Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/n4p4Mur7zC67idLkqIFmYpyaEtw.asa
File:                     n4p4Mur7zC67idLkqIFmYpyaEtw.asa (raw, json)
Hash identifier:          q6UH7P12DerpRTJVoYFJ5OMt2xjLtEuqir8vpJLrJOI=
Subject key identifier:   9F:8A:78:32:EA:FB:CC:2E:BB:89:D2:E4:A8:81:66:62:9C:9A:12:DC
Certificate issuer:       /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial:       01A0DFC39DDBDBE51917D2EDAFCCA232CE52
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/n4p4Mur7zC67idLkqIFmYpyaEtw.asa
Signing time:             Sat 26 Sep 2026 22:08:54 +0000
ASPA not before:          Sat 26 Sep 2026 22:08:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210045
Providers:                AS: 39122
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:c3:9d:db:db:e5:19:17:d2:ed:af:cc:a2:32:ce:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
        Validity
            Not Before: Sep 26 22:08:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f8a7832eafbcc2ebb89d2e4a88166629c9a12dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:43:98:83:76:10:d7:05:ae:cd:95:6f:83:68:
                    2b:3b:ab:7a:bf:cd:1d:5a:91:f0:90:ec:60:0e:1d:
                    f8:40:44:61:66:76:ba:ac:33:1d:11:9c:d7:fe:6e:
                    58:16:6e:f6:a4:9d:31:d5:74:7b:af:f5:fb:ca:35:
                    70:cc:a7:f8:fc:11:f7:ca:83:20:2c:c5:c5:8d:7c:
                    c0:eb:fa:16:37:90:1a:89:80:90:f8:4e:89:69:a5:
                    55:ab:5d:c2:21:55:0f:43:c1:18:0e:72:47:be:50:
                    19:2f:20:e9:81:06:ce:b4:3e:41:5d:59:bf:24:03:
                    d2:09:a2:40:a0:a4:32:ea:ad:40:4c:62:c5:15:30:
                    45:2c:e3:ac:04:45:16:31:f9:66:23:57:2e:0c:36:
                    0f:dc:cd:25:4b:48:c7:e1:67:88:b9:28:94:a9:f9:
                    eb:cc:0c:4b:52:a0:78:6d:8c:30:f0:51:dc:bd:83:
                    98:9f:ac:05:90:8f:35:b2:90:b5:12:1e:39:8e:c2:
                    0c:2e:c9:d4:66:ad:d7:e4:c7:d3:48:2e:74:ec:b1:
                    42:d6:a4:b5:06:fb:22:c7:a7:e3:77:fa:06:0f:78:
                    cd:df:7a:d3:14:07:7e:eb:aa:7d:7d:98:86:d3:58:
                    c1:53:e8:9e:22:7d:ec:33:65:ed:c9:3b:d6:9a:a6:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8A:78:32:EA:FB:CC:2E:BB:89:D2:E4:A8:81:66:62:9C:9A:12:DC
            X509v3 Authority Key Identifier:
                keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/n4p4Mur7zC67idLkqIFmYpyaEtw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210045

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:8d:fa:2a:44:45:64:92:03:c5:4d:4d:4e:ff:bb:f2:ac:
         b0:04:82:fa:2c:21:47:3a:3c:4c:0d:e5:84:d8:6c:94:b0:6d:
         ca:c9:c5:d8:5a:38:9d:2d:25:8d:ad:70:5b:b2:92:13:ed:bf:
         3b:56:76:23:99:92:35:3a:76:fa:98:c0:d3:e5:ad:e1:30:e6:
         53:c4:8f:18:b4:03:c7:9d:21:d9:47:6e:e3:1e:f9:c1:1f:af:
         10:cf:17:c8:fe:5f:58:50:6e:10:69:66:50:4a:35:b5:72:ca:
         98:89:27:b8:0f:3a:23:87:d9:15:18:2d:2a:7b:ae:ed:e7:87:
         9f:90:d3:d0:28:a3:a7:b9:57:e7:45:9c:9c:c4:fa:c7:25:d1:
         4e:96:2f:c4:30:16:cd:ce:a4:40:08:ea:01:76:ee:75:85:42:
         e6:48:36:ca:37:d9:bc:dd:8a:8c:79:1d:79:16:52:16:19:b9:
         23:23:72:93:0d:53:e9:41:39:90:0d:d8:79:a8:f1:0e:fc:75:
         ee:85:cd:d3:96:2c:ed:51:f9:42:28:49:4d:92:22:da:3f:bd:
         91:76:a0:77:7d:d3:eb:62:cb:99:e7:5f:2b:fe:a5:d9:12:3a:
         be:55:56:70:b5:de:c9:14:6f:94:55:65:18:37:76:fe:2d:5e:
         3a:af:e1:48
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDfw53b2+UZF9Ltr8yiMs5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZGM2OTRmMGMzMjU1ZDVkNTU3M2YxMzI4ZTUzNjU0Y2Zi
MjJjNGQwHhcNMjYwOTI2MjIwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjhhNzgzMmVhZmJjYzJlYmI4OWQyZTRhODgxNjY2MjljOWExMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UOYg3YQ1wWuzZVvg2grO6t6v80d
WpHwkOxgDh34QERhZna6rDMdEZzX/m5YFm72pJ0x1XR7r/X7yjVwzKf4/BH3yoMg
LMXFjXzA6/oWN5AaiYCQ+E6JaaVVq13CIVUPQ8EYDnJHvlAZLyDpgQbOtD5BXVm/
JAPSCaJAoKQy6q1ATGLFFTBFLOOsBEUWMflmI1cuDDYP3M0lS0jH4WeIuSiUqfnr
zAxLUqB4bYww8FHcvYOYn6wFkI81spC1Eh45jsIMLsnUZq3X5MfTSC507LFC1qS1
Bvsix6fjd/oGD3jN33rTFAd+66p9fZiG01jBU+ieIn3sM2XtyTvWmqZbZQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJ+KeDLq+8wuu4nS5KiBZmKcmhLcMB8GA1UdIwQY
MBaAFGzcaU8MMlXV1Vc/EyjlNlTPsixNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEt
NTM2ZTFmMGM0ZmY5LzEvbjRwNE11cjd6QzY3aWRMa3FJRm1ZcHlhRXR3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kNzRjYjItZjBmYy00ZjJjLWJlMDEtNTM2ZTFmMGM0ZmY5
LzEvYk54cFR3d3lWZFhWVno4VEtPVTJWTS15TEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0fTANBgkqhkiG
9w0BAQsFAAOCAQEAD7qN+ipERWSSA8VNTU7/u/KssASC+iwhRzo8TA3lhNhslLBt
ysnF2Fo4nS0lja1wW7KSE+2/O1Z2I5mSNTp2+pjA0+Wt4TDmU8SPGLQDx50h2Udu
4x75wR+vEM8XyP5fWFBuEGlmUEo1tXLKmIknuA86I4fZFRgtKnuu7eeHn5DT0Cij
p7lX50WcnMT6xyXRTpYvxDAWzc6kQAjqAXbudYVC5kg2yjfZvN2KjHkdeRZSFhm5
IyNykw1T6UE5kA3YeajxDvx17oXN05Ys7VH5QihJTZIi2j+9kXagd33T62LLmedf
K/6l2RI6vlVWcLXeyRRvlFVlGDd2/i1eOq/hSA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:32:10 2026 by rpki-client