Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/mwjxtKPuHdDhkzcGADt1aiLxCIc.asa
File:                     mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (raw, json)
Hash identifier:          Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=
Subject key identifier:   9B:08:F1:B4:A3:EE:1D:D0:E1:93:37:06:00:3B:75:6A:22:F1:08:87
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019DF246A4F147432E64F1883D7FF65BCDB5
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/mwjxtKPuHdDhkzcGADt1aiLxCIc.asa
Signing time:             Mon 04 May 2026 09:16:49 +0000
ASPA not before:          Mon 04 May 2026 09:16:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31034
Providers:                AS: 174
                          AS: 1267
                          AS: 1299
                          AS: 2914
                          AS: 3356
                          AS: 6762
                          AS: 6939
                          AS: 9002
                          AS: 19905
                          AS: 32787
                          AS: 200185
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f2:46:a4:f1:47:43:2e:64:f1:88:3d:7f:f6:5b:cd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: May  4 09:16:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b08f1b4a3ee1dd0e1933706003b756a22f10887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:50:e3:8a:fa:31:5f:1a:1e:ad:01:35:3e:
                    6f:5e:54:0a:9e:11:52:0c:96:79:17:cc:7c:7d:8e:
                    ac:62:e6:a6:79:68:88:0e:38:f6:88:91:ac:6a:9f:
                    ca:e0:0c:d8:44:d7:ab:e4:69:1d:0d:d1:b4:3f:ad:
                    a3:9d:ae:93:03:6c:f0:db:b7:43:32:88:06:d3:32:
                    a9:71:d3:c4:0b:5c:74:fa:af:28:c1:82:7f:28:68:
                    8d:c7:06:bd:5b:ec:5b:fa:07:48:be:2c:b4:b2:ab:
                    8a:a8:a6:fa:67:7c:c5:73:d3:3a:f2:b2:d3:14:bf:
                    36:82:66:ab:11:75:4a:9e:98:dc:1c:41:d4:62:fb:
                    13:46:40:13:55:d9:e9:d6:bf:f6:e0:d0:2e:0b:7a:
                    aa:14:57:64:39:7f:71:80:d8:9b:3c:e6:58:e2:fd:
                    11:80:d3:f6:d5:da:82:d7:52:88:92:77:fe:48:64:
                    8b:89:72:1a:57:06:f1:25:9e:8c:63:11:2b:bc:8e:
                    7f:48:a1:40:83:e1:f6:b2:2a:f3:ab:14:a1:df:c3:
                    a1:78:31:1b:ae:4e:d6:c5:0c:22:0d:b4:cc:79:fd:
                    9e:f5:18:b8:80:89:37:a0:71:22:d7:e0:ab:2d:6e:
                    94:8e:7e:58:26:32:33:63:70:33:fc:7e:18:5b:44:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:08:F1:B4:A3:EE:1D:D0:E1:93:37:06:00:3B:75:6A:22:F1:08:87
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/mwjxtKPuHdDhkzcGADt1aiLxCIc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31034

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:57:af:91:a0:b7:b8:32:a8:43:7b:55:2b:67:24:f2:06:
         cc:00:b9:f3:8f:83:ab:cd:80:ad:ee:71:d3:e8:96:d5:33:ad:
         df:b9:7f:c0:62:29:44:3f:b1:2b:a8:42:b7:7d:c0:b2:de:72:
         00:d2:e3:16:55:02:ec:54:e5:d3:dd:9c:fb:83:83:b5:7e:8f:
         a6:90:4f:f7:6b:ac:77:57:8f:b5:70:7c:f9:2a:ff:b9:c1:72:
         70:fa:0c:bd:a0:45:fc:60:e9:24:3c:c4:cf:26:f8:de:d5:28:
         f9:14:bc:a1:f1:a9:11:7f:b8:8e:93:5c:2d:b0:d5:94:e2:d4:
         54:59:32:02:0d:b6:39:13:b6:b2:a7:58:10:15:8c:ba:0c:89:
         4d:6c:c6:50:42:b7:dc:1b:f8:bb:5f:c0:73:6b:cc:a4:0e:28:
         78:a4:ed:e6:80:a9:d2:8d:66:79:ad:3c:c3:9f:0f:aa:ca:7f:
         9c:37:0f:6b:43:cd:8e:e1:03:c1:92:cf:b7:e0:95:49:32:ae:
         40:82:9b:17:b6:a0:7a:bc:fe:5a:94:1d:46:a9:1e:31:b8:5c:
         be:34:96:ca:c2:10:bd:59:b0:b3:17:11:cd:05:60:e5:b0:a8:
         c3:9a:79:3d:b3:a2:f3:11:04:e7:a0:bc:42:5a:1d:85:ea:d4:
         cc:3b:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:41 2026 by rpki-client