Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/n4GrMGyvU-_AhAxKWfDJUggmdeI.asa
File:                     n4GrMGyvU-_AhAxKWfDJUggmdeI.asa (raw, json)
Hash identifier:          XeIspJtXvdcDhR1XKK2wyUaBMrgjI7FZP4Odx1xEJio=
Subject key identifier:   9F:81:AB:30:6C:AF:53:EF:C0:84:0C:4A:59:F0:C9:52:08:26:75:E2
Certificate issuer:       /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial:       019C99E599418BA5A79695FE1EAE336CE328
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/n4GrMGyvU-_AhAxKWfDJUggmdeI.asa
Signing time:             Thu 26 Feb 2026 12:21:26 +0000
ASPA not before:          Thu 26 Feb 2026 12:21:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42313
Providers:                AS: 174
                          AS: 1299
                          AS: 6762
                          AS: 12713
                          AS: 50973
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:99:e5:99:41:8b:a5:a7:96:95:fe:1e:ae:33:6c:e3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
        Validity
            Not Before: Feb 26 12:21:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f81ab306caf53efc0840c4a59f0c952082675e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:75:02:68:98:02:8f:92:c2:0b:1f:13:d3:
                    e5:0d:4f:2f:5c:13:ee:30:d0:60:cd:2a:e6:ff:31:
                    0b:a9:0b:3d:27:bf:71:56:11:b9:a0:93:48:9a:89:
                    8f:12:e6:d0:65:36:1f:a6:b9:16:08:c6:8a:46:09:
                    8d:4b:50:d2:a9:1d:b4:9d:ab:cf:4a:3c:77:b6:c4:
                    56:b1:51:e5:1c:89:9a:b1:3e:30:c5:13:ec:4b:ee:
                    08:fe:7f:11:5a:23:b4:54:94:5e:6e:8c:d9:d0:69:
                    9c:d9:89:95:03:10:02:12:59:c7:b2:70:23:87:ce:
                    3f:37:ba:fe:b6:34:05:ee:40:8d:a9:dc:27:05:e8:
                    a1:ba:37:04:79:6e:c0:c9:ef:0e:00:a2:d8:97:39:
                    00:dd:82:23:71:33:73:be:0d:a5:d7:65:a4:8b:09:
                    82:c2:db:63:4e:1c:6a:ec:de:86:8b:62:03:f9:24:
                    36:78:57:41:bb:88:38:9d:4f:31:c5:23:c7:13:ca:
                    9a:be:a0:31:0a:64:1c:04:54:47:02:62:e7:db:98:
                    f4:f6:16:82:91:35:d9:fb:71:8a:37:36:18:44:f1:
                    be:c4:8f:42:d2:55:40:1b:81:31:e0:b8:2b:9c:47:
                    b1:cb:79:ab:7a:18:11:8f:6d:60:72:ec:cb:fc:63:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:AB:30:6C:AF:53:EF:C0:84:0C:4A:59:F0:C9:52:08:26:75:E2
            X509v3 Authority Key Identifier:
                keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/n4GrMGyvU-_AhAxKWfDJUggmdeI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42313

    Signature Algorithm: sha256WithRSAEncryption
         8a:fc:9e:ba:92:fe:8b:ea:d0:31:d8:4c:ce:12:10:de:6d:e3:
         88:2d:5b:e4:6d:97:10:11:5a:47:71:f9:5b:65:71:d3:49:9a:
         dd:b2:df:9e:92:5a:f9:9f:1f:9a:50:37:dc:50:2e:fc:29:e2:
         b9:a5:9f:13:37:79:85:cd:1c:fb:40:4c:7e:e2:eb:43:ae:76:
         5a:7f:7b:1c:2c:57:9d:a0:20:4d:a6:51:74:50:e0:9f:96:13:
         f1:b9:08:60:17:45:16:ce:42:98:e6:dd:49:b7:7a:b2:22:23:
         e7:1c:2d:77:03:a3:83:04:47:98:72:64:86:30:46:e0:56:c9:
         ce:ba:e7:f1:86:31:3d:70:c1:94:bf:c2:1c:0f:55:37:96:90:
         f3:ff:2e:2b:df:8e:4a:7f:dc:18:92:27:ea:69:a9:51:0b:d1:
         18:79:ca:d5:b1:ec:34:0e:48:cb:47:2b:c3:5c:d6:af:0e:19:
         e1:9b:91:f7:6b:c3:30:4e:80:1e:21:9b:81:77:45:39:da:eb:
         aa:c3:ea:dd:e1:0d:6e:fe:e5:13:7e:f6:d4:17:7d:6f:ff:0f:
         31:91:66:7d:87:c1:d3:75:bd:d1:68:8b:70:bd:83:74:4d:4b:
         c9:ff:29:54:b9:2b:97:69:81:c8:03:c2:a7:47:68:7f:f8:52:
         a3:95:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:44 2026 by rpki-client