Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/nhq_qGUcU_t6h2fShvkm5KcVLbc.asa
File:                     nhq_qGUcU_t6h2fShvkm5KcVLbc.asa (raw, json)
Hash identifier:          2gM2W2hhQEQcIgb7tgrpzDrWpMp6+au6p0ceenhzT7M=
Subject key identifier:   9E:1A:BF:A8:65:1C:53:FB:7A:87:67:D2:86:F9:26:E4:A7:15:2D:B7
Certificate issuer:       /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial:       019FCD7EED8CCEEAC01733A709F57120C169
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/nhq_qGUcU_t6h2fShvkm5KcVLbc.asa
Signing time:             Tue 04 Aug 2026 15:57:55 +0000
ASPA not before:          Tue 04 Aug 2026 15:57:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199742
Providers:                AS: 42532
                          AS: 49581
                          AS: 58212
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:7e:ed:8c:ce:ea:c0:17:33:a7:09:f5:71:20:c1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
        Validity
            Not Before: Aug  4 15:57:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e1abfa8651c53fb7a8767d286f926e4a7152db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:aa:af:b0:40:5c:57:79:54:bc:c2:dc:9c:
                    d2:50:fe:cc:5e:c7:49:2a:2e:f6:a1:73:1b:7d:6a:
                    9e:94:e2:8f:85:f6:e2:09:c0:ea:03:53:cd:b7:e8:
                    b0:a5:5e:61:58:8f:5b:40:7b:1d:f0:94:b6:d0:0c:
                    cd:c2:cb:32:25:49:d5:03:63:b1:e6:1e:21:e3:c4:
                    34:a4:c5:76:1c:00:66:18:e4:57:0d:6f:dd:76:f5:
                    5a:18:8f:4a:4f:e3:50:33:d9:f1:2c:02:47:6e:ae:
                    c9:ac:fd:7a:aa:94:3f:f3:7e:43:f9:af:25:56:55:
                    61:cd:8d:ef:e9:9a:dd:4e:db:e6:06:04:c8:61:0b:
                    5d:4c:73:d2:45:f1:21:0f:12:23:b0:d5:8c:fa:14:
                    2b:e5:89:d6:e2:39:dc:38:b5:8e:be:89:01:42:b8:
                    c7:76:31:99:ac:cc:33:ab:7b:69:a1:79:6d:4d:00:
                    86:5e:4e:80:58:06:d6:50:77:62:8c:35:6d:5c:1b:
                    f0:1c:ff:21:65:00:6d:49:84:5b:a3:cf:83:45:3f:
                    a4:35:90:13:d0:ee:e6:72:2a:58:3f:18:3b:40:69:
                    b7:5b:c1:12:41:f9:a3:80:97:0f:a8:db:26:dd:04:
                    17:f4:dd:17:b7:c1:b1:e5:dc:77:49:a4:70:6b:24:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1A:BF:A8:65:1C:53:FB:7A:87:67:D2:86:F9:26:E4:A7:15:2D:B7
            X509v3 Authority Key Identifier:
                keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/nhq_qGUcU_t6h2fShvkm5KcVLbc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199742

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:70:5d:1d:9f:e6:61:a0:0f:a5:75:22:f1:40:2f:16:09:
         c2:04:ed:eb:69:2b:d2:da:45:f3:9b:2b:f7:13:be:5a:4a:39:
         7b:08:de:6c:f5:f8:f8:d5:bd:83:18:55:a8:8b:6b:7f:3c:60:
         2e:ee:09:ee:9c:af:e4:e8:f8:65:ac:45:38:b8:b1:4d:ca:92:
         49:ab:aa:a0:a7:79:a1:d6:20:f9:6b:87:cd:04:c5:36:e0:9d:
         f8:b7:7d:18:62:97:21:eb:11:59:d9:55:4e:b7:34:c9:e7:a9:
         83:c0:8a:90:66:3f:38:f7:4d:cf:d7:13:8c:54:16:29:fe:46:
         a1:d9:00:89:06:4e:96:d2:74:0b:fd:6b:a9:7b:29:53:f0:9f:
         ab:c0:3c:c3:28:1a:b1:eb:24:b2:6b:51:e6:ae:8f:9e:d2:fd:
         1f:16:c3:85:17:79:83:98:47:40:6a:fb:1e:1d:e6:46:22:08:
         d1:b9:39:0a:14:a2:9c:94:6d:36:e3:e3:59:25:ba:3f:9f:33:
         79:17:3b:6f:09:23:f9:39:a2:2b:3f:82:22:92:ce:11:7d:e6:
         3d:81:14:8b:dd:75:14:fe:50:22:96:f9:4c:2d:e6:a4:a8:99:
         c2:f8:e5:23:e8:e5:d3:47:1e:6f:92:77:7a:78:09:d7:bb:7a:
         1b:5e:ba:dc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/Nfu2MzurAFzOnCfVxIMFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTg5YWI1MzIzOTM4NjNiY2IxMzkxNjNkY2Y0MTU4YTU3
ZjFiYWYwHhcNMjYwODA0MTU1NzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTFhYmZhODY1MWM1M2ZiN2E4NzY3ZDI4NmY5MjZlNGE3MTUyZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgqqr7BAXFd5VLzC3JzSUP7MXsdJ
Ki72oXMbfWqelOKPhfbiCcDqA1PNt+iwpV5hWI9bQHsd8JS20AzNwssyJUnVA2Ox
5h4h48Q0pMV2HABmGORXDW/ddvVaGI9KT+NQM9nxLAJHbq7JrP16qpQ/835D+a8l
VlVhzY3v6ZrdTtvmBgTIYQtdTHPSRfEhDxIjsNWM+hQr5YnW4jncOLWOvokBQrjH
djGZrMwzq3tpoXltTQCGXk6AWAbWUHdijDVtXBvwHP8hZQBtSYRbo8+DRT+kNZAT
0O7mcipYPxg7QGm3W8ESQfmjgJcPqNsm3QQX9N0Xt8Gx5dx3SaRwayQbkQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJ4av6hlHFP7eodn0ob5JuSnFS23MB8GA1UdIwQY
MBaAFCOomrUyOThjvLE5Fj3PQVilfxuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZpYXRUSTVPR084c1RrV1BjOUJXS1ZfRzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lYzJlZjYtMzVhZS00Njg2LWI0NjIt
MTQ5ZWZiOTUwM2M0LzEvbmhxX3FHVWNVX3Q2aDJmU2h2a201S2NWTGJjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lYzJlZjYtMzVhZS00Njg2LWI0NjItMTQ5ZWZiOTUwM2M0
LzEvSTZpYXRUSTVPR084c1RrV1BjOUJXS1ZfRzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMMPjANBgkqhkiG
9w0BAQsFAAOCAQEAI91wXR2f5mGgD6V1IvFALxYJwgTt62kr0tpF85sr9xO+Wko5
ewjebPX4+NW9gxhVqItrfzxgLu4J7pyv5Oj4ZaxFOLixTcqSSauqoKd5odYg+WuH
zQTFNuCd+Ld9GGKXIesRWdlVTrc0yeepg8CKkGY/OPdNz9cTjFQWKf5GodkAiQZO
ltJ0C/1rqXspU/Cfq8A8wygasesksmtR5q6PntL9HxbDhRd5g5hHQGr7Hh3mRiII
0bk5ChSinJRtNuPjWSW6P58zeRc7bwkj+TmiKz+CIpLOEX3mPYEUi911FP5QIpb5
TC3mpKiZwvjlI+jl00ceb5J3engJ17t6G1663A==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:41 2026 by rpki-client