Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/nrx14wL0fPx4-9DshtLYIG-SPw0.asa
File:                     nrx14wL0fPx4-9DshtLYIG-SPw0.asa (raw, json)
Hash identifier:          tasi695yJoGT9axaG3Jwyukwoa6MAJVOedvjLTRox4E=
Subject key identifier:   9E:BC:75:E3:02:F4:7C:FC:78:FB:D0:EC:86:D2:D8:20:6F:92:3F:0D
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019D6CDD5E705374D5FC2E1C55AC5BFFC86E
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/nrx14wL0fPx4-9DshtLYIG-SPw0.asa
Signing time:             Wed 08 Apr 2026 11:32:20 +0000
ASPA not before:          Wed 08 Apr 2026 11:32:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44955
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6c:dd:5e:70:53:74:d5:fc:2e:1c:55:ac:5b:ff:c8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Apr  8 11:32:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9ebc75e302f47cfc78fbd0ec86d2d8206f923f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:d5:d2:2c:32:21:85:e0:e0:f8:18:4e:30:
                    de:1f:59:a0:d1:42:5d:4c:c9:53:22:82:b0:27:6d:
                    be:ba:25:a1:f5:22:54:58:db:6d:31:7a:e3:ad:33:
                    d1:19:f6:1a:10:79:6a:e4:68:31:4b:f4:71:09:37:
                    4a:76:e7:17:de:4e:8f:6a:5c:cf:df:fc:3c:5f:b8:
                    f2:d9:d6:99:93:4d:85:c7:81:d4:fc:17:91:29:b3:
                    73:34:d4:56:8e:5d:21:24:fc:f7:4a:76:ea:95:f3:
                    e1:d0:da:50:8e:c3:52:be:9d:f2:9a:56:46:66:9f:
                    0e:81:53:23:6f:fb:19:bb:c6:0e:cd:db:3c:61:28:
                    92:5e:be:6d:0e:7b:72:3a:2f:d0:3a:e3:6f:43:45:
                    08:e4:ea:22:e1:97:bd:dd:9f:7e:77:50:a8:34:a2:
                    fe:0d:03:0c:bd:75:f4:04:1e:a5:27:4f:e1:8a:28:
                    05:a1:ba:c0:30:36:92:8d:47:22:bc:d9:a4:92:70:
                    c8:cb:ee:29:9a:58:67:f3:48:8d:04:f3:c4:64:e4:
                    ab:64:d0:da:00:f3:e5:84:ef:d6:e3:7d:e3:2c:a5:
                    b4:95:cc:a5:86:2e:bf:25:8c:a5:7c:69:36:2d:37:
                    d9:e9:0e:46:46:41:49:c4:d6:c0:b6:8a:9d:f9:aa:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:75:E3:02:F4:7C:FC:78:FB:D0:EC:86:D2:D8:20:6F:92:3F:0D
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/nrx14wL0fPx4-9DshtLYIG-SPw0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44955

    Signature Algorithm: sha256WithRSAEncryption
         11:00:4e:e4:b5:41:4c:e6:ac:62:19:41:7c:3f:f0:b3:fb:69:
         84:d9:c5:a7:b4:23:b4:f0:44:b2:60:6b:b4:50:23:d6:46:f2:
         8b:68:9b:41:fa:2c:8c:9d:85:1c:ab:bb:5d:5d:77:cf:34:2b:
         04:27:dc:15:d7:a2:0d:07:5f:e4:1a:6b:95:fe:11:94:46:fb:
         55:bc:1f:d5:2d:1e:18:17:4b:5f:ad:fb:1e:ac:b8:f6:cd:43:
         ae:3e:85:ba:6c:1c:96:32:ef:e5:ec:01:10:0b:a0:1e:d7:18:
         64:52:b4:1c:45:90:e8:1a:94:8e:92:16:bb:cb:c2:42:fe:c1:
         e8:51:5e:4e:a8:9e:40:08:73:b6:33:25:8c:d2:ca:82:78:ee:
         48:b2:c0:57:60:32:90:60:e8:0a:0b:e0:af:ee:42:50:17:ac:
         88:54:f3:27:9c:25:18:79:b8:2d:3f:5b:1f:aa:d8:d0:40:0a:
         ac:47:c6:ae:1d:4e:b4:07:27:0a:a1:4b:03:bd:b6:be:71:ad:
         77:29:d6:de:5a:c2:4a:35:12:38:26:e8:25:21:0a:26:7d:a9:
         5d:2f:15:0e:36:c6:80:bd:4f:8d:5c:67:1b:15:92:e8:0d:1e:
         0b:a2:5a:bf:22:f1:dc:a2:54:73:63:d6:2e:83:19:d8:bb:38:
         1e:ae:71:a9
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1s3V5wU3TV/C4cVaxb/8huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwNDA4MTEzMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWJjNzVlMzAyZjQ3Y2ZjNzhmYmQwZWM4NmQyZDgyMDZmOTIzZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYTV0iwyIYXg4PgYTjDeH1mg0UJd
TMlTIoKwJ22+uiWh9SJUWNttMXrjrTPRGfYaEHlq5GgxS/RxCTdKducX3k6PalzP
3/w8X7jy2daZk02Fx4HU/BeRKbNzNNRWjl0hJPz3SnbqlfPh0NpQjsNSvp3ymlZG
Zp8OgVMjb/sZu8YOzds8YSiSXr5tDntyOi/QOuNvQ0UI5Ooi4Ze93Z9+d1CoNKL+
DQMMvXX0BB6lJ0/hiigFobrAMDaSjUcivNmkknDIy+4pmlhn80iNBPPEZOSrZNDa
APPlhO/W433jLKW0lcylhi6/JYylfGk2LTfZ6Q5GRkFJxNbAtoqd+aqEgwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJ68deMC9Hz8ePvQ7IbS2CBvkj8NMB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvbnJ4MTR3TDBmUHg0LTlEc2h0TFlJRy1TUHcwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvmzANBgkqhkiG
9w0BAQsFAAOCAQEAEQBO5LVBTOasYhlBfD/ws/tphNnFp7QjtPBEsmBrtFAj1kby
i2ibQfosjJ2FHKu7XV13zzQrBCfcFdeiDQdf5Bprlf4RlEb7Vbwf1S0eGBdLX637
Hqy49s1Drj6FumwcljLv5ewBEAugHtcYZFK0HEWQ6BqUjpIWu8vCQv7B6FFeTqie
QAhztjMljNLKgnjuSLLAV2AykGDoCgvgr+5CUBesiFTzJ5wlGHm4LT9bH6rY0EAK
rEfGrh1OtAcnCqFLA722vnGtdynW3lrCSjUSOCboJSEKJn2pXS8VDjbGgL1PjVxn
GxWS6A0eC6JavyLx3KJUc2PWLoMZ2Ls4Hq5xqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:54 2026 by rpki-client