Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa
File:                     s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa (raw, json)
Hash identifier:          9PM53IuTV6JPTHt2d4Dv4yh3Dx6FAU5utGwfVFOGN9M=
Subject key identifier:   B3:A1:94:E5:AD:63:9F:C3:AE:F9:43:86:83:2A:D9:05:72:0C:52:DA
Certificate issuer:       /CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Certificate serial:       019F2369281FA1788BAE29E984086F118BDA
Authority key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa
Signing time:             Thu 02 Jul 2026 15:18:41 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31454
Providers:                AS: 8708
                          AS: 9050
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:28:1f:a1:78:8b:ae:29:e9:84:08:6f:11:8b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
        Validity
            Not Before: Jul  2 15:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b3a194e5ad639fc3aef94386832ad905720c52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:19:ee:c5:2e:38:ed:11:b3:3a:13:e0:e1:
                    f7:b2:ed:40:4b:c3:67:c4:5c:b0:26:17:90:80:97:
                    b6:44:4c:e4:56:42:9a:90:f1:cc:46:13:60:27:8e:
                    de:c6:44:4d:b6:54:6b:27:90:6e:de:fc:32:dd:58:
                    12:d0:5a:18:64:5f:01:5d:d7:8a:64:77:5b:1d:5c:
                    9e:fd:2c:d9:cb:9d:c3:6a:3d:df:bb:dc:61:4d:51:
                    a6:71:37:d6:42:11:aa:fe:33:f6:f5:f0:84:4b:f8:
                    ee:c6:f1:d8:03:c6:a3:b3:68:3b:61:be:db:05:82:
                    52:2d:67:4b:30:e2:43:ac:09:d1:0f:45:95:84:73:
                    17:4f:19:67:0b:1e:72:ff:ce:1c:85:4d:7c:39:b4:
                    a1:13:6c:69:01:82:33:6a:c5:18:1e:f1:29:4c:da:
                    8d:0c:28:b5:a1:49:3f:ec:f9:8a:09:c4:a5:57:c7:
                    0a:17:f8:d4:ad:0c:ed:cc:5b:d1:9a:be:8d:a8:7b:
                    c6:69:15:a6:53:e9:6c:9e:9a:e2:88:a2:42:f8:19:
                    a6:1a:78:47:5f:03:72:2f:d5:9e:13:bb:5b:7f:17:
                    57:1a:8c:40:8d:b0:ae:1e:b2:d7:53:c1:4d:5b:01:
                    70:29:50:92:8e:a6:fe:ba:2f:ed:ff:a5:d4:8e:6e:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A1:94:E5:AD:63:9F:C3:AE:F9:43:86:83:2A:D9:05:72:0C:52:DA
            X509v3 Authority Key Identifier:
                keyid:6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31454

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:0e:e4:b8:8e:d2:22:36:49:5a:4a:53:09:e0:dc:c8:27:
         9a:c4:4e:75:4f:0f:e8:a3:40:3a:68:7d:32:62:26:46:0f:80:
         7c:81:6a:79:67:bf:98:d6:ec:80:6f:37:e3:2e:aa:96:f1:f0:
         5e:51:3b:7b:89:38:86:54:73:26:37:07:9c:f7:03:2c:58:e5:
         e4:a7:39:4c:84:d6:35:17:c6:80:34:de:1e:35:57:b2:44:f3:
         39:de:32:54:83:7f:eb:c2:f7:dd:2e:7b:93:1f:3c:40:69:ab:
         b1:ec:8f:64:3e:1f:64:9a:17:9e:0a:ec:db:c1:64:ef:c4:ab:
         39:1b:20:8d:97:d8:83:11:a8:27:ab:f9:34:4a:fe:30:0a:a9:
         b0:89:af:4b:cc:15:47:c3:1b:5d:3d:0c:49:7a:c5:04:07:0c:
         9c:97:b4:cb:a5:cd:ab:ea:ab:b1:c4:d3:ad:ca:23:34:2e:55:
         53:41:07:f6:a6:18:7d:6f:64:4a:dd:10:1c:43:6b:86:99:ff:
         e8:84:e7:0f:5c:8e:72:ed:0b:ba:68:88:a5:b4:6c:6d:82:fd:
         8e:e1:4f:81:03:bb:e6:5a:9e:ee:c4:35:4c:83:41:30:c3:c3:
         30:87:fc:d9:27:58:91:7f:45:ad:a9:ed:b7:4b:57:e3:fd:12:
         e5:a6:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:05 2026 by rpki-client