Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uJz8z4Q0oUlleeflsxzEnIK-9kM.asa
File:                     uJz8z4Q0oUlleeflsxzEnIK-9kM.asa (raw, json)
Hash identifier:          6nsFJqq7HKkxWtHFVswySkHYGpiF7GkqrYA6SppLdXc=
Subject key identifier:   B8:9C:FC:CF:84:34:A1:49:65:79:E7:E5:B3:1C:C4:9C:82:BE:F6:43
Certificate issuer:       /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial:       019F2642DB4C710232632BBEAF51EC30C590
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uJz8z4Q0oUlleeflsxzEnIK-9kM.asa
Signing time:             Fri 03 Jul 2026 04:35:43 +0000
ASPA not before:          Fri 03 Jul 2026 04:35:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            29355
Providers:                AS: 9198
                          AS: 35104
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:26:42:db:4c:71:02:32:63:2b:be:af:51:ec:30:c5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
        Validity
            Not Before: Jul  3 04:35:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b89cfccf8434a1496579e7e5b31cc49c82bef643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:09:54:33:4e:6f:09:d3:34:8b:36:6c:01:
                    2f:bf:00:d6:1e:1f:e2:1b:d8:f1:52:e5:df:59:8d:
                    d5:f2:77:c9:f7:c0:0b:6d:b4:6d:3c:d6:db:25:29:
                    e7:f5:67:d0:73:5e:3a:7b:59:21:96:cf:e4:86:02:
                    21:1e:9b:62:fd:ed:a6:81:bf:a9:49:9f:aa:d9:c3:
                    2e:75:d2:44:8b:f7:b0:bd:4f:33:f7:b3:85:6b:4b:
                    74:b1:c7:2f:77:1f:b7:ef:22:36:28:9d:fa:0b:d2:
                    33:65:2a:81:11:48:23:cd:39:47:5a:1a:b8:ee:10:
                    38:de:2a:d2:7c:19:1b:16:9a:ac:42:e4:19:25:89:
                    57:41:22:94:38:d7:7e:1f:be:33:68:dd:88:6f:53:
                    8c:0a:5b:e2:d2:01:2b:b5:02:92:ff:64:ad:3c:95:
                    f4:40:70:b9:12:5a:e5:34:f2:3f:f9:31:cd:aa:67:
                    f0:5a:48:da:44:fe:0e:3b:37:8b:2c:92:ad:88:e8:
                    87:d6:78:2c:3a:e4:6b:b5:bb:18:87:32:e5:c2:f9:
                    f0:05:1e:78:26:90:e1:87:f2:e5:e1:02:75:4e:4d:
                    28:45:67:67:0a:22:de:40:22:87:34:c2:ff:9a:0d:
                    04:41:ae:dd:83:64:c9:a2:1b:b8:cd:7b:e4:3c:ae:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:FC:CF:84:34:A1:49:65:79:E7:E5:B3:1C:C4:9C:82:BE:F6:43
            X509v3 Authority Key Identifier:
                keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uJz8z4Q0oUlleeflsxzEnIK-9kM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29355

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:0d:2b:57:a8:be:9c:0b:13:bd:fe:da:5a:59:54:17:72:
         36:7a:fa:ed:1c:9e:4a:4d:8c:38:24:05:b7:93:4d:da:ef:37:
         ef:03:d5:07:cc:f6:2d:4d:35:5c:0b:90:87:a3:2b:bd:af:22:
         4d:f0:43:03:1f:f6:93:a8:ae:82:d8:91:04:f2:0f:0f:5c:86:
         75:6b:d9:4f:03:0c:e9:12:60:07:32:dd:9e:24:f3:30:6c:a6:
         fa:24:30:28:9b:15:0d:2e:b7:b4:88:d6:41:2c:86:da:92:89:
         72:e1:31:2f:e0:0d:96:40:33:37:9a:d8:24:fc:17:f0:5d:1e:
         04:58:3b:67:39:b9:cf:2a:15:f2:67:5d:c6:2f:d0:60:69:53:
         27:81:72:5c:15:c9:a8:d4:4b:e5:7c:83:ee:0d:5f:6a:55:c5:
         30:2a:a9:d4:b0:00:3a:6d:c7:3d:81:db:7d:23:d5:b9:00:77:
         26:17:f5:dc:5b:7c:9a:75:2c:0e:d2:70:4c:db:90:b0:20:10:
         7b:9c:39:d5:42:26:33:1b:d7:66:33:e2:bc:0b:34:a2:4d:eb:
         f0:0a:51:b6:7c:5b:2f:5f:15:53:b2:d4:80:4a:4b:60:e1:ad:
         a8:9b:d6:80:3a:80:6a:af:6c:bd:a1:c3:8d:6c:1e:f1:37:3b:
         14:c3:75:60
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ8mQttMcQIyYyu+r1HsMMWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZmU2NTE4Yjc0MGFiMTQwNTRiZTc3NDg5OTI4YmI5Zjdk
YWYwZWUwHhcNMjYwNzAzMDQzNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODljZmNjZjg0MzRhMTQ5NjU3OWU3ZTViMzFjYzQ5YzgyYmVmNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhkJVDNObwnTNIs2bAEvvwDWHh/i
G9jxUuXfWY3V8nfJ98ALbbRtPNbbJSnn9WfQc146e1khls/khgIhHpti/e2mgb+p
SZ+q2cMuddJEi/ewvU8z97OFa0t0sccvdx+37yI2KJ36C9IzZSqBEUgjzTlHWhq4
7hA43irSfBkbFpqsQuQZJYlXQSKUONd+H74zaN2Ib1OMClvi0gErtQKS/2StPJX0
QHC5ElrlNPI/+THNqmfwWkjaRP4OOzeLLJKtiOiH1ngsOuRrtbsYhzLlwvnwBR54
JpDhh/Ll4QJ1Tk0oRWdnCiLeQCKHNML/mg0EQa7dg2TJohu4zXvkPK7FWQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFLic/M+ENKFJZXnn5bMcxJyCvvZDMB8GA1UdIwQY
MBaAFLj+ZRi3QKsUBUvndImSi7n32vDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84OTY5ZTctY2E0Zi00ZTMxLWFmYjIt
NDczODNkYzhjZDBlLzEvdUp6OHo0UTBvVWxsZWVmbHN4ekVuSUstOWtNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84OTY5ZTctY2E0Zi00ZTMxLWFmYjItNDczODNkYzhjZDBl
LzEvdVA1bEdMZEFxeFFGUy1kMGlaS0x1ZmZhOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnKrMA0GCSqGSIb3
DQEBCwUAA4IBAQBvDw0rV6i+nAsTvf7aWllUF3I2evrtHJ5KTYw4JAW3k03a7zfv
A9UHzPYtTTVcC5CHoyu9ryJN8EMDH/aTqK6C2JEE8g8PXIZ1a9lPAwzpEmAHMt2e
JPMwbKb6JDAomxUNLre0iNZBLIbakoly4TEv4A2WQDM3mtgk/BfwXR4EWDtnObnP
KhXyZ13GL9BgaVMngXJcFcmo1EvlfIPuDV9qVcUwKqnUsAA6bcc9gdt9I9W5AHcm
F/XcW3yadSwO0nBM25CwIBB7nDnVQiYzG9dmM+K8CzSiTevwClG2fFsvXxVTstSA
Sktg4a2om9aAOoBqr2y9ocONbB7xNzsUw3Vg
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:57 2026 by rpki-client