Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ty6XVNJ0sd4cS-KA2B-Mb3vkec4.asa
File:                     Ty6XVNJ0sd4cS-KA2B-Mb3vkec4.asa (raw, json)
Hash identifier:          5KTK9lPWQnpemBhU32Uad8E8oiwE+Njc101Yuw4ZVck=
Subject key identifier:   4F:2E:97:54:D2:74:B1:DE:1C:4B:E2:80:D8:1F:8C:6F:7B:E4:79:CE
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019D78700338240489E294C9AC09AE9782C9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ty6XVNJ0sd4cS-KA2B-Mb3vkec4.asa
Signing time:             Fri 10 Apr 2026 17:28:19 +0000
ASPA not before:          Fri 10 Apr 2026 17:28:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35346
Providers:                AS: 174
                          AS: 9199
                          AS: 50084
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:78:70:03:38:24:04:89:e2:94:c9:ac:09:ae:97:82:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Apr 10 17:28:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f2e9754d274b1de1c4be280d81f8c6f7be479ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:3f:2e:6f:fa:9d:4c:ec:fb:ea:95:84:9f:
                    2d:bf:71:a8:c5:58:49:52:7e:de:0e:c8:ca:c9:2e:
                    38:d5:9a:b5:32:07:c9:7e:19:32:c6:28:09:01:c8:
                    a9:12:c6:7e:16:6a:96:be:b1:4a:39:11:88:47:8c:
                    45:98:25:27:a3:1f:d8:25:54:96:0d:41:93:0f:dc:
                    20:65:c9:96:6b:77:7f:c4:48:dd:96:89:ff:5f:e3:
                    61:9e:6b:c1:f1:c4:ca:b8:87:dd:70:b1:ae:1b:85:
                    ae:28:82:3c:be:69:21:e6:a1:ab:96:2e:23:af:58:
                    05:2f:1e:a5:41:d9:03:63:54:d7:92:6c:20:a6:4e:
                    52:cb:34:8e:fb:2f:5e:b0:98:89:da:92:6a:74:42:
                    02:70:5a:f7:1e:62:72:54:c8:9d:78:dd:d3:fb:d8:
                    66:7e:25:b7:d2:2a:50:d9:df:37:71:af:81:7f:07:
                    b9:14:b8:6b:94:b6:3f:9d:3d:e7:a9:af:3d:fb:dd:
                    89:8c:1f:98:76:20:b6:88:40:d6:27:6d:95:40:83:
                    f6:34:34:ec:39:83:71:94:9e:29:69:57:d5:8e:71:
                    43:d4:bd:c6:f2:22:24:02:3a:00:ac:92:56:56:20:
                    be:b4:27:01:93:4f:43:0c:d1:eb:03:5a:20:2b:c5:
                    86:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:97:54:D2:74:B1:DE:1C:4B:E2:80:D8:1F:8C:6F:7B:E4:79:CE
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ty6XVNJ0sd4cS-KA2B-Mb3vkec4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35346

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:48:4f:18:24:0b:27:d5:62:6f:3d:33:44:e6:b1:f3:08:
         ce:a9:99:6a:0b:16:f0:8d:0a:3b:7d:51:03:34:9b:9a:1b:23:
         bd:23:5a:58:9f:16:1d:06:0e:fa:73:95:90:9f:9b:c1:b7:95:
         ee:86:24:6a:ed:7e:21:e8:1e:9e:73:8f:0e:47:79:b3:ed:ec:
         6f:f4:24:53:b7:75:e0:97:58:21:9d:e7:3b:ab:32:49:95:d0:
         46:65:93:48:07:50:23:63:b5:95:c6:a3:d6:74:b5:be:f9:93:
         7b:b8:1c:1a:a6:98:f7:c3:f8:3b:e5:4a:41:9e:0f:11:96:a6:
         ad:0a:77:c4:9f:2f:7c:a4:74:fe:7d:0b:5b:0b:31:66:23:5a:
         d1:b3:20:7a:14:c5:de:b6:8a:cf:70:1f:8a:22:bb:bb:6e:2b:
         c7:07:d0:06:1d:17:b8:63:9a:c2:59:35:f8:18:1e:74:9b:66:
         39:a2:d0:15:af:02:8b:a6:60:17:56:c6:90:11:bc:0d:ac:57:
         71:5b:25:e3:ce:4b:78:ba:e9:03:e1:fb:82:e0:f5:93:32:7b:
         d0:5a:08:10:62:2d:3f:82:1a:c3:a3:9f:bf:76:f6:21:74:c3:
         cf:25:7b:66:ac:8b:e6:83:88:8e:5e:42:e5:62:94:18:35:18:
         13:64:d8:37
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ14cAM4JASJ4pTJrAmul4LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwNDEwMTcyODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjJlOTc1NGQyNzRiMWRlMWM0YmUyODBkODFmOGM2ZjdiZTQ3OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx4/Lm/6nUzs++qVhJ8tv3GoxVhJ
Un7eDsjKyS441Zq1MgfJfhkyxigJAcipEsZ+FmqWvrFKORGIR4xFmCUnox/YJVSW
DUGTD9wgZcmWa3d/xEjdlon/X+NhnmvB8cTKuIfdcLGuG4WuKII8vmkh5qGrli4j
r1gFLx6lQdkDY1TXkmwgpk5SyzSO+y9esJiJ2pJqdEICcFr3HmJyVMideN3T+9hm
fiW30ipQ2d83ca+Bfwe5FLhrlLY/nT3nqa89+92JjB+YdiC2iEDWJ22VQIP2NDTs
OYNxlJ4paVfVjnFD1L3G8iIkAjoArJJWViC+tCcBk09DDNHrA1ogK8WGXwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFE8ul1TSdLHeHEvigNgfjG975HnOMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvVHk2WFZOSjBzZDRjUy1LQTJCLU1iM3ZrZWM0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCKEjANBgkqhkiG
9w0BAQsFAAOCAQEAB/JITxgkCyfVYm89M0TmsfMIzqmZagsW8I0KO31RAzSbmhsj
vSNaWJ8WHQYO+nOVkJ+bwbeV7oYkau1+IegennOPDkd5s+3sb/QkU7d14JdYIZ3n
O6sySZXQRmWTSAdQI2O1lcaj1nS1vvmTe7gcGqaY98P4O+VKQZ4PEZamrQp3xJ8v
fKR0/n0LWwsxZiNa0bMgehTF3raKz3AfiiK7u24rxwfQBh0XuGOawlk1+BgedJtm
OaLQFa8Ci6ZgF1bGkBG8DaxXcVsl485LeLrpA+H7guD1kzJ70FoIEGItP4Iaw6Of
v3b2IXTDzyV7ZqyL5oOIjl5C5WKUGDUYE2TYNw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:48 2026 by rpki-client