Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/NCd7h6uycmfDKwB1SSzV73CMlrg.asa
File:                     NCd7h6uycmfDKwB1SSzV73CMlrg.asa (raw, json)
Hash identifier:          mLT15W8x+3BbgxOWdyZ4lMlHx6//PbZWkOA2zhYYkDk=
Subject key identifier:   34:27:7B:87:AB:B2:72:67:C3:2B:00:75:49:2C:D5:EF:70:8C:96:B8
Certificate issuer:       /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial:       01A0A955CBFFB5452C91E613DCA99192462F
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/NCd7h6uycmfDKwB1SSzV73CMlrg.asa
Signing time:             Wed 16 Sep 2026 08:29:27 +0000
ASPA not before:          Wed 16 Sep 2026 08:29:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            33923
Providers:                AS: 3257
                          AS: 9141
                          AS: 50607
                          AS: 201054
                          AS: 202520
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a9:55:cb:ff:b5:45:2c:91:e6:13:dc:a9:91:92:46:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
        Validity
            Not Before: Sep 16 08:29:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=34277b87abb27267c32b0075492cd5ef708c96b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:c9:bf:3d:8a:11:7f:4d:f5:c9:de:29:07:
                    f5:7e:05:f2:35:75:79:42:75:05:98:46:69:35:2e:
                    41:29:61:71:09:37:fb:25:53:76:5c:8b:db:e7:0d:
                    38:d3:1b:6b:8a:b4:a1:93:52:a4:b5:ba:2f:b0:32:
                    53:02:a4:34:aa:9b:36:0a:9d:6b:56:70:a6:be:ec:
                    2a:50:44:a2:b9:a1:10:f7:7a:38:07:1e:7d:a1:a1:
                    7b:80:b9:45:8c:97:fb:e7:e3:9e:47:b6:d0:89:41:
                    67:c3:5a:9b:e1:2b:2c:4f:6d:ca:ab:7c:d7:cd:d6:
                    5e:1c:33:e2:52:f6:91:b7:b4:c3:41:8b:b6:f2:4e:
                    cc:45:14:55:b0:ff:ed:10:d0:5a:e8:5f:31:77:f8:
                    12:c6:a7:06:9b:93:d0:41:eb:4c:17:4b:ac:01:d5:
                    7f:7b:12:29:c8:27:f8:25:89:5f:49:66:ca:70:fd:
                    ec:d0:52:dd:b2:99:12:12:bb:d6:f1:7e:b3:8f:7f:
                    7b:37:a1:39:ed:29:71:48:f0:27:0a:54:60:e3:c4:
                    94:59:22:0d:4a:22:bb:44:0a:2b:20:8f:45:33:6f:
                    34:a4:28:af:c4:6a:4f:bd:7e:41:24:e7:3c:d3:4c:
                    af:85:db:af:a3:ef:22:69:cc:16:35:b5:9e:43:5a:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:7B:87:AB:B2:72:67:C3:2B:00:75:49:2C:D5:EF:70:8C:96:B8
            X509v3 Authority Key Identifier:
                keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/NCd7h6uycmfDKwB1SSzV73CMlrg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33923

    Signature Algorithm: sha256WithRSAEncryption
         83:82:eb:68:74:dd:bf:ad:02:c3:8d:87:d5:ab:3c:22:01:87:
         cf:3e:af:0b:46:e8:cf:61:21:bc:7d:88:10:b7:f4:8d:c5:da:
         bf:15:8b:00:59:e9:de:03:6c:fa:7c:b9:14:80:05:07:28:b1:
         f4:49:20:39:0c:7a:1b:61:86:28:e6:6c:b0:d0:94:10:86:dc:
         e6:91:ec:90:7c:3b:35:dc:06:69:b6:3f:fb:d2:7a:f1:13:cb:
         30:de:8a:96:bd:4a:40:b9:4b:55:06:2b:f8:fd:56:f4:49:4b:
         85:a7:cc:3a:bc:8c:07:bf:75:27:bf:3f:63:9b:fd:d5:0f:d4:
         74:fe:e8:bd:30:37:38:14:86:92:83:8b:65:b6:d9:c3:e3:15:
         c3:70:bb:b9:da:d8:64:d7:35:d5:da:53:42:17:1b:1e:38:5c:
         7a:20:17:90:e6:a0:e0:72:50:13:c3:8a:33:b6:0c:a4:f0:47:
         83:36:9a:9e:d3:00:54:3d:38:4e:f0:e5:1b:ee:4f:cd:63:d1:
         f4:5f:d1:e2:10:76:d9:06:0e:af:38:4b:82:f7:1b:b4:ef:ad:
         65:f7:99:54:b1:92:d9:81:01:4f:94:3c:a8:9d:e5:16:ce:6b:
         1e:4f:e4:5b:55:4b:cf:bc:d7:1b:67:8d:df:28:db:73:d3:09:
         8c:e0:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:41 2026 by rpki-client