Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/8mjr1R6ZAxArqKrEVDuBknfRZCo.asa
File:                     8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (raw, json)
Hash identifier:          FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=
Subject key identifier:   F2:68:EB:D5:1E:99:03:10:2B:A8:AA:C4:54:3B:81:92:77:D1:64:2A
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019F19014DCC85693128DE20FB74C0CBB290
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/8mjr1R6ZAxArqKrEVDuBknfRZCo.asa
Signing time:             Tue 30 Jun 2026 14:49:03 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:03 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34425
Providers:                AS: 6424
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:4d:cc:85:69:31:28:de:20:fb:74:c0:cb:b2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Jun 30 14:49:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f268ebd51e9903102ba8aac4543b819277d1642a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e9:a4:b0:0a:3b:44:cd:0a:d9:aa:8a:70:1e:
                    78:77:e9:d4:74:4d:bb:78:8c:51:4b:b7:95:5e:60:
                    b1:be:1e:6d:a0:0a:8f:bc:a8:15:9a:91:10:a4:16:
                    ba:06:28:a3:4e:af:25:96:6d:a0:96:5c:7b:95:6e:
                    46:07:b5:e6:c7:e0:76:d6:9d:70:01:d4:65:97:2e:
                    9a:0c:56:a0:aa:71:02:b9:7c:dc:11:84:a2:6b:26:
                    32:ea:c2:a2:16:f7:6b:a4:e6:ce:ca:dc:88:e4:f3:
                    3d:76:2b:cb:cb:22:18:91:3a:f0:34:49:90:49:f3:
                    05:ad:52:05:c5:cc:e5:a3:1c:26:46:93:40:90:68:
                    ab:2b:f4:a2:6f:22:9b:f9:c1:00:e3:d4:2c:12:76:
                    b0:f8:fb:ee:3f:1e:60:44:31:f6:00:f6:af:05:c1:
                    fb:4d:27:17:f7:e9:5b:9a:16:3b:7c:09:81:45:01:
                    b6:2d:fb:79:ee:46:e9:aa:f8:f2:0d:c6:d0:fc:1d:
                    59:13:91:75:d1:57:9d:5f:38:0d:ec:5b:1a:a4:f1:
                    3a:0b:fb:fc:25:94:a4:8f:4d:99:0a:20:91:14:24:
                    de:4e:3a:81:fe:2d:ec:ff:9e:7c:fa:db:ef:0c:c1:
                    ec:89:8e:bb:fb:dc:8f:21:1f:bf:ab:f2:55:a2:dc:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:68:EB:D5:1E:99:03:10:2B:A8:AA:C4:54:3B:81:92:77:D1:64:2A
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/8mjr1R6ZAxArqKrEVDuBknfRZCo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34425

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:2c:60:12:ec:f3:27:9e:81:8e:95:50:26:5b:14:9b:20:
         08:ea:44:60:11:12:c5:3e:13:e6:7a:42:72:67:d8:b0:92:a3:
         76:5b:9e:5d:5a:a1:37:c9:10:d3:08:b8:ed:33:cf:9f:34:e5:
         65:22:ab:88:f1:2c:0b:7e:fe:a5:e5:55:f8:70:51:d8:9f:90:
         cc:49:b9:50:56:4b:34:21:b6:98:68:24:88:9b:ef:d8:13:41:
         eb:4d:0c:3d:4c:b1:11:d9:6c:72:c9:5e:b8:0f:21:e7:f1:5d:
         00:85:27:85:c2:68:23:c0:4f:a0:0d:51:1e:74:ed:92:c3:ce:
         97:92:01:ff:b6:fd:3a:b6:0a:b7:8f:de:f7:49:92:6f:47:ac:
         cf:ca:44:c5:37:02:19:95:36:33:8a:ed:f8:00:5e:55:cc:02:
         37:5f:72:ee:ec:98:86:af:2a:1e:03:8b:0d:e3:4b:b2:32:a5:
         06:d7:c9:32:04:4a:50:76:f1:4d:68:9c:01:33:5f:13:37:e4:
         09:97:3b:b7:d4:11:c0:71:64:d1:15:1b:45:3a:cf:f1:3a:9c:
         a4:1a:c8:98:87:fd:d1:ac:87:f8:12:c5:39:be:00:56:da:cf:
         00:cc:a6:fb:ba:cd:4e:5c:5c:3f:c7:ca:08:a6:97:36:d6:7c:
         63:7d:c3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 04:35:30 2026 by rpki-client