Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/nLWm0CbXdBV541qYW-ZaDjrd_no.asa
File:                     nLWm0CbXdBV541qYW-ZaDjrd_no.asa (raw, json)
Hash identifier:          OBg7VUIs9BfAiop8yHgkNoK9pQt1BuMEqFMoPY6kqRo=
Subject key identifier:   9C:B5:A6:D0:26:D7:74:15:79:E3:5A:98:5B:E6:5A:0E:3A:DD:FE:7A
Certificate issuer:       /CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
Certificate serial:       019DCB601BCDB61983053004822321107D29
Authority key identifier: 89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/nLWm0CbXdBV541qYW-ZaDjrd_no.asa
Signing time:             Sun 26 Apr 2026 19:59:26 +0000
ASPA not before:          Sun 26 Apr 2026 19:59:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211259
Providers:                AS: 12926
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cb:60:1b:cd:b6:19:83:05:30:04:82:23:21:10:7d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896f4af92036fe50a20f4a1512e9c2c8ecedcecb
        Validity
            Not Before: Apr 26 19:59:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9cb5a6d026d7741579e35a985be65a0e3addfe7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:50:72:89:1f:bf:f0:df:09:7e:52:ff:02:
                    1c:2d:70:6f:ce:c0:f0:0f:38:07:e5:0e:68:6b:e7:
                    92:9a:b1:c3:68:a6:ac:47:05:76:1f:fe:46:55:f0:
                    0a:64:63:6f:d9:21:12:11:9d:35:64:37:38:43:c1:
                    cf:2e:67:9f:46:11:64:8d:b1:f6:5e:f0:e1:4b:84:
                    43:8a:a5:5b:18:9e:20:60:22:fe:81:27:22:5a:a2:
                    68:e6:87:26:db:51:c4:45:a7:fb:27:44:aa:0e:c1:
                    76:38:e7:35:29:a3:36:c0:ec:7d:0f:51:dc:1a:04:
                    5c:42:20:51:a1:eb:53:79:ad:02:71:97:b9:15:26:
                    97:00:23:db:a3:c6:4c:4c:2d:38:40:88:fa:3d:85:
                    fa:ad:ba:f2:75:c1:5d:d8:a8:5e:a2:cd:ad:d0:c1:
                    3f:31:cd:45:73:2b:b7:28:38:67:2d:91:f6:d0:60:
                    48:4c:44:f3:a7:fd:3e:1d:5e:c5:7d:50:6d:b0:6e:
                    e0:f1:3f:95:5e:68:1c:9a:40:5d:c7:91:4a:bb:11:
                    d9:48:04:99:5b:86:74:64:e0:3c:36:6e:41:6e:4b:
                    53:4b:ed:fe:0f:49:02:b3:9a:a2:33:4b:f4:46:df:
                    45:34:0b:84:51:b0:94:62:69:92:7f:43:ee:d1:9d:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B5:A6:D0:26:D7:74:15:79:E3:5A:98:5B:E6:5A:0E:3A:DD:FE:7A
            X509v3 Authority Key Identifier:
                keyid:89:6F:4A:F9:20:36:FE:50:A2:0F:4A:15:12:E9:C2:C8:EC:ED:CE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW9K-SA2_lCiD0oVEunCyOztzss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/nLWm0CbXdBV541qYW-ZaDjrd_no.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/3eea5e-3713-4310-962b-8f2f01f7a9ba/1/iW9K-SA2_lCiD0oVEunCyOztzss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211259

    Signature Algorithm: sha256WithRSAEncryption
         79:8d:52:26:3a:18:76:54:a8:97:a0:a3:e7:c2:c5:76:7b:e2:
         2a:6c:41:5e:cd:72:f7:93:fb:ed:42:a9:33:c0:96:84:b3:44:
         fc:50:d8:f6:db:59:b4:55:ac:f3:49:32:69:41:98:b4:b3:bd:
         c8:d6:f3:11:ce:f0:43:96:16:c3:44:db:71:7e:27:33:18:a8:
         2c:b3:4c:5c:f4:db:16:84:ca:af:54:8b:a5:54:7e:c3:41:e3:
         ea:73:12:c8:78:c6:0f:6a:cc:fc:b8:60:e8:29:6a:62:08:d1:
         05:20:ac:3b:0e:5f:b6:0c:3b:96:9d:4b:ef:da:8e:56:d4:74:
         5a:99:de:fe:9c:3a:aa:be:ca:43:8b:81:3a:4b:86:dd:c9:3e:
         73:4e:95:f6:f4:f8:94:df:23:8a:f4:4a:cc:e5:3b:53:60:35:
         be:a5:fc:d6:53:ad:e5:2a:7b:98:26:36:3e:d8:6c:43:cf:a8:
         d0:a4:01:c0:56:c9:72:02:a0:8c:f5:35:aa:15:b4:0c:6c:9c:
         a8:c2:ba:3e:10:86:2f:29:ab:d5:40:ad:97:c9:a8:37:11:d6:
         cc:d3:cf:8c:3b:4d:cb:3e:11:02:74:65:d5:7d:16:45:3d:7c:
         50:69:0a:9a:af:d5:5c:2f:8c:be:7d:5b:3f:69:8e:bb:af:76:
         0b:f1:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:56 2026 by rpki-client