Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/nns8RFQLrBRsNnThoVt1NhyAt8c.asa
File:                     nns8RFQLrBRsNnThoVt1NhyAt8c.asa (raw, json)
Hash identifier:          TD87JkES0Gg4MiLF+HwZ7y2nuxRd6atpTLg5a5BUbWE=
Subject key identifier:   9E:7B:3C:44:54:0B:AC:14:6C:36:74:E1:A1:5B:75:36:1C:80:B7:C7
Certificate issuer:       /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial:       019E1C96F8FC356A24DF337A3D51EB28CB03
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/nns8RFQLrBRsNnThoVt1NhyAt8c.asa
Signing time:             Tue 12 May 2026 14:28:36 +0000
ASPA not before:          Tue 12 May 2026 14:28:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8412
Providers:                AS: 3320
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:96:f8:fc:35:6a:24:df:33:7a:3d:51:eb:28:cb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
        Validity
            Not Before: May 12 14:28:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e7b3c44540bac146c3674e1a15b75361c80b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1b:15:34:99:06:73:69:32:c4:06:56:bb:80:
                    9e:d0:d1:16:aa:39:cd:c9:69:b0:ca:95:93:1c:a3:
                    f7:46:3f:f2:1a:6b:df:ac:f2:21:9a:4f:bd:5d:6e:
                    02:bc:4d:dc:a2:c5:34:11:f8:a9:6a:0b:48:f3:df:
                    74:fe:0c:70:f6:16:2a:e1:2f:ea:e6:7d:8d:c3:30:
                    c4:81:23:43:42:6b:b3:a8:59:dd:9a:0a:bf:14:13:
                    81:cb:1d:b5:fa:f9:29:8a:33:c0:38:9f:86:a5:a9:
                    7b:7a:7d:b2:3b:8f:e8:fd:8c:24:15:68:4e:09:fa:
                    c2:98:b8:0d:8c:a9:6b:d4:a8:9b:2f:e6:4d:5d:2d:
                    a6:1d:58:e4:0b:b8:7d:a0:ae:4e:62:6c:7b:41:e4:
                    59:bd:1c:fb:b1:de:8e:cd:4c:31:c2:d2:29:32:d6:
                    99:85:1c:cf:3e:bc:ce:f4:c1:4f:f5:f0:08:34:7c:
                    28:63:e6:2f:c9:a1:01:4d:fc:8c:27:99:63:ac:86:
                    7c:ff:85:9a:dd:e3:c8:78:64:78:89:8c:b5:af:38:
                    06:0c:f6:79:ef:32:40:6a:ad:aa:a7:c0:19:59:88:
                    03:71:32:26:08:99:48:bc:1b:b5:4e:75:31:7b:fd:
                    f3:98:04:98:64:04:44:93:13:db:44:11:c0:1b:8e:
                    be:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:3C:44:54:0B:AC:14:6C:36:74:E1:A1:5B:75:36:1C:80:B7:C7
            X509v3 Authority Key Identifier:
                keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/nns8RFQLrBRsNnThoVt1NhyAt8c.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8412

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:2c:e0:41:c2:52:12:21:e0:cc:e1:15:a4:71:02:ae:98:
         0b:fc:94:4e:82:97:cb:27:c6:e7:20:a9:69:7c:82:2d:3c:f5:
         98:bd:cc:a2:ad:c9:73:6a:50:01:6e:32:66:e6:42:90:9b:51:
         39:41:5a:36:cb:47:ce:33:0e:dc:93:d6:13:e9:18:b0:aa:29:
         59:97:f5:1d:96:ef:d8:78:47:48:ab:b4:13:b0:3e:6f:60:4e:
         7e:b5:16:60:05:b3:a0:6f:ba:4d:11:cf:69:fc:40:aa:e1:18:
         c4:ed:fe:7e:f8:d0:91:84:2c:9b:92:63:51:bb:4d:7d:97:41:
         0a:81:66:df:27:19:2b:b9:a7:c0:86:be:e2:38:93:b1:3c:2e:
         d4:4c:89:e6:8b:f8:3d:13:f4:bd:c0:c0:25:74:0e:5e:24:11:
         47:86:af:77:16:89:38:00:1d:88:cc:66:92:82:27:31:e8:b0:
         3a:7b:bf:37:2f:1a:28:1a:9a:ca:74:a9:0d:f5:6b:25:af:90:
         c4:40:00:5e:58:1e:a3:e4:81:8d:d7:da:34:61:d8:f9:d3:ec:
         2a:f5:17:fe:ad:9b:80:51:48:38:8a:3b:8b:ce:6e:cf:ae:e7:
         f7:22:10:01:66:5a:f6:aa:df:c5:db:e1:1d:9e:be:a3:b9:b6:
         69:3b:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:06 2026 by rpki-client