Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/NhoyBtL4_EbM4LnhezBm7A7x9Ec.asa
File:                     NhoyBtL4_EbM4LnhezBm7A7x9Ec.asa (raw, json)
Hash identifier:          ThECBnq44tZrd+D7jmjuY22cwzC7GOh+N6/FENYMXvc=
Subject key identifier:   36:1A:32:06:D2:F8:FC:46:CC:E0:B9:E1:7B:30:66:EC:0E:F1:F4:47
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       01A01EB0A30660E78E6D69C46BB08B133241
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/NhoyBtL4_EbM4LnhezBm7A7x9Ec.asa
Signing time:             Thu 20 Aug 2026 10:21:27 +0000
ASPA not before:          Thu 20 Aug 2026 10:21:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            30893
Providers:                AS: 6939
                          AS: 39889
                          AS: 50989
                          AS: 202395
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1e:b0:a3:06:60:e7:8e:6d:69:c4:6b:b0:8b:13:32:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Aug 20 10:21:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=361a3206d2f8fc46cce0b9e17b3066ec0ef1f447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:dc:b5:2b:b1:b4:6a:2f:c1:75:81:29:83:
                    94:1b:c8:3a:af:4f:69:88:8c:22:69:a5:ae:1c:30:
                    94:c5:7f:d9:17:26:42:1f:dd:1d:fc:19:29:22:35:
                    df:3b:65:57:65:41:74:e6:e3:d7:7b:f0:7b:d4:9d:
                    fe:a1:32:11:ce:da:43:7f:be:a2:be:97:8c:44:bc:
                    9d:b2:32:e8:8e:b5:55:97:76:bd:0c:cd:76:f4:a9:
                    eb:fc:33:f6:8f:0b:a0:57:cd:8e:26:64:f4:c6:50:
                    16:4b:97:1c:f5:4c:d0:46:c1:01:4c:44:14:62:35:
                    50:be:f9:cf:88:f9:f5:71:9e:76:9b:7e:d3:7e:51:
                    5f:fb:68:8e:10:c9:12:3a:ed:38:a5:08:3f:13:3a:
                    ed:a9:78:c6:1c:f4:6e:d0:27:c4:95:78:9b:06:b4:
                    66:37:49:4e:3f:94:33:28:67:c1:e6:85:d4:7d:6e:
                    ee:bc:b5:df:ad:94:38:71:78:b6:4f:8f:f5:82:cc:
                    73:75:93:cf:3b:60:76:1c:12:a5:09:7d:17:27:3d:
                    3d:f6:05:61:97:d4:b0:1c:dc:8f:7c:31:b0:34:e1:
                    40:9e:ba:b8:a6:6a:f9:55:7d:21:ae:25:4b:b2:5a:
                    ba:43:83:08:d2:b0:d4:fa:7d:d9:15:f7:d9:a5:3f:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1A:32:06:D2:F8:FC:46:CC:E0:B9:E1:7B:30:66:EC:0E:F1:F4:47
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/NhoyBtL4_EbM4LnhezBm7A7x9Ec.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30893

    Signature Algorithm: sha256WithRSAEncryption
         52:af:19:5f:0b:c9:c7:58:17:26:62:21:66:a4:6a:3f:fc:e4:
         3e:bc:ae:8a:7c:96:6d:28:da:60:dd:09:50:1e:02:0d:d6:3a:
         2f:47:a5:94:e7:b5:2e:f2:35:2f:41:86:be:d5:ad:3c:96:83:
         89:5a:37:15:d3:b9:af:d9:65:3f:61:25:3b:71:62:7d:2f:58:
         67:cd:14:b9:bf:3f:b0:cb:9a:28:9e:09:8b:00:d0:dc:19:6f:
         26:61:ba:c1:59:5f:c1:eb:41:35:ed:3b:66:40:d5:58:0e:ce:
         e7:e4:a4:39:2d:74:ee:35:b8:21:d4:c1:62:af:1d:51:70:96:
         ff:2a:3d:97:74:c0:b7:69:cc:2a:b9:be:dc:9f:4f:61:d8:b1:
         ca:65:e5:2b:90:aa:70:33:a6:6f:55:28:72:4b:c3:0e:d7:97:
         70:38:73:0a:54:ff:d2:b2:04:fa:b3:78:f4:cd:b3:4d:7f:6e:
         39:65:16:e1:ed:e0:e6:ef:d5:2a:93:7d:32:aa:cf:e6:d8:8d:
         93:f9:32:f1:e6:5a:50:af:db:60:07:cd:8d:1b:4f:9e:e4:8c:
         ef:41:8b:cf:44:fa:1c:50:6f:06:d5:9b:34:12:d9:04:69:bc:
         2a:72:e2:2f:cb:1f:9c:2b:3e:37:64:71:4f:19:47:8e:56:79:
         b0:c7:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:48:54 2026 by rpki-client