Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/nyYCtMbd7TZK8VqIfB53aS7KNLs.asa
File:                     nyYCtMbd7TZK8VqIfB53aS7KNLs.asa (raw, json)
Hash identifier:          BqapecHd3LVpjtUiBcf/9yimCcVOdhG5vEebX7N6HDE=
Subject key identifier:   9F:26:02:B4:C6:DD:ED:36:4A:F1:5A:88:7C:1E:77:69:2E:CA:34:BB
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       01A001D7FF07B2D3BAB87B836875BE739BF3
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/nyYCtMbd7TZK8VqIfB53aS7KNLs.asa
Signing time:             Fri 14 Aug 2026 19:55:27 +0000
ASPA not before:          Fri 14 Aug 2026 19:55:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39335
Providers:                AS: 42615
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:d7:ff:07:b2:d3:ba:b8:7b:83:68:75:be:73:9b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Aug 14 19:55:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f2602b4c6dded364af15a887c1e77692eca34bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:c1:63:a8:ac:a5:94:7a:02:1f:d4:79:e1:
                    af:63:36:e9:60:3d:9d:70:5a:25:72:a7:16:ce:26:
                    c2:bc:29:5d:10:fd:6a:02:3e:d2:91:09:c3:de:4e:
                    ad:41:4b:55:90:16:1d:71:f9:44:d6:36:8f:34:2b:
                    9d:c7:5d:16:37:cc:c4:63:d9:56:64:89:0f:aa:c5:
                    8d:07:67:8f:be:e8:54:26:de:c1:bd:64:a9:65:71:
                    a3:32:43:47:ad:2b:d4:f8:5d:5d:b1:44:49:2f:d0:
                    3e:65:af:fd:1c:f3:ab:2c:59:81:a6:ed:e3:0e:b9:
                    b8:3d:75:06:41:30:0a:2f:4a:57:4b:d6:3f:f5:0f:
                    19:30:e5:98:54:88:c5:b6:86:f0:a4:2f:9e:3d:f2:
                    95:85:7b:97:23:3b:7a:31:54:6a:1e:9c:8f:4a:bd:
                    f9:aa:37:cb:47:ff:5c:0d:57:90:df:4d:d0:9d:ee:
                    53:66:55:a2:22:1e:e6:72:aa:42:0b:5f:4f:3f:dd:
                    c4:f0:98:51:9c:67:5c:7a:80:6e:17:08:da:70:e2:
                    78:ad:ae:b6:c0:f1:36:d5:da:ba:aa:36:41:90:2e:
                    0b:c8:c0:5b:c4:fb:cc:bd:de:69:18:0b:3d:e8:79:
                    7a:a1:fd:7f:c8:d4:dd:d9:0a:f4:b7:ef:41:ef:26:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:02:B4:C6:DD:ED:36:4A:F1:5A:88:7C:1E:77:69:2E:CA:34:BB
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/nyYCtMbd7TZK8VqIfB53aS7KNLs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39335

    Signature Algorithm: sha256WithRSAEncryption
         b9:95:80:e8:94:35:ff:93:52:33:4b:c0:3e:82:c4:08:0b:23:
         38:fe:70:e9:cd:59:f1:80:70:cf:ae:8a:b6:9c:d1:e7:9b:1f:
         fb:01:06:98:1a:ec:b8:e2:d3:ac:ad:ab:1d:5e:c0:f6:9d:0c:
         9e:e5:78:d6:3c:fb:26:0d:0d:2a:7c:9e:d5:77:2e:f0:2a:fc:
         a9:95:e1:c4:0f:14:1f:c4:5f:46:68:8f:54:61:bf:e6:2b:d9:
         98:56:f2:18:b5:fe:49:db:cd:27:32:7c:1e:97:72:23:4a:bb:
         8a:85:3c:e9:a2:47:25:0d:9a:dd:7d:5e:33:33:94:23:c5:5d:
         03:a0:71:6d:68:e2:13:3d:a8:f5:14:c5:ea:53:95:89:4f:6e:
         ea:bd:25:3f:06:4c:58:b2:b9:6a:f4:fa:9d:7c:7b:73:0f:0b:
         62:31:5e:da:d8:13:94:46:43:0b:98:9d:94:8d:69:46:00:64:
         64:ae:70:98:69:ec:bf:ab:6e:32:4e:28:b9:4e:f9:05:64:05:
         79:9c:3f:e1:76:a6:b3:51:83:09:bc:23:c6:55:01:64:dd:97:
         f5:e6:04:fb:f7:e8:4f:8c:df:0e:7b:df:f0:39:9a:9c:4e:5e:
         b0:03:4b:58:42:42:9e:6f:89:f5:98:59:47:b1:85:40:2a:3f:
         74:8d:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:52:46 2026 by rpki-client