Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/GkzZaU9MgVD-nMdbajbpL-Lxeic.asa
File:                     GkzZaU9MgVD-nMdbajbpL-Lxeic.asa (raw, json)
Hash identifier:          a29ZY6jDI+dNv380NXhhKvjL2Q9sgN1KzPSWh3x0GTw=
Subject key identifier:   1A:4C:D9:69:4F:4C:81:50:FE:9C:C7:5B:6A:36:E9:2F:E2:F1:7A:27
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       019FF4C4445866A10E4E22FB1EEA89F44EEC
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/GkzZaU9MgVD-nMdbajbpL-Lxeic.asa
Signing time:             Wed 12 Aug 2026 06:58:50 +0000
ASPA not before:          Wed 12 Aug 2026 06:58:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200019
Providers:                AS: 174
                          AS: 1299
                          AS: 5405
                          AS: 6204
                          AS: 6939
                          AS: 8926
                          AS: 9002
                          AS: 25454
                          AS: 34927
                          AS: 44901
                          AS: 49434
                          AS: 53340
                          AS: 58453
                          AS: 206170
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f4:c4:44:58:66:a1:0e:4e:22:fb:1e:ea:89:f4:4e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Aug 12 06:58:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a4cd9694f4c8150fe9cc75b6a36e92fe2f17a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:2c:1e:1a:ee:14:a4:29:11:97:66:2e:0f:
                    d1:53:f7:3f:40:4b:d0:03:ea:62:e4:54:f1:74:3b:
                    2d:8c:64:e4:d9:28:e1:4e:7a:10:54:8f:32:dc:00:
                    f0:c4:a2:7a:7e:87:ae:98:49:31:01:31:d1:03:7a:
                    8c:dc:e9:4d:5c:a2:65:1d:4e:d4:5a:48:78:56:3c:
                    2b:a7:b4:e2:c6:41:c3:3e:d6:ee:4c:e3:9a:fd:d5:
                    79:5d:ff:55:fe:26:9d:77:0c:87:61:13:b6:60:ff:
                    fe:e8:b1:86:c3:6d:38:c4:22:2c:94:51:9f:b2:43:
                    4b:38:da:16:be:8a:87:8f:57:35:a6:07:39:71:92:
                    27:2e:57:03:43:ad:3c:f0:4c:df:92:ca:70:6f:5d:
                    4c:21:67:82:93:b9:80:97:e5:6c:d1:02:4e:5a:ed:
                    12:06:61:49:34:19:65:55:3d:ac:b4:e5:d7:99:f6:
                    a9:cb:45:62:86:3f:bf:1c:d7:b7:6b:47:74:40:a1:
                    d6:66:b8:fe:21:bf:84:c1:5f:a7:00:c1:3f:58:57:
                    66:ee:c3:c6:a2:46:56:23:24:fa:f0:82:c0:75:5b:
                    45:29:49:01:3d:24:04:84:72:03:41:b7:4c:18:00:
                    46:c4:71:6a:8e:5b:2d:1b:2f:a6:a3:e4:05:58:0a:
                    00:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4C:D9:69:4F:4C:81:50:FE:9C:C7:5B:6A:36:E9:2F:E2:F1:7A:27
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/GkzZaU9MgVD-nMdbajbpL-Lxeic.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200019

    Signature Algorithm: sha256WithRSAEncryption
         1e:9b:05:f0:4b:ac:d0:a5:a0:d0:6e:4c:a5:f2:90:cc:c7:3d:
         75:47:5b:eb:54:86:fc:ea:aa:bd:af:0a:36:89:24:f2:a8:15:
         61:54:0e:53:70:3b:37:f3:f3:eb:ea:f6:3c:22:9c:ac:6e:17:
         a6:1a:f4:f6:ed:30:2a:94:d1:0d:3b:a2:c8:2f:27:61:66:36:
         fa:8a:8d:04:c0:0f:70:3c:9b:b6:f0:f4:26:78:ab:7b:40:cd:
         4c:d0:75:8d:2b:ac:5c:84:23:86:4f:c6:e4:74:fe:cd:cf:fd:
         64:0d:89:ae:e4:df:a3:d1:b9:2d:83:5d:4d:e6:aa:c0:da:f8:
         86:29:dc:18:1b:4e:77:2f:7b:8b:aa:29:24:10:b9:c0:66:9f:
         9c:de:7d:bd:1c:45:0d:38:db:11:b0:6a:8c:1c:4c:4c:62:5c:
         bc:b6:6d:d0:e1:d2:74:c3:cc:bd:3e:4f:6d:21:bb:aa:06:7a:
         ca:ee:08:02:6f:7e:c2:d9:fd:64:da:27:45:4f:da:dd:0e:c4:
         e2:a9:31:6c:3a:84:6d:3c:43:09:80:38:e7:71:87:30:a9:bc:
         2d:5c:4b:d1:a8:f5:2a:6f:df:c6:aa:71:df:61:9a:78:fc:10:
         ca:cf:63:63:d3:08:3f:70:1e:72:93:3d:d9:8a:96:22:11:37:
         6c:b2:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:37 2026 by rpki-client