Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/1-l4RaLfBJyd2MPQTNrHgHOb738I.asa
File:                     1-l4RaLfBJyd2MPQTNrHgHOb738I.asa (raw, json)
Hash identifier:          7p+VWBjLWtE4REi9BbdzkPj1Ve0U1PFZBt+RJ3xIr6c=
Subject key identifier:   FA:5E:11:68:B7:C1:27:27:76:30:F4:13:36:B1:E0:1C:E6:FB:DF:C2
Certificate issuer:       /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial:       019F27758FBB8DA6175949C040FA5436CA0B
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/1-l4RaLfBJyd2MPQTNrHgHOb738I.asa
Signing time:             Fri 03 Jul 2026 10:10:43 +0000
ASPA not before:          Fri 03 Jul 2026 10:10:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34177
Providers:                AS: 174
                          AS: 1299
                          AS: 3356
                          AS: 5511
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:75:8f:bb:8d:a6:17:59:49:c0:40:fa:54:36:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
        Validity
            Not Before: Jul  3 10:10:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fa5e1168b7c127277630f41336b1e01ce6fbdfc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:aa:80:15:71:b5:f2:b4:4a:0e:19:a0:77:
                    ca:f9:3d:f9:af:e1:74:fb:2b:2f:18:f0:81:3f:d4:
                    35:b9:cb:45:f3:a1:53:43:a5:3d:a5:a1:19:8c:fb:
                    bd:53:a3:e9:ef:11:f8:4f:43:a5:dc:2f:a4:c1:7e:
                    82:cb:b5:12:e0:ff:e7:35:ae:80:6f:b0:2d:df:fc:
                    31:38:a0:6b:ff:2b:36:b9:9d:cc:11:4f:cd:5f:7e:
                    ac:38:49:2e:8a:ae:a0:85:9e:91:2a:77:9f:8d:55:
                    72:dc:2e:7d:8b:1c:73:e6:f0:0e:0d:c0:0d:46:d0:
                    da:90:4d:01:c4:43:14:ac:e0:10:78:52:06:37:ca:
                    0c:f4:d4:d9:e7:86:ea:f8:24:ba:b1:41:30:8c:bd:
                    62:e1:a7:97:a2:74:5f:50:0c:b5:e3:13:8d:02:8d:
                    c3:67:9f:de:a1:7e:54:d5:f7:87:c7:c9:6f:26:63:
                    cb:bf:dd:af:36:8d:27:8e:67:b1:49:0b:02:a7:d7:
                    bb:56:2c:f1:06:6e:b4:e7:9b:23:90:dd:05:e9:4e:
                    29:60:49:56:ec:57:c7:1f:56:ef:df:1a:03:7e:1b:
                    ee:b4:d0:bb:b6:31:a8:5b:f5:1f:b6:63:9f:12:af:
                    91:95:40:a4:2e:78:cf:35:7e:a9:4b:41:f0:57:59:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:11:68:B7:C1:27:27:76:30:F4:13:36:B1:E0:1C:E6:FB:DF:C2
            X509v3 Authority Key Identifier:
                keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/1-l4RaLfBJyd2MPQTNrHgHOb738I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34177

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:b1:b7:e4:0d:bd:4a:4b:eb:f3:09:c7:50:68:3d:7c:63:
         d6:6c:17:e9:aa:e8:4c:c4:24:a1:01:b6:bf:16:05:3e:8d:c0:
         60:fd:47:bd:8a:57:ec:30:12:0f:f7:d7:bf:1a:1e:5c:c6:25:
         f6:cd:eb:ec:df:3d:3c:01:15:b9:4d:92:ff:2c:5f:4c:be:8b:
         75:9d:b0:e9:21:bb:7a:4b:1f:47:ad:06:64:8e:72:2b:ae:49:
         1b:e0:cb:96:07:a2:a1:97:66:79:73:08:9a:a0:d2:fc:94:48:
         10:e7:75:43:c2:8c:4b:5e:94:3d:1f:ca:28:a5:6e:bf:23:cf:
         9b:f1:56:0b:7b:0c:9d:86:c3:17:af:df:b9:f7:97:26:ea:8b:
         29:8b:29:14:cc:94:97:b0:03:f7:00:b0:6b:a3:6c:66:45:e6:
         35:30:69:75:8e:e5:e3:f1:1c:4b:50:42:6e:9a:aa:c7:c5:40:
         4d:45:cf:91:1e:88:b7:e8:ed:ef:84:a9:74:72:40:85:58:a8:
         bd:3c:e0:94:88:11:dc:44:de:ca:79:9f:a1:9d:f8:c1:d6:a7:
         f7:89:80:67:84:76:30:1c:20:33:1d:ea:65:1d:2b:e5:68:34:
         73:ae:09:ef:cb:d4:d1:4a:33:ed:4e:12:74:56:7d:44:49:b1:
         ca:ee:e9:e6
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgISAZ8ndY+7jaYXWUnAQPpUNsoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjYwNzAzMTAxMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTVlMTE2OGI3YzEyNzI3NzYzMGY0MTMzNmIxZTAxY2U2ZmJkZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6iqgBVxtfK0Sg4ZoHfK+T35r+F0
+ysvGPCBP9Q1uctF86FTQ6U9paEZjPu9U6Pp7xH4T0Ol3C+kwX6Cy7US4P/nNa6A
b7At3/wxOKBr/ys2uZ3MEU/NX36sOEkuiq6ghZ6RKnefjVVy3C59ixxz5vAODcAN
RtDakE0BxEMUrOAQeFIGN8oM9NTZ54bq+CS6sUEwjL1i4aeXonRfUAy14xONAo3D
Z5/eoX5U1feHx8lvJmPLv92vNo0njmexSQsCp9e7VizxBm6055sjkN0F6U4pYElW
7FfHH1bv3xoDfhvutNC7tjGoW/UftmOfEq+RlUCkLnjPNX6pS0HwV1kg6QIDAQAB
o4ICBTCCAgEwHQYDVR0OBBYEFPpeEWi3wScndjD0Ezax4Bzm+9/CMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvMS1sNFJhTGZCSnlkMk1QUVROckhnSE9iNzM4SS5hc2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvOGFiZWVkLWY1M2ItNDc3Ni1hOGUyLTM2ZTlhNzliZDk1
MC8xL0tYeFFqU096Z3hXNzlGdHliU0lGQ2tZU2U0dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAhYEwDQYJKoZI
hvcNAQELBQADggEBAE9jsbfkDb1KS+vzCcdQaD18Y9ZsF+mq6EzEJKEBtr8WBT6N
wGD9R72KV+wwEg/3178aHlzGJfbN6+zfPTwBFblNkv8sX0y+i3WdsOkhu3pLH0et
BmSOciuuSRvgy5YHoqGXZnlzCJqg0vyUSBDndUPCjEtelD0fyiilbr8jz5vxVgt7
DJ2Gwxev37n3lybqiymLKRTMlJewA/cAsGujbGZF5jUwaXWO5ePxHEtQQm6aqsfF
QE1Fz5EeiLfo7e+EqXRyQIVYqL084JSIEdxE3sp5n6Gd+MHWp/eJgGeEdjAcIDMd
6mUdK+VoNHOuCe/L1NFKM+1OEnRWfURJscru6eY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:28 2026 by rpki-client