Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/nYD17mll_27ZXiDBVbfu9pAFZUI.asa
File:                     nYD17mll_27ZXiDBVbfu9pAFZUI.asa (raw, json)
Hash identifier:          aqqjluAZqn8ok88nfidc6bqSZjUpiWBj4TFvOPAr5AU=
Subject key identifier:   9D:80:F5:EE:69:65:FF:6E:D9:5E:20:C1:55:B7:EE:F6:90:05:65:42
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       019E96C3B9E12D4B025399243D9BC004884E
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/nYD17mll_27ZXiDBVbfu9pAFZUI.asa
Signing time:             Fri 05 Jun 2026 07:51:10 +0000
ASPA not before:          Fri 05 Jun 2026 07:51:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214503
Providers:                AS: 918
                          AS: 3399
                          AS: 6939
                          AS: 20473
                          AS: 21485
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:96:c3:b9:e1:2d:4b:02:53:99:24:3d:9b:c0:04:88:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: Jun  5 07:51:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9d80f5ee6965ff6ed95e20c155b7eef690056542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:92:df:0c:e3:41:1f:39:a0:dd:80:4e:a4:5a:
                    73:b3:1b:2e:56:30:0d:68:8f:82:70:11:af:bb:80:
                    3e:a4:f8:c9:2e:fc:46:05:7b:36:86:8a:f8:ca:6c:
                    e1:08:a8:ea:cd:49:fc:0c:6b:de:7e:af:5d:f1:42:
                    97:3e:1d:56:b4:7b:8e:ee:55:96:3a:7a:5f:43:7f:
                    55:d9:76:a6:59:17:76:f1:db:37:68:cd:27:ce:9c:
                    a0:55:24:54:39:51:ca:2c:59:33:cd:31:c8:66:32:
                    d1:ed:d9:16:ab:a2:de:62:fc:75:d9:10:ef:fe:f8:
                    39:2b:ea:66:6c:36:cf:10:a8:72:d8:bf:68:7d:ea:
                    62:e9:7f:42:ad:09:cb:6f:85:9a:bb:ab:43:17:9a:
                    57:e6:50:dd:d3:34:fd:c6:dd:27:bf:8d:d6:95:c3:
                    0c:0a:4c:6b:9f:d0:67:9d:be:66:f7:b1:9b:1a:eb:
                    47:da:4d:64:c1:6f:4a:a3:37:9b:0e:b4:1c:7b:c1:
                    eb:ba:be:99:f0:1a:09:9e:a8:c6:c6:a0:e4:ab:ae:
                    31:49:92:ce:82:cb:91:66:b9:1f:d4:8f:fa:01:58:
                    ef:17:4f:67:58:b1:ae:ce:b3:69:07:61:98:f6:74:
                    29:b0:72:1e:b2:11:0e:a2:f9:81:57:36:06:94:3a:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:F5:EE:69:65:FF:6E:D9:5E:20:C1:55:B7:EE:F6:90:05:65:42
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/nYD17mll_27ZXiDBVbfu9pAFZUI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214503

    Signature Algorithm: sha256WithRSAEncryption
         33:98:0c:ed:c6:a2:a4:6e:43:d7:ce:0b:f7:85:08:7f:fb:7f:
         48:57:64:ac:37:d6:80:c6:d9:7c:d2:2a:72:b4:29:cb:03:eb:
         78:f1:fe:63:6a:ce:67:b8:92:13:cc:68:7f:56:e1:2b:57:0f:
         5c:ad:aa:03:f9:2d:9c:0b:9c:c1:57:56:ac:61:ce:d4:15:20:
         cf:d7:b0:82:72:2b:14:68:53:d0:44:d6:02:da:f8:0f:41:da:
         11:fb:cc:66:77:fe:d8:a3:d3:f4:4c:aa:70:f9:77:ae:3a:b5:
         f2:6b:9a:66:9e:fa:8c:f2:a4:9d:ec:20:64:55:0b:38:e4:01:
         fa:c0:f7:7e:ce:0b:ae:98:fe:e5:39:3b:d4:0a:9d:ec:05:ca:
         a7:9e:3a:7a:43:52:4e:29:f1:4a:b0:35:6e:63:ec:5e:47:83:
         09:78:9b:ce:73:9a:5c:71:86:9e:f8:23:59:18:92:15:0a:5f:
         c6:ea:d5:0e:d7:ac:b7:44:20:fd:13:69:f6:82:8c:2c:ee:85:
         94:5a:7a:d4:71:b1:33:5a:d9:84:1d:70:2e:b1:ff:91:fe:e2:
         eb:a6:be:f4:b6:5e:c7:5c:74:1a:ce:69:3f:25:ce:5e:21:3f:
         15:b0:97:82:fd:ae:83:b0:9d:ab:85:8d:36:43:03:3b:87:78:
         25:fb:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:07 2026 by rpki-client