Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/v64S_hGYa_nvMDJZaA4cHcmyfkA.asa
File:                     v64S_hGYa_nvMDJZaA4cHcmyfkA.asa (raw, json)
Hash identifier:          hMJoCKv0QftKVFbfQW/F4mXfLu8INfPNOaafAYmmTXw=
Subject key identifier:   BF:AE:12:FE:11:98:6B:F9:EF:30:32:59:68:0E:1C:1D:C9:B2:7E:40
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019E4134253C1A341D791FA6C3FAB40967CA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/v64S_hGYa_nvMDJZaA4cHcmyfkA.asa
Signing time:             Tue 19 May 2026 17:06:36 +0000
ASPA not before:          Tue 19 May 2026 17:06:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60581
Providers:                AS: 35346
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:41:34:25:3c:1a:34:1d:79:1f:a6:c3:fa:b4:09:67:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: May 19 17:06:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bfae12fe11986bf9ef303259680e1c1dc9b27e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:d1:55:d7:ed:4d:fd:2b:5b:8a:b1:11:42:
                    70:a7:ed:12:d9:5e:2f:e4:dc:22:5b:a5:4f:f9:fd:
                    8c:ce:26:8a:d2:97:6f:ce:16:9d:f1:57:73:1e:47:
                    8f:03:3b:b2:aa:4c:9f:ae:66:29:c7:80:59:83:a4:
                    3d:e2:49:84:8f:43:53:c2:fb:1a:92:df:45:8c:2c:
                    8b:01:ed:8f:40:0f:b6:c6:fc:24:54:fa:70:1c:67:
                    2a:34:78:73:73:d3:b4:91:63:cf:1c:13:bb:e9:33:
                    29:84:c7:73:73:d4:c4:c0:30:3b:61:16:f1:ee:59:
                    45:17:f1:49:68:e4:13:3d:df:8e:f4:50:6d:de:ff:
                    32:22:7d:e0:ef:2b:2e:61:07:53:c8:13:69:d8:d2:
                    21:6e:54:24:cc:70:f1:f8:70:f7:55:c7:a9:a0:ac:
                    9b:5e:26:68:bd:cb:f0:99:ee:4b:d1:99:ab:46:ef:
                    dd:61:7b:3e:69:4c:9a:7b:b4:d3:61:75:e3:8a:82:
                    92:9b:19:5d:ec:84:c2:cd:8b:5c:54:4d:b2:d0:7c:
                    0f:e0:29:73:4b:1e:0a:2c:d6:4d:8f:8c:23:96:fb:
                    9f:9d:f7:5c:27:fd:ff:22:85:06:0e:eb:15:7d:96:
                    a3:c0:ad:1a:09:52:7b:2f:3b:74:b1:e5:c8:50:8b:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AE:12:FE:11:98:6B:F9:EF:30:32:59:68:0E:1C:1D:C9:B2:7E:40
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/v64S_hGYa_nvMDJZaA4cHcmyfkA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60581

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:ed:b7:2e:03:49:8f:c9:f5:1e:6c:f1:cb:8a:52:75:52:
         37:a0:5b:1f:08:96:34:2e:e7:bd:10:58:97:88:11:37:f8:b5:
         6e:4c:0a:60:bf:4d:13:0c:b8:a7:30:28:e7:25:07:dc:88:fa:
         62:3c:72:89:bf:cc:7e:4e:f5:a5:4d:73:89:4e:4e:fa:22:06:
         ff:b8:e8:a2:06:1c:ff:bf:6c:0c:33:5e:54:31:5d:c2:2b:1e:
         11:1b:79:ab:d1:d6:7c:36:d8:fd:ca:23:62:ef:d9:25:2c:c0:
         3e:66:eb:43:42:ee:78:d3:46:7b:14:6e:e5:b8:7c:6d:ad:4e:
         eb:1c:dc:5e:4e:7c:fd:a4:3a:5b:a9:49:66:b2:28:b3:e4:42:
         3c:81:a2:22:a8:89:48:2e:49:36:e9:d4:15:ae:bf:87:60:ae:
         57:ae:3e:5b:95:e2:73:88:b9:9e:2e:e5:f2:67:91:50:a0:a5:
         82:d5:77:52:cb:e3:79:0a:05:8c:74:e8:a9:cc:3c:9d:e0:f5:
         ec:79:47:c3:bf:02:2d:7f:8e:7f:12:44:0c:9f:6b:f5:d4:97:
         0f:9f:81:54:91:ba:d5:5e:18:ab:fb:e1:ab:92:6e:b9:c9:01:
         06:d1:c4:c7:fd:30:fc:7b:54:3f:9e:c5:2d:80:f8:4c:f2:e7:
         70:80:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:38 2026 by rpki-client