:71:86:
         63:3a:a8:6d:3c:8b:57:57:b8:b9:23:5a:ea:93:5a:a4:c1:b1:
         94:47:ea:00:55:c0:83:97:0b:68:79:10:96:6c:ab:97:ad:ea:
         6c:5d:2b:2e:c3:ed:42:96:fc:2e:56:ef:f7:bf:65:eb:e3:a8:
         cb:f2:45:0b:1d:10:d6:36:c7:5a:06:80:04:53:d5:20:74:5c:
         b4:0e:87:52:90:c3:df:2a:91:5e:48:bd:33:17:fa:cf:0f:18:
         4f:ce:d3:8b:46:81:9f:0a:b5:21:fc:f1:a5:9f:4d:96:34:f8:
         2e:ab:86:60:f3:84:f5:f0:9d:1c:49:30:49:e5:07:b3:db:20:
         dc:34:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:38 2026 by rpki-client