Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/nFg91YiaQ2-Tr7y1XCO0Puttl2U.asa
File:                     nFg91YiaQ2-Tr7y1XCO0Puttl2U.asa (raw, json)
Hash identifier:          QXOVWWm9dncorP4wh3O78MC+y4H/vue+TeNihB5tTtI=
Subject key identifier:   9C:58:3D:D5:88:9A:43:6F:93:AF:BC:B5:5C:23:B4:3E:EB:6D:97:65
Certificate issuer:       /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial:       01A0F7BEE8E302B1218ED64ACF072FEB46DD
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/nFg91YiaQ2-Tr7y1XCO0Puttl2U.asa
Signing time:             Thu 01 Oct 2026 13:54:38 +0000
ASPA not before:          Thu 01 Oct 2026 13:54:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218842
Providers:                AS: 24940
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:be:e8:e3:02:b1:21:8e:d6:4a:cf:07:2f:eb:46:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
        Validity
            Not Before: Oct  1 13:54:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c583dd5889a436f93afbcb55c23b43eeb6d9765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:f2:3e:88:f6:30:87:04:f9:43:64:21:81:
                    6e:dd:57:77:92:53:de:f4:22:06:c2:74:e6:91:b4:
                    f2:a6:4d:6e:c3:79:14:30:99:4e:18:ac:5c:a3:25:
                    56:58:cf:97:b0:f7:9d:db:3e:2f:8f:10:cc:6d:4e:
                    ae:14:cf:60:19:19:32:6d:7a:5d:03:7c:16:21:49:
                    e3:4f:8f:1c:f2:f6:c8:58:0d:c6:04:47:21:8f:07:
                    c3:64:6d:49:73:3c:8f:5d:42:0e:98:ed:26:b7:04:
                    9f:76:c5:48:89:b2:48:de:39:76:a6:6b:ae:84:3e:
                    8b:13:76:db:99:8f:03:6a:dd:46:c9:ac:05:4c:1d:
                    ca:1b:b7:84:ce:4d:fe:09:5d:c8:c9:31:8c:a2:00:
                    10:20:09:c6:9c:ad:ca:7c:10:ca:0f:c2:97:98:97:
                    1a:cf:f2:75:4e:6b:2d:6c:21:57:02:af:e6:c0:f9:
                    50:87:6a:92:d2:b0:09:06:3d:a8:e1:ab:54:e9:a5:
                    49:b9:c9:4c:48:e6:91:d1:d7:87:a8:9f:53:9b:bd:
                    ee:7c:64:aa:01:ed:6c:2b:61:95:f5:30:db:22:6e:
                    46:42:0e:05:13:4e:c0:aa:57:e6:45:45:00:68:26:
                    03:0b:bb:36:0c:5f:1f:1f:03:fb:6b:7c:28:a1:88:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:58:3D:D5:88:9A:43:6F:93:AF:BC:B5:5C:23:B4:3E:EB:6D:97:65
            X509v3 Authority Key Identifier:
                keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/nFg91YiaQ2-Tr7y1XCO0Puttl2U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218842

    Signature Algorithm: sha256WithRSAEncryption
         a5:d0:e9:70:d3:17:f8:8b:d1:a2:71:34:7d:f7:ec:9b:97:90:
         90:a1:d9:aa:fb:10:89:69:b5:b3:48:0e:31:54:c0:8e:a8:fa:
         ce:3c:fe:d6:45:73:11:6e:94:66:7d:14:5f:67:81:c1:b2:86:
         2a:d9:a2:89:a8:3d:c8:0c:f9:c5:f2:7a:a6:6f:8f:35:50:08:
         eb:b6:fb:2c:96:27:63:91:a7:a2:79:f6:f1:d8:04:3a:17:f9:
         29:fc:4f:2b:b5:a2:63:13:38:61:f2:8b:d5:dc:d1:81:b4:55:
         d2:05:3e:41:c8:17:b5:e5:09:1e:1e:d2:b0:83:0f:ca:10:a4:
         b4:91:cd:61:64:cd:80:e0:e5:13:7c:92:88:c4:39:a3:e4:b2:
         69:cb:2a:36:66:c6:52:cc:8f:33:32:14:5a:9b:15:24:50:94:
         bf:71:19:11:c9:85:eb:34:c7:cb:d4:93:df:34:e4:ab:13:d6:
         ed:af:9e:1c:97:09:e3:5e:75:d3:63:29:e0:86:39:f3:78:b5:
         67:2c:e3:0b:82:16:a7:e4:b5:6f:8d:23:14:e5:41:c8:64:6f:
         58:7c:b0:e1:e7:ef:a3:89:64:01:5a:bd:70:60:20:2c:ae:80:
         a4:3c:2a:97:2a:c5:6f:05:ba:0f:dc:c3:a3:52:d7:56:d7:40:
         60:85:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:32:01 2026 by rpki-client