Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa
File:                     9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (raw, json)
Hash identifier:          mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=
Subject key identifier:   F5:94:97:7E:C0:A4:BE:14:C3:9F:41:2A:1B:88:4A:F7:1F:F9:AF:78
Certificate issuer:       /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial:       019E743BA73407858A94CBB0FDEDED7190BE
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa
Signing time:             Fri 29 May 2026 14:55:26 +0000
ASPA not before:          Fri 29 May 2026 14:55:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197260
Providers:                AS: 34927
                          AS: 35661
                          AS: 214915
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:74:3b:a7:34:07:85:8a:94:cb:b0:fd:ed:ed:71:90:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
        Validity
            Not Before: May 29 14:55:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f594977ec0a4be14c39f412a1b884af71ff9af78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:a6:47:f0:a6:80:6e:40:22:54:74:be:03:
                    47:07:de:ff:34:c5:b0:0e:f0:51:72:df:a7:29:03:
                    35:8f:8a:a1:0c:05:b5:75:f4:6b:16:18:b9:33:f8:
                    67:ad:6a:54:46:06:13:5d:ea:85:f6:90:49:2b:a0:
                    63:bd:40:2e:14:61:d5:d4:73:c6:4c:01:0b:3d:5d:
                    25:4a:48:54:31:46:a6:8a:f0:dc:25:2a:47:94:e1:
                    00:14:b5:a9:ad:97:48:a7:94:9f:d6:43:d4:dd:8a:
                    e5:b9:16:a5:ec:10:3c:f3:6f:1a:42:f7:a8:7e:01:
                    cd:b9:38:03:bc:1d:2e:67:85:71:11:be:a7:62:76:
                    5d:e2:18:f2:68:15:5f:b5:30:37:6b:8d:17:21:b1:
                    a7:5b:1c:45:56:2a:8c:03:23:2a:5f:d9:56:ed:7b:
                    88:5c:d9:93:00:9e:87:aa:87:ac:2d:e0:a3:bc:70:
                    2f:7c:bb:96:0e:41:a7:24:0d:42:4a:d9:49:4b:0b:
                    a1:4d:67:fb:86:80:d3:cc:98:5f:16:77:eb:f7:91:
                    ff:d4:7c:34:e2:cc:01:21:8b:67:dd:8b:4c:de:c2:
                    ee:ac:27:06:a8:b9:5e:fc:5e:f0:20:34:58:f9:ef:
                    e3:cb:fb:96:43:01:b9:d3:d3:a7:57:5a:83:f5:9b:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:94:97:7E:C0:A4:BE:14:C3:9F:41:2A:1B:88:4A:F7:1F:F9:AF:78
            X509v3 Authority Key Identifier:
                keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197260

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:fb:54:74:8e:62:2a:ad:b4:44:5c:da:2a:c0:ce:f5:7e:
         49:74:da:7a:18:e3:4a:b7:69:f7:a5:4b:f2:41:59:ee:e3:d3:
         c5:8c:78:ec:7c:2b:72:40:f0:63:23:f7:27:d9:d9:2f:40:f0:
         7c:d8:1e:09:59:2b:84:35:21:b2:cb:41:27:63:75:46:c4:52:
         02:37:a1:d0:26:81:b1:e2:c3:8a:b8:64:d7:69:ea:11:51:1b:
         d3:28:29:27:9c:f4:15:22:3d:2c:95:78:1c:3c:f3:11:b9:b2:
         8f:45:59:2b:da:24:d8:39:c3:75:42:08:11:c5:df:22:a3:61:
         57:1d:26:d3:21:a0:61:74:5e:8d:27:05:88:bf:5b:63:ef:17:
         b0:a1:a9:32:25:4a:eb:17:f9:30:d5:2c:ff:07:7f:ff:6f:61:
         47:ca:bb:c2:7c:8d:42:ec:3d:8e:ec:28:24:c5:3f:6f:87:9c:
         a1:94:fd:87:ca:30:3e:86:05:5c:9f:4b:43:13:d7:61:ff:a8:
         32:f6:46:a0:9f:ce:40:65:0a:e7:7b:a0:25:22:cf:9c:de:20:
         a4:4f:49:92:47:9e:af:c7:f1:57:e6:8d:a9:a4:7c:6d:3a:26:
         fc:a7:99:de:58:51:21:b1:e7:c2:10:20:42:28:81:51:bb:53:
         ff:c0:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:22 2026 by rpki-client