Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/knurMTGzv5N9Th8qibfuM3XDIRg.asa
File:                     knurMTGzv5N9Th8qibfuM3XDIRg.asa (raw, json)
Hash identifier:          h5fB72wzGphQR7ZUl0WEDBhZkeKJwZbslJ5h82PZpR0=
Subject key identifier:   92:7B:AB:31:31:B3:BF:93:7D:4E:1F:2A:89:B7:EE:33:75:C3:21:18
Certificate issuer:       /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial:       01A0D3A5D061E23DA322A70222954394D129
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/knurMTGzv5N9Th8qibfuM3XDIRg.asa
Signing time:             Thu 24 Sep 2026 13:40:54 +0000
ASPA not before:          Thu 24 Sep 2026 13:40:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49468
Providers:                AS: 174
                          AS: 1299
                          AS: 6663
                          AS: 6830
                          AS: 8708
                          AS: 9050
                          AS: 12302
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:a5:d0:61:e2:3d:a3:22:a7:02:22:95:43:94:d1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
        Validity
            Not Before: Sep 24 13:40:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=927bab3131b3bf937d4e1f2a89b7ee3375c32118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:00:d1:de:50:6f:3b:2e:b4:e9:e6:ca:b6:b7:
                    9b:36:fc:ad:80:ec:0a:cd:8e:d6:0e:d1:25:3e:bc:
                    d0:a7:d3:ac:5e:62:59:5f:a4:c5:a1:f9:d9:0c:ed:
                    4e:3d:3f:9d:43:9b:6b:00:af:85:e4:36:f2:a2:65:
                    6c:c3:d1:b6:a7:96:eb:96:59:41:46:09:02:b4:60:
                    4d:46:ba:d2:72:f7:93:fe:6f:b2:3c:db:17:f4:12:
                    11:9e:19:08:5b:88:11:03:43:91:d1:4e:55:22:44:
                    61:07:43:a3:61:76:e7:33:e0:d6:1b:f3:ea:c8:60:
                    f2:f5:4f:4e:59:18:f4:ee:00:6f:f1:0e:0c:3c:02:
                    8b:88:40:40:e5:46:ce:43:1c:ca:c9:80:d7:4b:af:
                    66:24:cf:dc:f7:fe:91:31:c1:77:33:f6:d1:e2:9b:
                    9c:27:42:83:d7:a5:02:31:be:f7:7e:a7:4c:aa:f5:
                    da:db:f9:0d:cd:c1:fb:7c:ed:9b:5e:9f:5b:64:63:
                    60:ed:c3:82:07:1e:f2:01:03:0f:b5:9e:44:48:bd:
                    13:05:26:7b:a3:4c:52:57:50:52:1f:15:34:d8:6c:
                    3d:55:74:cd:c6:d9:2c:ab:25:73:e2:28:4c:aa:25:
                    8e:ee:8f:84:08:f4:86:8b:2d:be:ce:56:49:9b:7a:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:AB:31:31:B3:BF:93:7D:4E:1F:2A:89:B7:EE:33:75:C3:21:18
            X509v3 Authority Key Identifier:
                keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/knurMTGzv5N9Th8qibfuM3XDIRg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49468

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:0c:b1:dd:46:99:3f:cd:d8:ee:cf:33:85:63:d1:16:a1:
         7c:f6:60:ca:0d:e8:63:a7:41:24:1d:fa:fb:52:d1:e1:86:c6:
         e8:32:47:3a:c7:b1:62:ed:45:25:05:4a:a7:05:ab:fb:95:9f:
         49:96:50:ad:03:3d:21:b6:2e:d9:84:83:b5:09:cc:a1:7f:a4:
         f1:e2:08:55:4f:55:7b:9e:ff:2f:f2:41:29:8c:86:cd:cb:07:
         f5:95:14:2a:8a:61:06:b5:37:6c:d4:54:8b:91:29:00:30:07:
         a0:54:ed:c2:b3:c0:31:ed:d4:4a:83:c1:65:ca:e3:5d:5c:b8:
         f5:ba:50:9e:8f:ba:0c:93:52:c4:e0:94:d6:d0:8c:58:77:a0:
         ab:f0:76:28:09:04:fe:86:fc:d2:38:e6:4e:45:25:28:c0:b1:
         c1:3b:c4:c6:f0:13:42:d8:3e:0c:76:3b:0d:0f:65:f3:87:8c:
         90:8c:aa:de:0c:50:6d:fb:5c:02:8f:df:af:49:99:7f:a9:f9:
         48:b0:48:85:fd:04:09:52:d7:e4:fc:b8:ba:67:21:d6:5e:2e:
         3c:84:21:7e:00:9e:17:7c:9b:01:68:23:48:cc:6d:3b:37:2f:
         b1:6a:2f:b0:86:6b:c0:39:9d:3e:16:1e:11:03:b5:01:80:89:
         97:fb:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:15 2026 by rpki-client