Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/nPChezrtLOBmgprgP_Au3oUubuA.asa
File:                     nPChezrtLOBmgprgP_Au3oUubuA.asa (raw, json)
Hash identifier:          NV/9jSIYz9t1/I0H/XairY0//xeZIwsbSFxauIof1kA=
Subject key identifier:   9C:F0:A1:7B:3A:ED:2C:E0:66:82:9A:E0:3F:F0:2E:DE:85:2E:6E:E0
Certificate issuer:       /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
Certificate serial:       019F1901086F71372A63D9B206B348B852F4
Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/nPChezrtLOBmgprgP_Au3oUubuA.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49832
Providers:                AS: 12297
                          AS: 49666
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:08:6f:71:37:2a:63:d9:b2:06:b3:48:b8:52:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9cf0a17b3aed2ce066829ae03ff02ede852e6ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:f2:ba:f5:a1:8d:81:d4:21:06:ac:a5:2e:
                    db:1e:57:85:c6:8d:71:d1:f6:0c:3c:1f:3c:f9:d7:
                    8c:3a:c4:c4:19:a3:27:13:c4:11:77:d6:78:c5:5f:
                    44:4d:2e:a0:1b:d5:01:1e:bd:de:b2:de:2a:3d:a5:
                    4f:d0:a1:56:5a:0a:22:9a:57:9f:6d:ac:19:6f:33:
                    ba:63:97:b6:db:c7:67:0c:2a:82:fa:15:a6:c4:08:
                    8b:7e:14:1d:bb:00:d6:5d:10:98:b8:e4:d1:e7:00:
                    62:90:ac:b8:62:52:77:95:df:ef:e0:6f:5a:ae:4f:
                    d7:b6:fb:c7:83:26:df:b2:4b:51:e1:d0:34:4e:96:
                    1d:3d:dc:54:8b:c3:8f:af:4f:61:6e:71:e7:a4:d8:
                    da:c5:ca:05:f7:f4:50:75:73:24:54:cd:c5:83:52:
                    ad:55:5d:21:0b:e8:a3:64:8a:26:01:f9:8c:ad:08:
                    88:8f:f5:c6:35:a7:34:2b:e5:94:a9:76:71:df:4d:
                    10:91:00:89:7b:c5:ec:73:de:62:62:dc:f6:b4:62:
                    12:09:ea:50:ad:61:8b:25:66:99:d2:6b:9d:94:28:
                    3c:93:c7:d9:21:4f:28:c5:ff:0f:d3:59:d0:15:89:
                    b0:8d:0c:d0:23:10:f3:8a:a8:1b:06:d2:a8:cf:1a:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:A1:7B:3A:ED:2C:E0:66:82:9A:E0:3F:F0:2E:DE:85:2E:6E:E0
            X509v3 Authority Key Identifier:
                keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/nPChezrtLOBmgprgP_Au3oUubuA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49832

    Signature Algorithm: sha256WithRSAEncryption
         59:61:95:3c:b2:6f:e7:59:00:85:63:6e:ff:57:fe:88:65:8f:
         77:68:b1:7a:45:87:4e:92:e1:ba:cf:6b:48:fb:67:bd:4c:42:
         85:57:8b:09:b9:9f:8c:0b:0a:d1:92:b5:07:5f:1a:28:66:7d:
         f5:f1:64:23:24:39:24:11:1c:9a:31:6b:79:59:bc:9c:13:df:
         82:35:58:b6:aa:9d:55:3f:56:18:1e:f1:02:75:68:39:f5:3d:
         75:cb:55:1a:fc:aa:d1:24:01:db:59:a6:99:25:58:1f:63:c8:
         cd:de:40:07:f9:4d:dd:21:57:6c:db:49:57:27:b9:4f:bf:78:
         2a:e4:6d:36:2b:53:cf:a0:b7:3b:bc:35:92:67:a2:03:88:46:
         29:fa:e7:5b:9d:35:20:99:8e:e5:41:f7:e5:ce:66:39:ec:17:
         97:5a:ce:02:c8:57:15:8d:99:ea:84:dd:ac:fa:38:ee:3c:b3:
         e0:93:9b:72:36:4f:b3:8c:15:57:f6:31:b6:2d:47:c6:cf:9f:
         5a:65:c9:e1:26:58:72:cb:e3:c9:6f:e7:08:5e:c9:65:e6:9f:
         f2:b2:61:2c:c7:dd:28:86:e3:fc:10:17:7b:59:4c:f9:ff:67:
         d7:ba:e1:57:4b:8a:2a:dd:f4:e6:9e:39:6b:7d:49:97:3e:e3:
         b8:fc:29:64
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAQhvcTcqY9myBrNIuFL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDUwYzYzNzY2NTVlZWMxZGQyZGE0YmQyMWQ1ZjEwNGE5
NmQ5MDQwHhcNMjYwNjMwMTQ0ODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2YwYTE3YjNhZWQyY2UwNjY4MjlhZTAzZmYwMmVkZTg1MmU2ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjzyuvWhjYHUIQaspS7bHleFxo1x
0fYMPB88+deMOsTEGaMnE8QRd9Z4xV9ETS6gG9UBHr3est4qPaVP0KFWWgoimlef
bawZbzO6Y5e228dnDCqC+hWmxAiLfhQduwDWXRCYuOTR5wBikKy4YlJ3ld/v4G9a
rk/XtvvHgybfsktR4dA0TpYdPdxUi8OPr09hbnHnpNjaxcoF9/RQdXMkVM3Fg1Kt
VV0hC+ijZIomAfmMrQiIj/XGNac0K+WUqXZx300QkQCJe8Xsc95iYtz2tGISCepQ
rWGLJWaZ0mudlCg8k8fZIU8oxf8P01nQFYmwjQzQIxDziqgbBtKozxrq0QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJzwoXs67SzgZoKa4D/wLt6FLm7gMB8GA1UdIwQY
MBaAFPVFDGN2ZV7sHdLaS9IdXxBKltkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgt
NmQxZjYwNTQzZTljLzEvblBDaGV6cnRMT0JtZ3ByZ1BfQXUzb1V1YnVBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgtNmQxZjYwNTQzZTlj
LzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDCqDANBgkqhkiG
9w0BAQsFAAOCAQEAWWGVPLJv51kAhWNu/1f+iGWPd2ixekWHTpLhus9rSPtnvUxC
hVeLCbmfjAsK0ZK1B18aKGZ99fFkIyQ5JBEcmjFreVm8nBPfgjVYtqqdVT9WGB7x
AnVoOfU9dctVGvyq0SQB21mmmSVYH2PIzd5AB/lN3SFXbNtJVye5T794KuRtNitT
z6C3O7w1kmeiA4hGKfrnW501IJmO5UH35c5mOewXl1rOAshXFY2Z6oTdrPo47jyz
4JObcjZPs4wVV/Yxti1Hxs+fWmXJ4SZYcsvjyW/nCF7JZeaf8rJhLMfdKIbj/BAX
e1lM+f9n17rhV0uKKt305p45a31Jlz7juPwpZA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:39 2026 by rpki-client