Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/NcFL0BjRNyW3WL18C8pcwUnZW_U.asa
File:                     NcFL0BjRNyW3WL18C8pcwUnZW_U.asa (raw, json)
Hash identifier:          04PkKKLtBtREOO6AAXNlEnZZIRrfOjn2kvSazl4zgBQ=
Subject key identifier:   35:C1:4B:D0:18:D1:37:25:B7:58:BD:7C:0B:CA:5C:C1:49:D9:5B:F5
Certificate issuer:       /CN=4561de6ca69dc215000cb9a67c655c6484fb570a
Certificate serial:       019EB73FCAF433594F6F03A277BD235A680E
Authority key identifier: 45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/NcFL0BjRNyW3WL18C8pcwUnZW_U.asa
Signing time:             Thu 11 Jun 2026 15:14:31 +0000
ASPA not before:          Thu 11 Jun 2026 15:14:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219455
Providers:                AS: 201132
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:3f:ca:f4:33:59:4f:6f:03:a2:77:bd:23:5a:68:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4561de6ca69dc215000cb9a67c655c6484fb570a
        Validity
            Not Before: Jun 11 15:14:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35c14bd018d13725b758bd7c0bca5cc149d95bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:7d:03:db:f9:93:1c:96:51:bb:f8:27:33:
                    1d:de:dc:4d:b7:14:86:bb:31:20:c6:5c:ce:6a:de:
                    6e:3c:d2:d7:32:d9:83:d6:d7:01:e5:71:86:aa:72:
                    a0:c7:46:cf:4e:0c:08:8e:2e:40:e6:f6:d9:4e:9d:
                    e3:d6:9b:eb:18:3d:46:0d:93:43:f4:6f:65:0b:e6:
                    20:2b:5b:ed:b4:30:5a:77:58:a8:7c:9f:cf:ba:37:
                    93:ca:63:a7:16:ac:35:b2:19:aa:41:81:e2:0a:eb:
                    2e:81:af:9a:ce:c8:ec:ef:20:7c:20:5d:bf:9c:6d:
                    97:8d:af:40:be:c3:64:eb:76:87:99:d3:5e:d0:3b:
                    03:26:e7:b5:1e:a0:c3:3f:cf:64:ad:34:3a:dd:da:
                    19:b9:ba:f4:51:a9:20:e3:79:1a:bf:e4:f8:1f:e5:
                    95:e1:0c:42:22:ae:21:2d:c7:64:d3:e1:f7:28:1f:
                    05:33:62:0a:1f:76:80:1a:d8:94:e0:75:75:26:c4:
                    cd:7e:ba:64:c0:f3:b2:38:25:f5:2e:8e:5d:62:51:
                    59:94:cf:9b:3d:62:5e:ba:ab:d9:ab:29:b0:96:ec:
                    c7:d8:f1:81:bb:25:d4:b5:10:3c:75:3f:90:be:c0:
                    97:53:d3:a8:fb:0e:07:a6:d7:ea:f1:6d:6e:44:2a:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C1:4B:D0:18:D1:37:25:B7:58:BD:7C:0B:CA:5C:C1:49:D9:5B:F5
            X509v3 Authority Key Identifier:
                keyid:45:61:DE:6C:A6:9D:C2:15:00:0C:B9:A6:7C:65:5C:64:84:FB:57:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWHebKadwhUADLmmfGVcZIT7Vwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/NcFL0BjRNyW3WL18C8pcwUnZW_U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/aecef5-5411-4c9f-9b0f-7caa04c3744f/1/RWHebKadwhUADLmmfGVcZIT7Vwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219455

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:d0:9f:69:62:d5:9f:0e:92:2a:be:2d:f1:79:fc:90:53:
         e6:dd:39:20:e0:cb:fa:6e:ac:fe:7a:65:61:45:5f:39:78:16:
         b9:7b:6c:06:7e:51:3b:0c:bf:84:8d:77:fe:79:4e:c0:76:a7:
         ac:87:9a:b9:c9:a9:0e:89:a0:48:e8:1f:6b:a7:f3:91:29:b2:
         9c:b3:b9:75:ff:71:f6:91:13:56:8c:a0:44:a0:32:03:8e:da:
         84:3a:a1:05:74:f1:7c:07:a8:7c:fd:17:87:16:88:3c:9d:81:
         b0:0a:6f:1e:dc:0d:4d:3d:76:2b:29:92:da:28:35:71:8e:9b:
         8e:43:53:f8:c6:fc:0e:39:97:13:e7:9e:6e:54:2c:68:fd:a3:
         7e:f2:17:8a:1f:76:dd:76:b8:60:b1:61:43:bc:4d:84:14:13:
         f0:51:8a:8e:fb:29:a1:ed:88:e5:6d:b9:b6:e1:49:a9:5f:75:
         74:12:3a:22:a9:f7:b7:d3:55:1a:eb:35:3a:d1:f0:81:1b:b6:
         3d:66:54:05:14:51:c3:6d:dd:8c:fd:0a:ff:1d:7a:fd:09:ab:
         b2:68:57:da:c7:16:70:9e:b2:36:38:a7:91:49:f0:e8:b4:7d:
         a6:87:3a:21:c9:b6:d5:85:66:f6:0b:7f:52:b3:c0:f4:bc:99:
         2a:39:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:39 2026 by rpki-client