Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/2MkkGiaWngpj3U_s10szg-C2G3E.asa
File:                     2MkkGiaWngpj3U_s10szg-C2G3E.asa (raw, json)
Hash identifier:          tRTEi9Wv285mhFd9p2e1WBPXHzXR6/hZi7ygRmANF/A=
Subject key identifier:   D8:C9:24:1A:26:96:9E:0A:63:DD:4F:EC:D7:4B:33:83:E0:B6:1B:71
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       01A0EA532C117306088639AF7F36F8D3CC28
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/2MkkGiaWngpj3U_s10szg-C2G3E.asa
Signing time:             Mon 28 Sep 2026 23:21:54 +0000
ASPA not before:          Mon 28 Sep 2026 23:21:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200819
Providers:                AS: 21700
                          AS: 47272
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:53:2c:11:73:06:08:86:39:af:7f:36:f8:d3:cc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Sep 28 23:21:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d8c9241a26969e0a63dd4fecd74b3383e0b61b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:be:7c:ba:17:d0:99:a7:bd:72:e0:ab:e6:5d:
                    43:47:fb:2b:de:2d:6a:8b:75:1f:3c:3c:ae:a0:49:
                    27:2b:77:07:66:29:1d:ef:e2:03:86:84:09:54:73:
                    b7:bd:74:71:03:11:b4:5b:6b:33:c3:d2:7e:a7:fc:
                    51:ff:ba:33:10:fc:62:89:02:0c:02:91:39:51:92:
                    8d:5d:d9:c8:f7:db:79:cf:f0:8a:d9:08:a4:d5:69:
                    d1:03:c5:93:f2:79:e2:42:0b:77:d4:83:2f:d2:57:
                    4f:f7:e4:30:82:bf:1d:78:c0:6b:88:2b:42:1c:a6:
                    55:36:7a:2c:2c:50:73:1e:c8:aa:88:48:1e:b6:2c:
                    dc:97:6b:0a:b8:93:88:4f:cd:0d:fd:1a:7d:0d:26:
                    e7:22:f6:ef:c1:ee:da:a1:f4:29:8b:09:51:a0:02:
                    0e:2b:d2:06:5d:c3:35:63:f3:c6:2e:5d:fc:6b:95:
                    a3:9b:81:19:61:65:c2:cd:2c:02:fc:f4:20:e5:02:
                    08:75:a5:89:d7:f4:b4:24:38:45:f5:3d:8f:4d:50:
                    46:51:aa:fe:0f:ea:5a:14:0d:93:29:37:f7:c3:42:
                    5d:47:28:1a:49:bb:88:16:ad:fc:80:48:b5:27:ee:
                    74:42:6c:dc:1a:34:af:ac:ec:51:52:3b:d5:a1:39:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C9:24:1A:26:96:9E:0A:63:DD:4F:EC:D7:4B:33:83:E0:B6:1B:71
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/2MkkGiaWngpj3U_s10szg-C2G3E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200819

    Signature Algorithm: sha256WithRSAEncryption
         b7:a7:cd:b9:32:13:43:60:7b:da:1d:45:58:ab:da:96:52:0c:
         42:6b:c5:51:75:eb:7e:9a:c8:bf:ea:b0:a6:eb:d0:dc:1e:15:
         1a:71:51:cf:f8:62:94:9c:46:07:c7:9a:df:4b:1b:f8:a9:e5:
         14:ba:1b:68:5d:a1:c5:62:aa:70:46:9e:83:42:fb:ff:54:48:
         8e:92:34:1b:db:a7:6b:72:c5:1b:19:44:96:29:87:0d:f1:71:
         51:fa:04:95:30:24:ec:a1:de:81:cb:24:16:9d:a2:91:9a:dc:
         54:5a:62:03:21:73:05:1c:60:c1:87:d1:2e:39:47:43:ff:1a:
         6e:93:7d:4b:a7:3a:64:61:60:e3:a1:20:09:1a:25:30:1b:13:
         5b:1d:ec:04:69:8d:aa:4c:18:f7:46:ce:a9:c6:a7:e2:41:cb:
         9d:62:39:69:7c:ac:65:c3:1d:e3:83:ac:ba:99:1b:70:62:49:
         13:ca:40:98:f9:c3:07:67:4b:8d:67:bd:6c:3d:2c:40:51:a1:
         ab:10:a0:b6:b2:06:99:5e:f7:60:b1:0a:e9:4e:1f:7c:52:1f:
         f6:67:a4:fc:3a:a3:0b:c3:e7:1d:03:3f:78:89:a2:26:d8:94:
         e1:90:00:01:37:e8:31:be:7f:9c:cc:9c:5f:e4:1a:e8:21:68:
         11:dc:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:21:46 2026 by rpki-client