Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/nfbSVsYj14X3ZfSgLBVMUYnsOIo.asa
File:                     nfbSVsYj14X3ZfSgLBVMUYnsOIo.asa (raw, json)
Hash identifier:          s6nrdvhUBgHrfgOiWy7ToxqlDwGipII3LxQu2o1H4zI=
Subject key identifier:   9D:F6:D2:56:C6:23:D7:85:F7:65:F4:A0:2C:15:4C:51:89:EC:38:8A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       019FB23AF224DF3998E9B10133587273160E
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/nfbSVsYj14X3ZfSgLBVMUYnsOIo.asa
Signing time:             Thu 30 Jul 2026 08:53:55 +0000
ASPA not before:          Thu 30 Jul 2026 08:53:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206375
Providers:                AS: 3257
                          AS: 9002
                          AS: 9121
                          AS: 44901
                          AS: 206119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b2:3a:f2:24:df:39:98:e9:b1:01:33:58:72:73:16:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Jul 30 08:53:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9df6d256c623d785f765f4a02c154c5189ec388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:80:d3:52:31:3a:b4:bb:bc:47:d0:a0:bd:45:
                    29:77:0a:0b:43:36:57:4a:fe:67:a7:8d:49:c2:63:
                    65:b0:26:93:75:c4:36:cf:91:ad:8b:fa:6f:bc:5d:
                    be:49:17:d0:34:bb:68:31:7f:54:4c:50:31:1e:d9:
                    4c:7f:20:eb:4f:fe:4f:ba:5b:c7:0f:70:28:c1:12:
                    7b:25:76:4c:58:78:a4:0c:06:68:f2:c4:4d:21:24:
                    ff:27:cc:31:40:35:96:ad:bc:0d:ba:d6:f4:cd:b3:
                    16:b3:f2:7e:9d:0d:f9:2a:17:0f:a4:3f:03:19:b0:
                    fa:f9:3d:4f:5c:58:e9:cf:af:01:55:16:32:ea:9b:
                    cb:6c:6c:0c:54:71:ef:03:e9:bd:24:74:db:5b:f4:
                    0d:6b:3b:d7:6b:91:95:56:e8:cd:26:94:bd:39:70:
                    2f:93:65:c9:22:8f:b2:43:dd:6e:ef:8b:a6:28:3e:
                    03:73:68:36:53:77:85:f1:73:39:3d:88:b7:d4:75:
                    d4:ea:e2:b4:3c:e0:fe:0a:84:4a:c8:29:30:13:2d:
                    af:95:56:e1:f6:81:3d:38:4f:de:17:82:78:ae:d4:
                    2e:3a:53:14:c5:41:a3:87:50:1a:2e:8e:18:f4:40:
                    11:fc:4b:06:c9:43:34:7e:a3:a1:7e:0c:2c:92:90:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F6:D2:56:C6:23:D7:85:F7:65:F4:A0:2C:15:4C:51:89:EC:38:8A
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/nfbSVsYj14X3ZfSgLBVMUYnsOIo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206375

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:d4:c7:7f:16:b7:54:bf:22:fd:d7:d2:a0:0d:fb:bb:27:
         1b:4d:99:86:43:6d:05:ff:b5:2b:c3:de:c9:8b:e5:2a:2a:e1:
         96:54:fa:3f:88:68:32:01:cd:65:eb:b5:6d:b9:34:ca:7f:2b:
         d9:88:d7:30:c1:d9:82:69:4a:4d:b6:61:ee:52:1d:d8:1e:ae:
         30:a0:8a:fa:eb:d4:7a:a8:75:6d:d4:0f:cf:d2:de:98:2e:f2:
         5c:84:53:f7:f8:d3:b5:7c:4d:29:05:98:5c:87:1b:dd:36:26:
         39:70:3a:4f:23:67:50:0f:b2:65:23:e2:bb:82:c2:1d:fe:65:
         3c:52:0b:68:32:60:b6:69:b2:d8:4e:9d:0e:80:d1:c6:67:74:
         06:9e:79:74:15:3c:94:1d:fd:7f:ec:b3:cf:71:f8:9f:e0:d5:
         d5:40:e5:57:32:b6:ad:dd:42:5b:61:0b:5f:bb:f6:13:7b:c6:
         5d:8e:3b:db:b8:04:50:89:74:2e:38:e9:77:e8:12:16:0e:6b:
         2a:d3:a1:dd:83:a6:72:64:db:1a:4d:bb:2f:06:51:a6:f0:0c:
         ee:a1:8b:d7:a7:01:79:31:de:57:1b:75:2b:7d:46:1a:4c:47:
         f4:d9:f8:58:fc:6b:2e:ed:85:13:81:05:f8:87:cc:73:77:ef:
         ad:9d:29:2a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ+yOvIk3zmY6bEBM1hycxYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl
N2Y4NWEwHhcNMjYwNzMwMDg1MzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGY2ZDI1NmM2MjNkNzg1Zjc2NWY0YTAyYzE1NGM1MTg5ZWMzODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IDTUjE6tLu8R9CgvUUpdwoLQzZX
Sv5np41JwmNlsCaTdcQ2z5Gti/pvvF2+SRfQNLtoMX9UTFAxHtlMfyDrT/5PulvH
D3AowRJ7JXZMWHikDAZo8sRNIST/J8wxQDWWrbwNutb0zbMWs/J+nQ35KhcPpD8D
GbD6+T1PXFjpz68BVRYy6pvLbGwMVHHvA+m9JHTbW/QNazvXa5GVVujNJpS9OXAv
k2XJIo+yQ91u74umKD4Dc2g2U3eF8XM5PYi31HXU6uK0POD+CoRKyCkwEy2vlVbh
9oE9OE/eF4J4rtQuOlMUxUGjh1AaLo4Y9EAR/EsGyUM0fqOhfgwskpDxWQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJ320lbGI9eF92X0oCwVTFGJ7DiKMB8GA1UdIwQY
MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt
YmIwNjcxZDhlYTMyLzEvbmZiU1ZzWWoxNFgzWmZTZ0xCVk1VWW5zT0lvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy
LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmJzANBgkqhkiG
9w0BAQsFAAOCAQEAg6HUx38Wt1S/Iv3X0qAN+7snG02ZhkNtBf+1K8PeyYvlKirh
llT6P4hoMgHNZeu1bbk0yn8r2YjXMMHZgmlKTbZh7lId2B6uMKCK+uvUeqh1bdQP
z9LemC7yXIRT9/jTtXxNKQWYXIcb3TYmOXA6TyNnUA+yZSPiu4LCHf5lPFILaDJg
tmmy2E6dDoDRxmd0Bp55dBU8lB39f+yzz3H4n+DV1UDlVzK2rd1CW2ELX7v2E3vG
XY4727gEUIl0Ljjpd+gSFg5rKtOh3YOmcmTbGk27LwZRpvAM7qGL16cBeTHeVxt1
K31GGkxH9Nn4WPxrLu2FE4EF+IfMc3fvrZ0pKg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:31 2026 by rpki-client