Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/NfL0HL2k57oC_MeJ_uML-G_oodw.asa
File:                     NfL0HL2k57oC_MeJ_uML-G_oodw.asa (raw, json)
Hash identifier:          GEX923dh+AmazdpqPGWBgnFW63bRf8EorlelFbjKF7E=
Subject key identifier:   35:F2:F4:1C:BD:A4:E7:BA:02:FC:C7:89:FE:E3:0B:F8:6F:E8:A1:DC
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       019EF162A93ECD898A59F92D3385BF437982
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/NfL0HL2k57oC_MeJ_uML-G_oodw.asa
Signing time:             Mon 22 Jun 2026 22:10:35 +0000
ASPA not before:          Mon 22 Jun 2026 22:10:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215343
Providers:                AS: 8849
                          AS: 20473
                          AS: 56630
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f1:62:a9:3e:cd:89:8a:59:f9:2d:33:85:bf:43:79:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: Jun 22 22:10:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35f2f41cbda4e7ba02fcc789fee30bf86fe8a1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:e9:44:42:0e:01:12:5e:2f:67:08:9d:5b:
                    d6:cc:b3:97:d3:03:1a:14:bb:1e:00:1c:87:5c:3e:
                    b5:21:dd:cd:35:86:67:a0:aa:73:f5:51:59:d2:bb:
                    96:ee:63:e3:b1:c0:dd:f8:79:95:75:21:85:e5:88:
                    0b:31:e2:64:6c:ac:34:31:c9:73:df:bd:7d:d8:a4:
                    32:d5:27:97:2d:8e:3a:0e:6b:73:66:fd:fb:20:84:
                    7b:fb:e8:1c:61:eb:8f:86:1e:58:ea:7c:22:fb:51:
                    b5:15:5f:b5:da:c6:b1:4f:6c:bc:82:16:c2:88:28:
                    80:6f:42:6e:b3:6b:b5:29:e2:da:ee:ab:01:f0:f3:
                    1d:31:62:67:c9:b4:2c:07:11:51:ba:73:ca:56:d1:
                    e4:88:9a:73:a4:a7:7a:64:83:3c:31:5f:6f:d7:54:
                    24:ea:12:05:f4:e3:e8:fb:fd:ab:ba:c7:09:7b:5b:
                    3a:b9:39:4f:a0:79:3f:4a:ac:43:3b:65:20:d5:f5:
                    a5:3b:0f:66:aa:33:83:20:02:a1:b2:4a:6e:cb:78:
                    19:1b:21:a7:01:b7:44:3e:be:d4:68:c8:df:6a:ad:
                    d1:12:01:12:7d:66:2c:78:4e:42:ce:69:ee:bb:ea:
                    8c:71:eb:ec:d5:80:52:b9:07:83:ab:cd:1e:05:54:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:F4:1C:BD:A4:E7:BA:02:FC:C7:89:FE:E3:0B:F8:6F:E8:A1:DC
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/NfL0HL2k57oC_MeJ_uML-G_oodw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215343

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:ef:8f:75:96:1f:fb:48:e9:55:1b:4e:b4:55:05:ec:72:
         cb:aa:18:90:03:38:1a:70:52:7a:e9:ad:23:43:5a:75:04:80:
         b4:55:2a:84:9f:81:41:3e:ba:2c:75:7c:09:3e:1b:dd:fa:b0:
         ce:e9:52:36:17:40:fd:c5:d7:23:ed:d2:b7:e4:ad:d1:88:be:
         35:dd:6d:34:0d:dd:c8:ee:d7:1c:80:e5:b4:1e:9e:ce:42:5c:
         95:0d:cd:fd:a7:5c:ab:6b:f4:e8:f6:8a:62:d7:65:0f:59:0c:
         60:fb:6b:32:e5:16:30:80:f5:ac:11:5f:ab:3b:76:fc:d3:45:
         6d:ee:4f:91:6a:50:98:73:5e:02:d3:52:94:07:a3:21:d7:14:
         04:bc:6e:1f:61:3b:84:39:8d:68:05:ee:bf:78:38:3d:f4:5b:
         0d:ee:47:6f:ae:94:58:45:85:94:e2:8b:3a:dd:80:34:1e:75:
         2a:c5:8c:99:83:08:27:89:52:5d:41:54:e5:94:e5:b3:bc:04:
         33:4b:74:82:2a:1b:07:21:93:e3:56:01:03:90:e2:3d:20:aa:
         78:66:0e:d4:e0:50:2f:19:13:38:aa:06:e3:ec:9d:92:6a:ee:
         e0:e8:00:c0:0b:7a:6a:5e:ff:5f:96:af:70:5d:46:71:0f:25:
         20:c0:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:31 2026 by rpki-client