Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/NE6F34chlE5AGGjbfBzSGKkprsw.asa
File:                     NE6F34chlE5AGGjbfBzSGKkprsw.asa (raw, json)
Hash identifier:          0Vz/xLWp4kZquxsYZecsrhHJInzdvDG4CDhO9vYduPQ=
Subject key identifier:   34:4E:85:DF:87:21:94:4E:40:18:68:DB:7C:1C:D2:18:A9:29:AE:CC
Certificate issuer:       /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial:       019D972692AB57D60C258AA4193AE125671D
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/NE6F34chlE5AGGjbfBzSGKkprsw.asa
Signing time:             Thu 16 Apr 2026 16:36:20 +0000
ASPA not before:          Thu 16 Apr 2026 16:36:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209359
Providers:                AS: 7768
                          AS: 9121
                          AS: 57152
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:26:92:ab:57:d6:0c:25:8a:a4:19:3a:e1:25:67:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
        Validity
            Not Before: Apr 16 16:36:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=344e85df8721944e401868db7c1cd218a929aecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:7a:33:14:4d:37:4c:78:7a:77:6f:7b:ef:
                    e2:8e:fe:c4:0f:e7:ff:fb:0f:0f:12:a6:24:57:0c:
                    fc:95:fb:d1:0a:74:f3:59:66:a3:d9:5b:12:5f:c4:
                    a5:31:e3:3c:ee:01:ea:fa:f4:8d:65:54:ba:4e:c4:
                    9e:10:87:e5:da:d1:c8:08:a0:d3:21:da:c9:1b:cd:
                    d5:af:a3:1f:4c:61:d4:85:45:44:f4:8e:bb:4e:cc:
                    f6:b2:bc:9a:3a:c6:5b:38:68:9a:9f:5c:0f:70:42:
                    7b:37:fd:66:97:01:bb:2d:32:5c:3e:d2:37:52:cb:
                    09:24:7b:84:40:48:e1:5a:8f:94:30:03:84:20:96:
                    69:12:36:74:fd:75:cf:54:8a:67:a6:6f:5f:3d:40:
                    72:ff:de:76:2a:06:c7:5f:af:df:8e:dc:c7:7d:6d:
                    d1:14:c5:f9:48:95:fe:84:23:67:ba:ea:f4:9d:7e:
                    3b:44:30:41:8f:83:de:28:8d:a8:ed:ab:e5:35:7b:
                    06:d2:59:99:f3:54:6e:41:42:75:e8:75:0b:3d:16:
                    4c:d8:cb:56:e3:35:46:19:fb:9f:47:0f:11:3e:7d:
                    8a:d7:35:d7:1e:f8:78:f0:ec:4b:2a:eb:ab:7d:a5:
                    43:77:65:e4:bb:fe:22:6c:a5:a5:1c:57:f4:83:78:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:85:DF:87:21:94:4E:40:18:68:DB:7C:1C:D2:18:A9:29:AE:CC
            X509v3 Authority Key Identifier:
                keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/NE6F34chlE5AGGjbfBzSGKkprsw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209359

    Signature Algorithm: sha256WithRSAEncryption
         47:b1:e5:db:9d:bb:65:e9:94:20:8b:f1:ed:0c:f7:a6:28:04:
         06:31:fe:e3:65:ee:13:ab:6a:81:47:c5:30:06:1d:5f:d4:5b:
         87:6e:77:2c:ee:99:fa:5e:9e:2a:df:54:66:a0:da:59:0a:2b:
         60:24:bd:95:33:8a:83:33:37:1c:32:1a:ee:94:9b:13:31:97:
         68:a8:d0:88:8d:a4:78:d1:5c:db:db:34:a0:eb:08:ff:c9:58:
         d0:dc:15:4d:59:77:31:0f:4f:b4:80:a6:6f:90:44:e7:45:11:
         75:da:ba:40:90:a7:79:19:91:36:ed:f1:1b:cb:06:00:dd:4d:
         10:02:ef:92:90:e4:5a:50:18:fc:8e:ed:07:0a:ce:a7:10:5c:
         d4:8e:08:ca:5a:eb:6d:92:62:5b:53:cc:34:f7:64:ba:a3:cb:
         47:af:35:5a:ae:2a:d3:d3:7a:d9:26:85:f3:f6:27:bc:34:1f:
         78:1e:77:12:15:0a:d7:89:97:f3:49:9a:5c:c8:86:fd:1a:2b:
         39:b7:f0:91:90:5f:56:cf:5d:51:22:6f:67:6e:8e:7a:15:9c:
         71:af:fc:3d:2f:44:92:13:e5:32:0c:1c:f9:70:0a:78:d5:bb:
         48:8c:98:d5:c3:b2:98:91:d5:20:c4:8b:b3:d1:7e:0d:38:5c:
         1a:3d:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:30 2026 by rpki-client