Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/dE8xQiANkczZ0tAFkQGK1c1TYTY.asa
File:                     dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (raw, json)
Hash identifier:          TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=
Subject key identifier:   74:4F:31:42:20:0D:91:CC:D9:D2:D0:05:91:01:8A:D5:CD:53:61:36
Certificate issuer:       /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial:       019DAF66DAAF3C08F689B037542EC3605A77
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/dE8xQiANkczZ0tAFkQGK1c1TYTY.asa
Signing time:             Tue 21 Apr 2026 09:37:26 +0000
ASPA not before:          Tue 21 Apr 2026 09:37:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34121
Providers:                AS: 12695
                          AS: 31261
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:af:66:da:af:3c:08:f6:89:b0:37:54:2e:c3:60:5a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
        Validity
            Not Before: Apr 21 09:37:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=744f3142200d91ccd9d2d00591018ad5cd536136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:dd:49:31:a4:2c:2c:de:ca:86:34:1a:f6:
                    9c:69:f4:79:30:e5:b8:5b:e2:6e:f1:bb:8b:76:88:
                    91:7f:e5:a4:7a:f3:c7:c6:74:b1:cf:d7:00:7c:a7:
                    0d:4d:b1:2a:c6:8e:44:39:e7:59:ef:02:24:cb:72:
                    6d:7c:8c:73:d7:71:71:ad:9d:bf:b3:8d:a4:30:32:
                    5b:2d:39:53:ae:b7:a2:05:c2:b9:32:61:ec:72:01:
                    4d:79:9a:6d:b2:19:df:c7:69:01:44:19:43:31:e7:
                    63:8c:ca:7f:11:4a:b8:22:dc:6f:70:ea:50:1c:47:
                    f2:0f:09:fb:16:31:01:df:c9:a8:2a:9a:dc:6a:6f:
                    97:3b:3f:6c:4c:4f:84:41:b8:6d:71:37:b5:77:14:
                    33:90:44:45:11:2f:fb:a4:ab:d2:00:42:69:e2:73:
                    b7:c6:6a:25:68:04:73:cd:e2:6d:3c:36:ff:63:75:
                    7d:46:93:f2:54:36:9b:38:d3:d4:48:62:62:80:44:
                    bf:ff:0f:23:fe:33:8d:71:d5:e5:2b:42:71:11:f4:
                    37:85:e0:cb:ea:d7:55:da:88:a6:6d:77:21:7d:c0:
                    84:11:c3:fe:4d:02:1e:dd:49:54:3c:fe:7b:98:1a:
                    87:3c:2f:f0:e8:69:0e:46:32:09:f2:98:b0:04:3f:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:31:42:20:0D:91:CC:D9:D2:D0:05:91:01:8A:D5:CD:53:61:36
            X509v3 Authority Key Identifier:
                keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/dE8xQiANkczZ0tAFkQGK1c1TYTY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34121

    Signature Algorithm: sha256WithRSAEncryption
         30:a4:87:9b:c4:6b:11:10:0b:d6:47:2e:10:44:42:20:4f:91:
         4f:d1:dc:48:c6:9f:cb:63:cd:bd:3f:61:8f:cb:bd:21:1c:0d:
         58:63:5c:58:55:a4:4d:69:77:cb:35:18:f3:bb:86:78:37:93:
         cb:22:0f:5e:4c:48:64:22:ad:2a:a8:be:7f:78:79:c8:21:03:
         8e:a3:09:f9:a4:06:02:83:4e:d5:72:1d:c5:c0:10:0b:56:a2:
         1a:f2:85:64:7d:0f:16:85:28:5a:26:a9:13:09:e2:46:28:31:
         18:37:e9:23:11:ea:f7:5d:18:19:ad:cd:f5:9e:0d:80:f5:14:
         32:58:58:81:73:a2:3f:e0:71:5b:d1:9f:a2:12:7f:4d:83:74:
         2f:e1:98:7d:15:af:bb:f1:ff:49:e8:23:f9:72:7e:c9:ae:e7:
         31:db:08:58:b3:f0:ba:ec:2b:74:51:54:37:0c:9e:83:df:24:
         6a:ac:1f:01:ec:06:a0:b5:49:b3:c8:fd:c8:4b:b2:ce:d5:e2:
         48:15:b8:c0:76:29:1a:bf:e8:f6:6c:7b:bb:b5:2a:ed:cd:2c:
         53:58:b2:a6:45:d5:b2:ec:4c:b7:e5:31:29:95:19:f4:f4:b1:
         9d:c0:dd:3c:8a:96:4c:e0:0c:d1:4b:1f:24:d4:a9:22:4a:8f:
         4e:02:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:11 2026 by rpki-client