Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/nAuNT8fFeVBjZtYgykFbuWst1x8.asa
File:                     nAuNT8fFeVBjZtYgykFbuWst1x8.asa (raw, json)
Hash identifier:          mdAsPuC47rBd10CkK+9D8gN5/QKzTG6Rm9fyadbl32k=
Subject key identifier:   9C:0B:8D:4F:C7:C5:79:50:63:66:D6:20:CA:41:5B:B9:6B:2D:D7:1F
Certificate issuer:       /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial:       019E937FDB3201C9AB30C018574E2AF19B2B
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/nAuNT8fFeVBjZtYgykFbuWst1x8.asa
Signing time:             Thu 04 Jun 2026 16:38:10 +0000
ASPA not before:          Thu 04 Jun 2026 16:38:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208471
Providers:                AS: 41051
                          AS: 197324
                          AS: 199656
                          AS: 208453
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:93:7f:db:32:01:c9:ab:30:c0:18:57:4e:2a:f1:9b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
        Validity
            Not Before: Jun  4 16:38:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c0b8d4fc7c579506366d620ca415bb96b2dd71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:b4:4c:85:94:87:0a:88:65:55:60:f5:39:
                    a8:a2:e7:a0:18:79:bc:47:27:90:48:0e:bf:4a:75:
                    c8:e6:bf:60:3f:c4:ae:c3:59:99:fb:c1:aa:b9:0a:
                    87:3e:b4:49:78:e0:b1:9d:ba:89:b9:b6:7f:62:99:
                    da:70:58:2d:20:76:18:d4:28:51:2a:d5:1f:28:fb:
                    f7:a5:ed:cc:64:0d:5b:a0:fb:45:19:8f:90:75:c9:
                    c6:3c:29:0e:42:ce:9f:0e:f7:44:86:cf:9d:91:70:
                    91:72:db:f2:c4:2f:1c:6f:cc:a7:4e:88:a1:6e:ad:
                    ae:c7:10:59:fa:d0:10:40:2a:5d:33:dc:4e:5a:75:
                    55:4f:d7:51:3d:49:b3:a3:54:07:d0:bd:8e:bc:d6:
                    cc:8e:1e:5e:92:f9:d9:5d:c4:ac:02:61:56:8d:8d:
                    db:64:23:e5:62:84:e7:95:22:d2:02:e0:bb:ea:36:
                    a4:5d:43:15:00:4a:23:af:51:f2:ac:69:5a:b7:b1:
                    1b:1e:d3:7c:8c:be:12:6f:f7:56:5d:09:13:da:50:
                    c5:7c:d6:53:6a:5c:1f:07:4e:3e:56:d3:21:bb:08:
                    75:07:2e:7c:6c:15:e9:a6:80:f9:ef:fa:85:01:3c:
                    a6:04:07:ba:dd:10:3e:7b:ab:5e:9c:10:80:67:0d:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0B:8D:4F:C7:C5:79:50:63:66:D6:20:CA:41:5B:B9:6B:2D:D7:1F
            X509v3 Authority Key Identifier:
                keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/nAuNT8fFeVBjZtYgykFbuWst1x8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208471

    Signature Algorithm: sha256WithRSAEncryption
         49:14:65:48:df:ef:bf:a3:7d:4e:55:62:77:8c:d2:9b:46:75:
         bb:61:d7:b8:4b:a0:27:93:49:ca:70:bc:da:e5:2e:e3:3b:e5:
         93:db:0a:be:3e:ea:91:be:2f:44:ce:1a:bc:31:94:d2:00:c9:
         a0:0c:a9:c4:bc:a5:6f:79:06:ed:b6:56:d0:51:5a:89:f1:a3:
         37:9e:79:59:6c:ff:42:59:e2:14:bf:5a:4b:b3:26:76:8f:97:
         83:67:d6:b1:e4:e6:7c:1d:24:21:0e:5d:02:5a:bf:45:27:86:
         42:02:ac:44:d7:bd:74:51:85:f4:f0:0e:aa:40:35:f5:6b:65:
         82:72:09:6e:67:e2:6d:29:f0:00:70:14:fe:a4:ab:a0:29:1d:
         79:01:70:5b:75:da:9a:07:41:3c:83:fa:b5:6d:88:0e:bc:1b:
         07:98:fb:39:75:ce:d2:3a:16:15:21:b1:62:93:23:0a:ad:d9:
         20:00:52:71:1d:05:32:40:ff:33:81:22:d7:b1:b7:2e:7a:5a:
         d5:14:2d:93:c7:9a:8e:bd:f4:4b:81:b6:59:86:0c:ae:cd:a7:
         e1:25:4d:f0:52:e7:18:16:11:57:66:4b:ad:dd:2f:ae:fa:bb:
         fb:29:22:e6:2c:35:00:f9:d3:d2:54:51:1e:a3:c9:89:65:4e:
         30:9e:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:31:35 2026 by rpki-client