Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa
File:                     n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa (raw, json)
Hash identifier:          UfFTiG8cIxuK4yk1unwjFoEQCnOqxLEmjULdwQNY6gc=
Subject key identifier:   9F:EB:B7:A4:06:ED:0A:9B:A7:F1:27:77:7B:C6:C8:D4:F7:4F:41:B0
Certificate issuer:       /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial:       01A0862E29A1A885878D1FF41648498C125B
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa
Signing time:             Wed 09 Sep 2026 12:39:27 +0000
ASPA not before:          Wed 09 Sep 2026 12:39:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            987
Providers:                AS: 8309
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:86:2e:29:a1:a8:85:87:8d:1f:f4:16:48:49:8c:12:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
        Validity
            Not Before: Sep  9 12:39:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9febb7a406ed0a9ba7f127777bc6c8d4f74f41b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:7e:cc:55:c9:7f:c3:5e:a5:de:d7:31:d8:
                    67:b1:ff:9d:77:fc:9d:c5:d4:2b:2c:ca:cf:ae:f7:
                    a9:ab:55:e3:42:58:bb:d3:90:13:65:b8:35:1a:23:
                    a4:71:d8:63:1d:24:9f:58:60:06:9e:56:09:35:0a:
                    1b:60:ec:74:c3:2f:c9:e1:e1:59:3b:a3:2d:54:d4:
                    f1:a2:b2:28:70:c7:47:d6:a9:29:4c:0d:ed:0f:bd:
                    93:a4:cb:87:f0:df:cf:7b:de:7f:0d:3f:dd:26:bb:
                    ab:3b:c2:4a:fe:d2:25:74:83:8b:4c:a5:cc:30:f4:
                    b2:df:80:c6:50:81:6c:ea:a6:19:37:2a:9f:2e:2b:
                    49:45:fb:66:74:1c:f2:af:18:36:8f:a3:38:15:09:
                    78:f6:50:ab:18:ef:9f:96:1b:59:63:c5:17:36:e0:
                    a0:11:ef:a2:df:29:38:8d:0c:8f:2f:47:01:d7:2a:
                    67:73:65:ee:76:b4:83:2c:2a:bb:03:f0:fa:c2:c7:
                    d0:3c:1b:85:18:ec:77:e8:e2:ea:a6:cf:ef:06:bb:
                    bc:d5:08:83:97:3b:33:c9:b3:25:f2:93:db:b3:60:
                    e3:02:91:bd:51:37:c5:6f:40:bf:38:8c:fe:ff:8a:
                    be:9d:09:04:47:59:2e:cf:aa:83:dd:82:d5:d7:cb:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:B7:A4:06:ED:0A:9B:A7:F1:27:77:7B:C6:C8:D4:F7:4F:41:B0
            X509v3 Authority Key Identifier:
                keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  987

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:e6:5c:8f:15:3c:45:fd:94:a7:28:c2:c9:81:c2:48:1d:
         dd:e2:de:b5:87:ce:1d:27:d8:94:da:df:5d:92:fa:1a:52:b3:
         c0:04:3b:ba:8c:bb:63:e4:4f:85:11:b1:6f:cf:44:38:9c:f4:
         99:f6:92:6d:3c:52:a2:4c:73:2f:5f:a0:3b:01:d9:ee:e4:fa:
         ac:65:45:9a:b6:d4:34:0a:cc:ec:df:fc:26:cb:9e:75:ca:be:
         df:5c:e3:11:83:23:e2:2a:8a:7b:59:c7:79:93:88:67:98:bf:
         5d:f4:29:43:bf:2e:7b:b8:23:99:11:bf:10:d0:2f:37:97:88:
         e3:07:fd:85:0a:22:ef:d9:ec:c1:56:1c:af:ac:dc:b4:45:2c:
         5f:e9:9b:c8:d4:14:4d:c5:77:21:6b:db:58:cd:49:81:d7:ef:
         54:82:33:4b:b5:02:00:bb:90:f3:87:da:82:7c:65:69:96:0d:
         c3:a8:d4:f1:51:fe:71:0e:75:6b:40:60:7f:c3:0a:d9:fa:e7:
         fd:2a:30:42:e1:db:20:af:79:dd:cc:f1:76:02:78:3b:35:a6:
         dc:dd:5b:ca:c7:79:35:65:5d:b4:be:f5:6c:ff:9c:ea:f6:5d:
         ea:dd:a7:7d:6d:8c:d9:f9:d5:4b:3e:ff:84:03:1d:30:6e:6b:
         1b:7c:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:27 2026 by rpki-client