Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/NLAPqh-Z_q4ZRX_PFRNrtpPURJc.asa
File:                     NLAPqh-Z_q4ZRX_PFRNrtpPURJc.asa (raw, json)
Hash identifier:          ft7OUI5et7sr7kFz+NjxdN7OOHjljNl2abue3WNaYDA=
Subject key identifier:   34:B0:0F:AA:1F:99:FE:AE:19:45:7F:CF:15:13:6B:B6:93:D4:44:97
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       019F19015AA709DA0ACCCFFC953D0A02E611
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/NLAPqh-Z_q4ZRX_PFRNrtpPURJc.asa
Signing time:             Tue 30 Jun 2026 14:49:06 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15974
Providers:                AS: 9049
                          AS: 20485
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:5a:a7:09:da:0a:cc:cf:fc:95:3d:0a:02:e6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jun 30 14:49:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=34b00faa1f99feae19457fcf15136bb693d44497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:72:6a:ef:fa:be:d2:d6:b5:ee:85:6c:40:
                    7e:69:fe:ca:d7:24:8a:2c:57:20:46:95:7f:b8:7a:
                    19:ae:a5:f3:e9:88:cf:3b:78:de:c1:63:b1:70:b2:
                    5e:a6:e0:71:4b:4d:e0:9f:7a:d1:58:e7:1d:97:9f:
                    15:ee:98:b2:84:31:08:75:d1:88:3e:e6:6f:4a:68:
                    c4:cd:b6:1e:03:52:20:64:09:5c:ce:77:d0:73:e4:
                    8f:63:37:c6:c3:d0:47:73:65:86:f5:3a:fa:11:49:
                    54:02:e3:71:21:a7:ef:49:fc:27:6f:ed:15:b7:1b:
                    05:bb:82:7b:42:ea:7f:c5:73:53:5e:d6:23:9c:6c:
                    f0:4e:99:4a:ac:9c:49:a6:f5:58:d0:1f:67:ac:09:
                    ed:6e:36:cc:73:39:e7:ec:44:83:30:0c:f8:38:82:
                    36:84:be:b3:2b:37:45:fb:b8:5a:a2:f5:2c:52:9c:
                    72:13:a5:22:8b:d4:73:93:4f:97:8f:3f:ac:b0:9d:
                    73:24:f5:29:93:34:0f:c2:bc:ac:03:43:ab:54:e5:
                    5b:11:d8:d8:93:11:35:98:37:a5:83:49:fa:e2:bb:
                    96:c6:6b:a3:42:4d:32:5e:85:5c:a1:5f:03:a2:56:
                    b3:d2:1b:87:f8:30:ef:92:01:ff:a1:eb:b7:3f:d7:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B0:0F:AA:1F:99:FE:AE:19:45:7F:CF:15:13:6B:B6:93:D4:44:97
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/NLAPqh-Z_q4ZRX_PFRNrtpPURJc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15974

    Signature Algorithm: sha256WithRSAEncryption
         90:43:6f:f8:cc:36:c4:22:60:7e:a4:99:59:09:8f:a8:ce:32:
         25:56:0e:3b:00:e4:dc:36:6c:ed:83:54:e3:97:8b:9a:66:0f:
         fa:d5:e5:be:41:f1:2f:fb:1f:af:1b:f5:14:9f:04:17:5c:2c:
         df:c8:93:88:29:93:4b:f3:e5:79:87:e6:a3:40:f8:f3:fc:fc:
         07:a2:f0:bc:35:27:e3:1a:bb:e3:88:64:66:9a:87:5d:ad:28:
         7f:15:42:e6:02:27:42:f2:b9:4f:8d:e0:a0:71:7c:10:d0:9b:
         4b:11:c6:00:39:71:07:b4:e4:c9:44:61:6f:3e:ba:f4:05:38:
         f1:73:3a:98:cd:85:bf:d6:6b:3d:3b:30:24:c2:1f:43:d2:a9:
         a3:6a:a1:65:10:94:30:d5:1f:1f:29:ce:d2:c8:9a:d9:18:39:
         61:61:ef:b4:bb:8f:81:a2:32:89:68:5a:0e:e3:9c:eb:93:3f:
         b3:bb:68:f5:8d:9a:cf:2a:17:b8:b7:6f:df:46:b8:99:ee:f0:
         22:ce:77:19:00:3c:a4:43:29:25:7e:b3:07:fa:81:83:19:a4:
         a0:3a:a6:88:84:7b:77:6f:b9:40:7c:31:18:a8:71:99:dd:4d:
         66:0b:dc:9d:d9:21:f0:3d:39:e9:fc:7d:7c:ee:3b:63:9e:7b:
         8a:cd:2e:5b
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ8ZAVqnCdoKzM/8lT0KAuYRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjYwNjMwMTQ0OTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGIwMGZhYTFmOTlmZWFlMTk0NTdmY2YxNTEzNmJiNjkzZDQ0NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E9yau/6vtLWte6FbEB+af7K1ySK
LFcgRpV/uHoZrqXz6YjPO3jewWOxcLJepuBxS03gn3rRWOcdl58V7piyhDEIddGI
PuZvSmjEzbYeA1IgZAlcznfQc+SPYzfGw9BHc2WG9Tr6EUlUAuNxIafvSfwnb+0V
txsFu4J7Qup/xXNTXtYjnGzwTplKrJxJpvVY0B9nrAntbjbMcznn7ESDMAz4OII2
hL6zKzdF+7haovUsUpxyE6Uii9Rzk0+Xjz+ssJ1zJPUpkzQPwrysA0OrVOVbEdjY
kxE1mDelg0n64ruWxmujQk0yXoVcoV8Dolaz0huH+DDvkgH/oeu3P9dKswIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFDSwD6ofmf6uGUV/zxUTa7aT1ESXMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvTkxBUHFoLVpfcTRaUlhfUEZSTnJ0cFBVUkpjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj5mMA0GCSqGSIb3
DQEBCwUAA4IBAQCQQ2/4zDbEImB+pJlZCY+ozjIlVg47AOTcNmztg1Tjl4uaZg/6
1eW+QfEv+x+vG/UUnwQXXCzfyJOIKZNL8+V5h+ajQPjz/PwHovC8NSfjGrvjiGRm
moddrSh/FULmAidC8rlPjeCgcXwQ0JtLEcYAOXEHtOTJRGFvPrr0BTjxczqYzYW/
1ms9OzAkwh9D0qmjaqFlEJQw1R8fKc7SyJrZGDlhYe+0u4+BojKJaFoO45zrkz+z
u2j1jZrPKhe4t2/fRriZ7vAizncZADykQyklfrMH+oGDGaSgOqaIhHt3b7lAfDEY
qHGZ3U1mC9yd2SHwPTnp/H187jtjnnuKzS5b
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:01 2026 by rpki-client