Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/vsf8LQXVSI_154WNFyRlxFSnkh0.asa
File:                     vsf8LQXVSI_154WNFyRlxFSnkh0.asa (raw, json)
Hash identifier:          NPO9cK2OOJcLqlWS9kD9KyKkEvllCdUMDHEWnkAZkdk=
Subject key identifier:   BE:C7:FC:2D:05:D5:48:8F:F5:E7:85:8D:17:24:65:C4:54:A7:92:1D
Certificate issuer:       /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial:       019F280D895801A61CDC22A9DF30D8389C46
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/vsf8LQXVSI_154WNFyRlxFSnkh0.asa
Signing time:             Fri 03 Jul 2026 12:56:43 +0000
ASPA not before:          Fri 03 Jul 2026 12:56:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12350
Providers:                AS: 34177
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:0d:89:58:01:a6:1c:dc:22:a9:df:30:d8:38:9c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
        Validity
            Not Before: Jul  3 12:56:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bec7fc2d05d5488ff5e7858d172465c454a7921d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:92:bc:e0:22:25:6d:e0:38:7d:7a:af:d6:
                    46:93:4b:7b:1d:42:8a:a9:15:68:a2:c3:4c:91:ca:
                    26:0e:ca:cc:36:ba:b0:d1:32:aa:67:7b:96:47:d5:
                    ad:10:b4:6e:cf:f1:15:de:df:d5:e3:06:66:3f:3a:
                    a6:bb:78:7e:2d:72:e2:e6:be:83:ac:f9:8c:41:cc:
                    f0:f1:ef:74:86:8e:87:76:5c:37:07:9c:dc:99:9c:
                    94:9c:c2:1f:06:ea:7d:4b:5f:c3:05:95:db:8c:ed:
                    fa:bd:ad:b0:e3:50:9f:eb:ad:44:a2:a8:ae:9d:27:
                    05:06:18:52:e6:e9:5c:08:44:0b:56:e6:e3:6f:4e:
                    98:a7:bb:15:27:b3:19:84:89:94:8b:cc:46:56:57:
                    8d:90:2f:a5:dc:6e:d4:ec:1e:76:c8:5d:ab:02:c3:
                    e0:b3:ab:05:a6:57:f0:6a:de:95:c4:6c:eb:8e:92:
                    00:50:ad:b4:9c:ec:d1:63:4c:2f:84:67:61:7b:b2:
                    1a:61:86:dc:60:4a:4a:69:94:ba:cf:e7:29:7c:87:
                    77:8f:4f:08:ef:c5:9b:5e:ca:9f:57:c2:2d:7c:df:
                    72:9f:41:ef:df:47:45:d3:c3:95:5d:20:a8:fb:1a:
                    ca:5e:0e:36:90:c7:98:80:be:d9:5a:7a:e2:5b:ea:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C7:FC:2D:05:D5:48:8F:F5:E7:85:8D:17:24:65:C4:54:A7:92:1D
            X509v3 Authority Key Identifier:
                keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/vsf8LQXVSI_154WNFyRlxFSnkh0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12350

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:c5:5b:cc:f0:2a:57:49:2e:69:f2:ea:58:e3:07:ae:4e:
         d5:cb:77:0c:8f:3e:f6:3a:97:67:6c:18:ad:fb:22:cb:90:58:
         a8:2a:9a:fb:87:ee:88:ff:ab:14:35:13:f4:a4:23:95:cb:55:
         5e:7b:2a:c2:5e:35:9f:77:90:08:27:c9:e8:3d:45:5e:ee:8e:
         57:4a:fd:c9:16:c5:f2:0a:3a:0e:26:b4:07:6d:7d:23:42:c5:
         af:bc:dd:ff:87:2a:dd:a0:c1:46:90:b0:7d:67:8b:63:fc:56:
         af:56:dc:75:4c:d4:87:93:3b:c5:80:d2:d1:f1:26:8d:e1:06:
         91:31:86:13:3b:94:17:de:55:d8:3e:56:cf:fb:bd:1b:e7:16:
         1d:b9:c4:83:e8:94:ea:25:bf:4f:bb:9e:a5:57:f7:d8:c2:7e:
         2e:e2:73:63:53:10:65:24:8e:6a:9d:ca:26:65:c8:aa:92:6a:
         55:f5:09:81:55:6b:d9:19:d1:45:aa:12:4a:43:71:08:de:50:
         f2:b1:d5:1a:6d:a9:fd:04:b3:e1:31:c0:49:ab:a4:57:77:40:
         e6:66:f7:8f:81:00:79:00:59:68:bc:3a:c2:1a:a0:00:24:8c:
         1d:d3:20:82:e8:e6:8e:61:33:28:d2:1b:f9:ce:5c:f9:fa:cf:
         de:33:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:00 2026 by rpki-client