Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/NrA991AGhswKHoCiVV7wuFGnlL4.asa
File:                     NrA991AGhswKHoCiVV7wuFGnlL4.asa (raw, json)
Hash identifier:          U1LKdoZrRBxa/FCyy+LusNc8waRRDWwz6HuAWeQTgYo=
Subject key identifier:   36:B0:3D:F7:50:06:86:CC:0A:1E:80:A2:55:5E:F0:B8:51:A7:94:BE
Certificate issuer:       /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial:       01A09DB655B4C1C7A469EA522878EF68FEB0
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/NrA991AGhswKHoCiVV7wuFGnlL4.asa
Signing time:             Mon 14 Sep 2026 02:19:27 +0000
ASPA not before:          Mon 14 Sep 2026 02:19:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209771
Providers:                AS: 6939
                          AS: 11967
                          AS: 34549
                          AS: 41051
                          AS: 48646
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9d:b6:55:b4:c1:c7:a4:69:ea:52:28:78:ef:68:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
        Validity
            Not Before: Sep 14 02:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36b03df7500686cc0a1e80a2555ef0b851a794be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:94:32:74:99:0a:d0:a4:53:fd:4a:3f:2c:
                    72:ce:ab:23:b7:78:dc:9f:0c:95:12:1d:8a:d2:e7:
                    8e:e2:ae:79:33:11:57:33:20:13:c5:0a:7e:c8:f7:
                    3c:5d:d8:ec:d3:56:22:45:c4:3e:8c:1a:f6:a9:18:
                    0a:0d:c4:24:87:f2:81:36:27:5a:e4:f4:99:ae:b8:
                    be:b2:7d:62:0b:56:26:0b:6e:2d:9c:bc:d4:23:89:
                    d1:32:ef:34:f0:75:80:b8:25:32:85:54:c8:18:20:
                    28:b5:c5:c3:5b:c6:d7:79:77:43:21:63:21:1e:f6:
                    ba:26:5b:7b:04:18:a9:4d:28:f3:14:98:92:89:53:
                    96:00:e3:30:d8:5e:88:64:c2:f6:1e:4a:9f:17:16:
                    ae:74:57:56:a4:8f:b0:f7:4c:d9:40:54:1c:21:ef:
                    dd:ea:f2:8f:bd:3d:44:fc:ec:3f:07:9b:d1:bc:d7:
                    6d:33:3f:70:61:92:99:e3:9f:6c:69:1c:6a:2a:d4:
                    ab:1d:2a:7c:d7:a3:c1:27:fa:a0:23:fb:4c:f7:55:
                    5e:64:1f:56:93:93:0b:68:1a:60:33:73:1c:58:87:
                    9d:88:6e:bf:ae:9d:42:66:d7:6c:66:fa:cc:bc:1e:
                    f3:e5:2b:69:46:21:a3:57:64:0e:6e:f0:27:e3:e3:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B0:3D:F7:50:06:86:CC:0A:1E:80:A2:55:5E:F0:B8:51:A7:94:BE
            X509v3 Authority Key Identifier:
                keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/NrA991AGhswKHoCiVV7wuFGnlL4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209771

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:48:9e:65:b0:ac:83:b7:01:3e:88:51:1b:a2:d6:53:e0:
         18:36:1b:d7:76:86:6e:43:5a:18:d5:72:6a:45:e9:82:a0:fd:
         c2:b6:3b:f7:17:81:9a:a6:1d:08:4a:c0:dd:fe:36:52:b9:fe:
         c1:72:da:0a:eb:b9:39:cf:7d:3a:ad:d7:84:9a:eb:b1:b9:c7:
         83:c7:1e:86:af:44:3d:a1:1d:ed:df:9c:0b:7b:f4:37:df:77:
         87:c2:0d:7b:79:17:0f:ac:ce:fd:3e:7d:19:61:c3:74:c1:68:
         65:83:d4:6f:fd:38:88:ad:72:eb:76:d0:f5:26:7a:7c:64:10:
         75:11:86:c3:33:72:af:f3:df:78:93:52:58:c2:6a:e5:43:8a:
         3f:97:e7:52:ab:de:1e:34:54:42:55:6d:d4:3d:79:68:72:f8:
         d7:7f:51:7a:7f:74:29:ef:52:74:3d:1f:f0:b9:2c:3e:5a:64:
         ee:0c:8b:47:e6:fc:f2:6d:b1:73:6b:8b:a4:b3:fe:5e:31:d5:
         e9:e8:10:64:db:d9:a1:32:85:a5:30:c3:b9:a1:14:4d:15:5a:
         03:00:47:95:c5:b8:8f:fc:20:79:42:dd:5a:ff:5c:00:59:7f:
         d2:44:c8:87:83:01:41:e0:04:0a:0f:b1:4f:f8:7f:73:af:74:
         a9:0a:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:04 2026 by rpki-client