Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/qF2L7PLbDY5FTyYJ3o9eII9AK24.asa
File:                     qF2L7PLbDY5FTyYJ3o9eII9AK24.asa (raw, json)
Hash identifier:          QFUhpFhsZE20802EA0XAY2MlEO35aJR5KvDSsdQVTm0=
Subject key identifier:   A8:5D:8B:EC:F2:DB:0D:8E:45:4F:26:09:DE:8F:5E:20:8F:40:2B:6E
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019DD39EBED4B56643826B6F0E0907C83BAA
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/qF2L7PLbDY5FTyYJ3o9eII9AK24.asa
Signing time:             Tue 28 Apr 2026 10:24:49 +0000
ASPA not before:          Tue 28 Apr 2026 10:24:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31034
Providers:                AS: 174
                          AS: 1267
                          AS: 1299
                          AS: 2914
                          AS: 3356
                          AS: 6762
                          AS: 6939
                          AS: 9002
                          AS: 19905
                          AS: 200185
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d3:9e:be:d4:b5:66:43:82:6b:6f:0e:09:07:c8:3b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Apr 28 10:24:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a85d8becf2db0d8e454f2609de8f5e208f402b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:5b:17:fa:40:6d:c3:71:20:2f:a0:6d:1c:
                    80:38:d2:98:0e:87:46:26:4c:cf:b9:05:33:64:e0:
                    b5:03:c5:64:f4:65:d1:0a:bd:64:6d:da:90:cd:d6:
                    fd:1b:71:b9:5a:e9:b3:47:11:33:d2:56:d4:c5:59:
                    09:bd:67:18:ca:d7:76:e4:1f:62:83:80:32:46:49:
                    5a:bb:0c:46:37:15:e3:3b:75:7a:8a:74:bc:8c:b0:
                    22:67:5a:4a:f1:84:51:fb:6f:d4:9c:16:b9:bb:f0:
                    b0:69:fc:08:b3:7b:07:06:5d:c8:47:0e:0d:05:01:
                    35:24:22:70:24:6d:01:29:eb:7f:6d:40:b4:0c:67:
                    64:93:9b:d0:6f:ab:29:c6:49:26:58:c4:ec:cf:ff:
                    f6:d4:3c:3c:f1:a7:0d:f8:03:1a:cb:7f:9f:c0:7a:
                    95:7c:b5:96:42:00:6d:6c:7d:c8:ba:15:af:13:38:
                    11:2f:d1:2e:2e:8c:a2:b9:6b:5e:98:fc:e0:fe:7f:
                    eb:36:3d:34:85:1d:f0:b9:c1:fe:d6:09:a6:84:48:
                    18:e9:d5:6b:52:b1:9b:30:ad:f0:5a:cf:b5:38:a8:
                    52:14:9b:31:9c:7f:fa:2d:ec:40:eb:72:b0:da:8c:
                    c9:b9:39:13:4a:86:6b:58:ed:6f:3a:ee:7c:46:87:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5D:8B:EC:F2:DB:0D:8E:45:4F:26:09:DE:8F:5E:20:8F:40:2B:6E
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/qF2L7PLbDY5FTyYJ3o9eII9AK24.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31034

    Signature Algorithm: sha256WithRSAEncryption
         9b:f7:c5:63:19:8f:c3:a7:c5:b4:df:c4:cc:63:14:16:48:44:
         33:0c:95:0e:41:b8:a4:fb:c0:32:b3:d7:cb:7b:38:ab:db:31:
         e8:75:de:f5:fa:ff:01:d1:87:1b:65:06:8e:ae:9f:65:6f:1f:
         eb:ed:49:88:c4:e7:fa:10:50:fb:42:9e:38:7d:97:47:25:e2:
         e1:fb:d2:62:14:bb:70:ad:80:32:f1:4f:22:3f:b5:58:0d:48:
         5f:95:b0:c6:67:d5:97:de:87:7c:c3:ec:fb:46:ae:4f:bd:a2:
         e4:99:5b:47:1d:b7:f3:da:87:86:88:f2:47:0a:e9:ba:32:80:
         cc:d9:47:cb:7d:28:4d:45:e9:89:48:f8:3a:cd:9b:81:d2:94:
         14:d7:e8:9f:7a:7d:0d:8a:72:af:d3:0b:94:6e:20:16:32:6a:
         a2:14:e2:76:79:54:f2:68:67:1f:16:5b:59:56:4f:64:75:6c:
         3a:95:93:54:7a:89:d9:8d:33:f4:a6:ac:18:8b:8b:6d:bb:36:
         b6:40:64:7b:ee:c2:9c:28:d7:36:21:48:20:53:3d:11:5b:b2:
         8a:69:a9:18:eb:ab:fb:e4:c9:45:fb:c7:24:7a:a5:51:85:d0:
         49:af:a8:db:84:e4:71:bf:b8:0f:b5:c2:15:4f:b2:b5:c5:1c:
         ee:25:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:33 2026 by rpki-client