Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa
File:                     nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa (raw, json)
Hash identifier:          rMc0Aj00lJIniIoH5S83QDg35h6VGczGqXsIv4euxXE=
Subject key identifier:   9C:FA:EB:1D:36:13:34:3C:B0:FC:BD:5E:10:64:89:62:EC:2A:82:9D
Certificate issuer:       /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial:       019F19014105C6D118206E3BBBCA3F305C63
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa
Signing time:             Tue 30 Jun 2026 14:49:00 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56635
Providers:                AS: 3212
                          AS: 6939
                          AS: 12778
                          AS: 198524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:41:05:c6:d1:18:20:6e:3b:bb:ca:3f:30:5c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
        Validity
            Not Before: Jun 30 14:49:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9cfaeb1d3613343cb0fcbd5e10648962ec2a829d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:60:74:9a:44:7e:25:af:96:26:07:17:fb:
                    1d:e6:23:3b:3b:4b:3d:27:9c:1b:6a:94:c0:9c:45:
                    91:3b:d5:95:95:47:40:85:f1:8d:e6:a5:7b:39:43:
                    40:20:4d:4b:fd:da:63:e4:04:94:a8:fb:38:08:3e:
                    1c:2d:83:44:c2:43:1d:88:9a:92:63:7b:33:18:d0:
                    8e:14:3a:fb:42:ae:bc:97:eb:6a:aa:8e:ea:0a:ee:
                    31:82:5b:1d:b0:cd:37:7b:d2:38:96:26:7e:ea:25:
                    9e:71:16:54:0d:6d:f9:db:d4:8d:b0:bf:48:be:d7:
                    a2:fb:7b:09:62:79:26:5a:ef:6a:06:eb:9c:34:9a:
                    0a:ed:69:c7:91:c7:0f:58:ab:96:23:ef:01:15:5e:
                    3a:f5:a3:e9:21:c6:26:96:78:c0:41:cc:8f:21:62:
                    a9:35:f7:2a:08:8f:3e:26:08:29:44:6c:fa:7d:6c:
                    2f:78:33:4f:f2:7b:ab:db:e9:e3:4a:10:49:f6:b9:
                    61:23:3e:0d:8d:81:b0:11:78:49:55:4e:12:3c:42:
                    65:32:22:7c:23:19:18:44:50:8a:38:c7:f9:15:4d:
                    c5:73:99:04:04:3a:88:aa:b7:2d:92:64:66:00:ca:
                    ac:ff:cb:0b:c6:9a:0b:47:3f:47:bc:49:71:37:18:
                    20:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FA:EB:1D:36:13:34:3C:B0:FC:BD:5E:10:64:89:62:EC:2A:82:9D
            X509v3 Authority Key Identifier:
                keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56635

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:21:59:f6:4b:50:2b:b5:e4:9b:40:c5:d8:12:4c:b7:25:
         a3:9e:f8:84:01:45:f1:a7:4b:85:5a:e8:3d:66:b3:5a:a8:b0:
         4e:bc:14:e6:36:1c:bd:69:42:26:78:5d:ea:3c:45:04:ee:78:
         19:f6:7f:f1:c0:88:64:23:bd:2b:f4:ee:dc:b4:50:a9:6d:f2:
         46:d1:cb:66:32:0c:92:02:a8:eb:76:f6:45:d5:8f:6d:b9:96:
         48:e8:9a:41:d8:cb:a0:f3:ef:c9:7a:56:bd:bc:39:47:7b:cf:
         34:17:b6:86:72:a1:9b:9e:20:e4:9a:a7:05:8a:7f:51:3d:8e:
         d1:52:1c:96:f8:48:d9:17:fc:74:c4:c1:e3:c5:8a:6d:d3:d7:
         31:bb:32:1d:5e:91:5e:18:10:32:10:05:5f:47:6d:e1:41:99:
         ff:a4:5f:0c:07:f8:78:49:61:49:1e:78:b8:a8:62:c2:cb:a1:
         84:22:ff:9c:c1:2b:58:87:c5:80:af:96:f2:2e:13:f9:b4:6b:
         a5:7e:74:07:34:2d:17:47:c0:7c:d0:75:d1:84:64:d6:ff:7d:
         61:ce:2c:5b:a5:81:b9:0b:f4:99:bc:a7:b1:b7:47:48:c6:56:
         3d:1c:46:43:72:fe:8f:0f:e3:5c:17:48:ec:da:7d:76:2b:79:
         22:04:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:28 2026 by rpki-client