Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/I9uXijOFB1Buptjj8cSJTpw6dR8.asa
File:                     I9uXijOFB1Buptjj8cSJTpw6dR8.asa (raw, json)
Hash identifier:          17y24aXIYzYapxA2/6x0iuPWu56wHFQvEJudXooiTwY=
Subject key identifier:   23:DB:97:8A:33:85:07:50:6E:A6:D8:E3:F1:C4:89:4E:9C:3A:75:1F
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       019F19014791A26C6147EE987FB13E26AC04
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/I9uXijOFB1Buptjj8cSJTpw6dR8.asa
Signing time:             Tue 30 Jun 2026 14:49:01 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31319
Providers:                AS: 174
                          AS: 1299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:47:91:a2:6c:61:47:ee:98:7f:b1:3e:26:ac:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Jun 30 14:49:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=23db978a338507506ea6d8e3f1c4894e9c3a751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:36:b6:ec:d7:f2:af:ee:82:34:64:39:e0:
                    c3:2e:76:2b:c8:7d:ef:6f:be:61:52:d9:2c:79:e0:
                    b6:56:9a:fd:a9:60:7e:a7:69:63:08:1e:67:f3:12:
                    1a:3f:fa:2f:cf:06:95:41:70:c1:2f:4a:ba:f6:b9:
                    67:85:db:72:a7:43:29:2a:72:c0:f1:e6:4e:16:88:
                    f6:a5:ea:ab:f7:7f:39:62:0b:08:d5:9f:9c:6c:28:
                    95:8f:9b:8f:19:31:2e:bd:81:b4:e2:c2:2e:af:db:
                    97:92:6e:7d:34:25:9f:6a:5d:01:58:93:f6:91:94:
                    b4:a5:32:03:ac:db:96:fe:a4:1d:19:0e:6d:b0:95:
                    c6:4c:bc:26:f3:08:be:c2:a5:0d:8f:48:f6:e1:a5:
                    45:8a:cb:a3:01:83:46:81:36:82:9a:78:18:fe:55:
                    a9:00:5d:e1:78:99:c2:2b:c7:2e:8d:c6:b9:7a:1a:
                    31:26:9e:4c:25:75:66:fb:fd:75:eb:5b:81:97:7f:
                    9d:7e:7c:a3:8f:f3:b5:0f:43:3e:d8:0a:42:17:f1:
                    46:8b:cc:f4:a2:c7:5e:3b:20:62:39:31:ae:c8:90:
                    ed:a9:fe:7d:04:01:bb:e5:c0:8d:3a:70:a4:56:c8:
                    e7:e5:69:67:b3:26:80:5e:bb:27:de:ce:75:68:fb:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DB:97:8A:33:85:07:50:6E:A6:D8:E3:F1:C4:89:4E:9C:3A:75:1F
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/I9uXijOFB1Buptjj8cSJTpw6dR8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31319

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:5c:0f:d5:29:e4:83:72:f1:52:99:ab:28:36:8e:8f:0b:
         87:8d:3c:d3:a5:e7:dd:4e:c8:d6:e2:c4:27:3d:e2:46:11:87:
         b4:bc:f9:b9:c7:9b:9b:c3:8d:f6:a2:c0:4c:0d:79:3c:ff:e1:
         90:aa:c9:f8:29:c0:c2:f4:02:83:ab:91:58:e9:34:59:1b:0a:
         18:e7:d2:cb:a9:02:55:2d:68:a3:06:ae:8a:7c:64:1f:f4:e9:
         04:b5:72:13:87:ba:ce:a7:49:1e:93:7d:4f:dd:f1:cf:a9:38:
         1c:46:90:ab:2f:19:17:f0:70:50:a4:2f:f0:39:91:50:85:44:
         96:a3:75:db:72:a8:6d:1a:f9:91:36:05:60:a9:35:00:bd:8a:
         03:ba:76:e6:86:74:0b:bd:92:ab:6f:e7:04:60:52:ee:c1:a4:
         8f:6e:ca:df:e9:97:27:b6:b2:22:1e:32:6f:8a:ba:1e:59:f9:
         d8:b9:23:51:5f:e9:4e:cd:b0:65:f4:4a:6b:9e:0f:d6:4f:66:
         90:8d:87:20:94:b6:91:8f:9f:00:ac:a5:7c:0b:cf:2d:34:40:
         99:12:51:15:0c:8e:88:44:35:82:a3:4a:52:3e:51:31:7b:9b:
         4b:6c:52:a1:97:ee:20:dc:c8:ed:40:40:54:95:8f:4a:e0:f5:
         77:07:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:16 2026 by rpki-client