Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/nxOlTeeVwbJvP0L8gxUuYbskG8I.asa
File:                     nxOlTeeVwbJvP0L8gxUuYbskG8I.asa (raw, json)
Hash identifier:          MikecboX8HHDFogf33eR5geZ8eAmOY2OzEKHUF/uBE0=
Subject key identifier:   9F:13:A5:4D:E7:95:C1:B2:6F:3F:42:FC:83:15:2E:61:BB:24:1B:C2
Certificate issuer:       /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial:       019C8A1AA1AF39946C8FA6863E335C907343
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/nxOlTeeVwbJvP0L8gxUuYbskG8I.asa
Signing time:             Mon 23 Feb 2026 10:45:27 +0000
ASPA not before:          Mon 23 Feb 2026 10:45:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47627
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8a:1a:a1:af:39:94:6c:8f:a6:86:3e:33:5c:90:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
        Validity
            Not Before: Feb 23 10:45:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f13a54de795c1b26f3f42fc83152e61bb241bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:a3:be:02:e8:a3:cd:4d:97:69:29:be:f4:
                    37:14:bc:47:22:ca:d9:f8:f4:92:ad:57:ca:77:08:
                    fd:a6:87:49:c9:ae:d8:6a:f8:2b:19:cd:55:c0:f3:
                    d5:da:98:8f:25:d8:c2:45:cf:26:5c:02:50:fc:df:
                    48:96:b7:78:51:04:32:cb:b3:b6:b6:56:b0:f4:ce:
                    88:3f:68:20:2e:ce:c0:3f:a9:80:69:0b:e4:d1:06:
                    92:29:09:01:81:06:59:b9:e3:b0:70:fa:96:e3:c1:
                    02:ec:29:4c:67:83:a7:01:fb:fc:d8:b8:e2:e5:e4:
                    ed:32:ee:a3:89:86:81:1c:c1:ba:e8:90:e5:fb:2e:
                    a5:c7:c2:4d:56:44:18:ec:ac:05:f6:86:0b:71:56:
                    8f:f5:40:be:7a:a9:4b:cc:59:f7:fb:af:76:e3:c1:
                    04:a1:60:b5:39:8b:04:c9:0f:ac:a4:1d:4b:25:1b:
                    bd:88:5a:a3:58:ce:04:2d:2a:c5:5d:20:70:6e:00:
                    7b:41:1c:3f:b0:c3:03:36:4a:bb:cc:90:5e:77:01:
                    60:7e:98:7b:98:14:f7:ef:cc:a0:7f:30:14:88:7f:
                    68:ae:b9:10:f7:c5:14:7a:f0:78:b5:40:5f:52:a2:
                    48:fb:fa:17:48:3e:10:e7:a8:0e:8a:f5:09:23:30:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:13:A5:4D:E7:95:C1:B2:6F:3F:42:FC:83:15:2E:61:BB:24:1B:C2
            X509v3 Authority Key Identifier:
                keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/nxOlTeeVwbJvP0L8gxUuYbskG8I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47627

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:22:39:98:9c:c9:50:c6:87:d0:30:df:43:37:e6:4f:8d:
         bd:c0:91:dd:78:f4:ea:a6:9b:bc:f7:86:27:3c:a3:81:92:cc:
         ae:58:6c:b6:42:4d:1a:14:1a:cb:5a:41:20:40:2a:b5:cb:67:
         26:98:76:6d:ea:1c:a0:69:76:07:8a:f6:79:f3:b0:04:b5:fb:
         83:dc:f5:76:c3:94:09:b2:b3:5c:8d:7a:64:70:6b:8d:67:85:
         19:aa:32:a3:d4:5a:ea:60:9e:96:29:05:e6:62:7d:b6:9a:a2:
         0b:2e:62:93:d8:d8:f8:6b:24:7d:0a:05:d8:6e:7e:0b:aa:63:
         9a:39:e0:54:87:f8:21:db:a6:ed:04:6d:bf:37:f7:be:d6:bf:
         48:1d:d5:72:6e:0c:f2:b0:a2:b5:8c:d1:11:34:f6:5e:51:7f:
         6d:63:75:0c:4f:b2:f1:b3:0f:36:76:4a:f3:c7:5c:92:a6:b2:
         46:93:18:39:1e:e2:4a:c0:c0:e8:af:cf:08:9b:1c:19:21:43:
         8e:9e:0a:2a:87:bc:17:3b:d9:50:9e:21:60:81:48:1f:26:6c:
         0d:ed:12:19:c2:1f:09:3e:5f:ff:6c:2a:fd:59:bc:0a:f2:68:
         7d:45:f6:5b:24:05:19:8e:e5:34:ac:aa:9f:ee:65:c3:fe:fe:
         f3:d4:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:15:08 2026 by rpki-client