Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/2ufcO6Solkeoxok1gEGcUzsMb5Q.asa
File:                     2ufcO6Solkeoxok1gEGcUzsMb5Q.asa (raw, json)
Hash identifier:          YPRSCljS8W4a21wjawN3tjkT21ahLvmlXryi5Zk5yms=
Subject key identifier:   DA:E7:DC:3B:A4:A8:96:47:A8:C6:89:35:80:41:9C:53:3B:0C:6F:94
Certificate issuer:       /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial:       019F190149C70B3221EAEDA31FB2490A7D42
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/2ufcO6Solkeoxok1gEGcUzsMb5Q.asa
Signing time:             Tue 30 Jun 2026 14:49:02 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:02 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34535
Providers:                AS: 24589
                          AS: 24651
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:49:c7:0b:32:21:ea:ed:a3:1f:b2:49:0a:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
        Validity
            Not Before: Jun 30 14:49:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dae7dc3ba4a89647a8c6893580419c533b0c6f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:49:06:9c:38:43:7e:5a:20:65:47:ac:e2:
                    05:20:81:3a:cb:30:4d:0a:97:89:11:48:b7:e0:69:
                    9e:41:63:8e:a1:86:93:60:a0:31:6e:c1:5a:3a:0c:
                    5c:c4:48:10:68:36:1b:4f:88:03:41:23:e1:64:fa:
                    a2:9c:29:51:6f:4f:72:2a:b4:0c:6f:0c:75:92:2a:
                    55:26:14:53:10:ff:24:cb:42:d0:49:3d:fb:34:d5:
                    56:f3:70:9f:de:d9:fa:d0:f3:48:86:5b:2e:29:09:
                    6a:f7:94:b9:00:a6:73:6a:e3:0e:71:58:79:2c:d6:
                    41:e8:22:c6:ca:ae:88:d7:7c:78:25:30:c8:42:83:
                    84:12:de:cd:6a:5b:99:79:e8:66:6e:08:c2:bb:8c:
                    35:bf:6c:d6:22:7e:fb:b8:91:36:38:c5:fd:1c:56:
                    fc:d5:59:88:4d:a1:25:d8:b6:8a:24:38:34:21:c5:
                    82:f8:85:fe:21:59:3c:19:cf:ad:9f:f7:b7:a3:55:
                    8a:66:8b:64:e7:3d:99:ec:8b:06:d0:a5:a0:9d:e8:
                    4f:6a:4e:0e:b8:6f:42:ae:19:8e:70:03:9c:0f:c2:
                    a9:c9:1b:94:ea:02:00:8a:f6:ef:f6:4c:8a:8d:55:
                    3e:93:7e:67:a8:73:40:91:ff:fa:30:6e:b2:38:f0:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:DC:3B:A4:A8:96:47:A8:C6:89:35:80:41:9C:53:3B:0C:6F:94
            X509v3 Authority Key Identifier:
                keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/2ufcO6Solkeoxok1gEGcUzsMb5Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34535

    Signature Algorithm: sha256WithRSAEncryption
         72:27:33:0c:a4:4a:b3:25:5e:c3:fa:95:eb:5e:b1:39:d2:a9:
         25:d4:ce:5a:49:b4:17:77:db:83:59:03:1c:ac:6c:4f:01:a5:
         37:75:d1:d0:9f:75:a5:8c:ba:1f:0f:dd:df:1b:b4:55:38:2f:
         50:29:26:ee:da:ea:bf:42:6f:55:03:a9:6e:9e:21:de:63:b6:
         85:06:2b:68:f8:46:28:69:34:34:cf:d7:22:0f:d5:ff:69:7f:
         b7:78:c7:49:56:be:00:e0:a6:d3:d5:bc:29:40:8c:1d:32:86:
         25:64:43:d7:cd:5c:ab:1d:a6:c3:95:8d:f1:53:0b:51:03:9d:
         d4:b9:8c:d3:31:28:40:d7:24:58:ec:8f:06:99:2d:31:cc:84:
         e4:5c:ac:ab:71:12:98:75:4f:be:65:47:23:26:90:ea:b7:c8:
         79:b5:2c:f6:6d:17:fb:76:72:64:9a:c7:72:ec:11:86:1e:64:
         d2:44:a9:50:50:66:27:b0:53:5d:a0:df:ae:18:dd:63:ad:d2:
         fa:4b:67:3b:b2:e6:c4:3b:3c:8a:44:ba:ef:24:b4:e8:93:df:
         5a:27:d9:de:f3:b0:73:ee:3e:b1:5b:77:c5:9a:18:52:40:e5:
         6e:b4:f9:a2:73:60:35:43:18:7a:ac:45:e5:1f:e4:c2:d4:c0:
         94:b6:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:11 2026 by rpki-client