Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/NsglSN_UBejAze19UkT_CNNq5dM.asa
File:                     NsglSN_UBejAze19UkT_CNNq5dM.asa (raw, json)
Hash identifier:          RECGLP8GVJ9rWJkW8zx1z+PqM0AuzpBGTeuMUspYSbw=
Subject key identifier:   36:C8:25:48:DF:D4:05:E8:C0:CD:ED:7D:52:44:FF:08:D3:6A:E5:D3
Certificate issuer:       /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial:       019DF2D92037C08B1E457C41B783B03E3E6E
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/NsglSN_UBejAze19UkT_CNNq5dM.asa
Signing time:             Mon 04 May 2026 11:56:49 +0000
ASPA not before:          Mon 04 May 2026 11:56:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210018
Providers:                AS: 6830
                          AS: 8220
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f2:d9:20:37:c0:8b:1e:45:7c:41:b7:83:b0:3e:3e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
        Validity
            Not Before: May  4 11:56:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36c82548dfd405e8c0cded7d5244ff08d36ae5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:ea:ac:1f:9e:a9:38:fc:f2:ed:a9:26:e5:
                    90:1c:9d:bf:94:3a:55:00:61:83:1c:87:77:20:4e:
                    ac:c8:90:ca:93:36:a2:3f:bf:d6:d7:55:4d:76:7e:
                    f9:c7:4a:3e:5d:de:33:a3:ac:7d:21:81:59:33:7f:
                    de:20:53:8a:d3:6c:e6:c9:6a:2f:9f:8d:b7:94:f0:
                    4a:d1:d8:86:df:a7:10:80:93:a3:b3:25:c5:6b:7e:
                    4b:be:38:54:56:8c:5f:30:f6:99:e5:a3:3c:f5:75:
                    6c:94:2b:52:e4:1a:76:db:1d:05:72:d5:31:31:78:
                    17:93:16:d5:9c:7a:a2:06:b0:8f:72:ce:75:ee:64:
                    38:18:c0:61:30:f0:e4:f3:aa:91:ce:f0:f3:f8:b6:
                    0b:76:53:9e:e2:d0:9f:f4:6a:f4:b7:32:e2:df:36:
                    3d:02:82:ae:bc:d2:d1:9f:f6:d0:c3:8d:74:f9:de:
                    70:4d:98:bb:a1:6e:f4:94:d8:26:57:f4:58:18:2f:
                    03:c8:35:bb:f3:17:cc:e2:1d:57:b8:5d:4b:df:47:
                    92:7b:ec:d2:58:c3:dd:9c:40:6e:f6:2e:d6:85:2a:
                    cb:62:a6:ce:d1:23:dd:fa:ca:dc:89:70:28:18:83:
                    0b:6c:0c:e1:6e:64:1e:57:c8:30:5e:aa:90:71:f4:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C8:25:48:DF:D4:05:E8:C0:CD:ED:7D:52:44:FF:08:D3:6A:E5:D3
            X509v3 Authority Key Identifier:
                keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/NsglSN_UBejAze19UkT_CNNq5dM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210018

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:30:c1:f1:0d:e4:aa:33:a2:0a:91:fd:73:2d:99:42:e2:
         06:38:33:fb:c4:b9:eb:47:70:a7:2f:af:33:35:e2:75:50:00:
         c5:7e:ba:82:dd:9e:20:5f:86:7b:78:16:93:fd:b4:7d:e6:91:
         02:e7:11:d0:56:03:a1:f6:7d:0b:00:cf:68:2c:e7:13:4c:93:
         eb:42:b5:7f:ac:fa:0e:9b:c6:e5:ab:76:34:f6:d9:be:88:23:
         c5:0f:f1:12:c3:83:95:e8:c6:4c:6e:9d:52:80:74:74:0a:59:
         2e:9c:de:e0:d5:76:3f:99:01:3d:de:f5:96:0c:c0:1d:91:46:
         ae:b8:24:7c:22:90:ec:8a:b8:8d:cc:a0:61:df:24:5d:44:c5:
         a7:53:be:58:dd:ca:2a:07:b5:eb:82:96:d6:ae:8c:ec:8f:72:
         33:57:73:13:9b:84:f0:c1:4f:21:83:f3:6e:e9:1e:d1:7e:73:
         e8:a9:d8:fd:2d:b3:82:cd:e7:dd:16:c3:41:d7:2c:fb:02:94:
         1e:7c:64:af:7b:7e:49:81:d0:97:c0:3f:55:4d:16:64:33:34:
         d4:a6:f8:d3:97:c3:1b:15:4b:41:08:c6:86:a3:09:81:9b:58:
         96:ed:4f:6b:a3:4d:b3:11:4f:00:cf:c0:17:0f:69:c2:25:a7:
         92:ea:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:14 2026 by rpki-client