Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/EwUUc2dE6q5b6syyezzDk_bQ_Q0.asa
File:                     EwUUc2dE6q5b6syyezzDk_bQ_Q0.asa (raw, json)
Hash identifier:          6XduT1B3a9XuB4cQHe5NZFspu4pd0HZYEHNdzQP96Os=
Subject key identifier:   13:05:14:73:67:44:EA:AE:5B:EA:CC:B2:7B:3C:C3:93:F6:D0:FD:0D
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       019C8CC3C7E42831830B19A9400D2433F742
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/EwUUc2dE6q5b6syyezzDk_bQ_Q0.asa
Signing time:             Mon 23 Feb 2026 23:09:26 +0000
ASPA not before:          Mon 23 Feb 2026 23:09:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200819
Providers:                AS: 34927
                          AS: 52025
                          AS: 199829
                          AS: 207841
                          AS: 209735
                          AS: 212271
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:8c:c3:c7:e4:28:31:83:0b:19:a9:40:0d:24:33:f7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Feb 23 23:09:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=130514736744eaae5beaccb27b3cc393f6d0fd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:f7:5b:3f:f5:6f:5d:28:ae:a4:71:30:f9:
                    31:46:30:4e:6b:1c:e2:65:e9:9b:7b:26:d0:21:3f:
                    76:85:1b:41:35:cc:bf:b6:3b:5c:01:0e:f7:04:2c:
                    c7:9a:cb:62:eb:0b:17:c7:7d:29:68:d5:65:75:8b:
                    bd:89:df:7f:15:31:57:3d:1a:5e:17:af:3e:f8:e4:
                    4d:17:47:28:03:1d:e0:a7:7e:a4:68:21:23:c1:a2:
                    19:8e:d3:74:9b:e2:62:a4:b8:29:83:38:70:dd:33:
                    df:53:72:17:5a:f5:ed:f0:2f:d9:8d:62:a8:00:20:
                    82:54:bd:58:26:ec:2c:ec:0b:53:04:a8:90:67:1e:
                    19:5d:1d:68:00:f8:16:f4:98:6c:97:61:80:80:e3:
                    a5:2e:5b:15:ad:b1:2d:6a:3c:a3:8f:df:c9:8c:b6:
                    10:8a:a1:11:04:c6:d3:38:58:57:3f:67:70:31:79:
                    2e:01:68:2b:b6:0e:9e:f4:6b:5a:69:a3:9b:73:d4:
                    8a:e0:cb:06:e9:b3:4c:75:62:07:e7:ed:9a:40:8e:
                    c8:e3:25:5e:3c:ad:f1:06:c9:5b:a7:f2:f3:b1:91:
                    01:d0:66:c5:5c:20:de:f9:02:d9:c7:38:9a:eb:c4:
                    82:45:7b:1b:a7:8a:8d:6f:19:d2:87:02:05:73:f4:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:05:14:73:67:44:EA:AE:5B:EA:CC:B2:7B:3C:C3:93:F6:D0:FD:0D
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/EwUUc2dE6q5b6syyezzDk_bQ_Q0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200819

    Signature Algorithm: sha256WithRSAEncryption
         40:f2:38:40:12:0a:ec:d6:29:c9:5d:13:23:e6:f3:95:ac:47:
         04:ff:ad:cb:e7:54:32:94:7d:0f:7c:b1:e1:22:59:d7:48:f6:
         dc:6d:9c:ab:97:a0:29:4e:d3:26:fc:e0:93:a1:f7:74:84:13:
         f9:36:e0:a8:a2:4a:d5:e8:c0:3e:1c:0d:8b:4a:d2:a3:ea:70:
         6a:5e:e3:63:a8:2c:2b:aa:c1:7c:9e:3e:48:8a:43:7f:ed:d4:
         36:ac:3c:6f:1e:e0:e3:12:2c:bd:b0:01:e0:c6:d0:bc:ad:14:
         04:3d:24:fb:83:61:f5:4c:a1:bb:be:d7:59:7a:3b:90:53:47:
         0f:8b:dc:30:60:1a:65:f8:89:b0:73:e1:a9:bd:04:33:61:7d:
         ab:27:29:19:d7:b5:1c:91:b9:f7:38:ea:ba:26:a9:bc:a6:8c:
         63:c8:81:68:5d:87:a0:55:3d:99:2e:69:d4:ac:2c:5c:2a:46:
         cd:01:4d:8e:6e:ac:cc:fe:1b:29:5d:57:2b:fe:1c:01:51:5a:
         b8:dd:c2:31:a5:15:a8:28:dc:d1:e6:39:76:ec:a4:ca:47:d9:
         a4:52:eb:c8:56:21:8d:d7:29:48:53:f7:6e:fd:02:e7:f4:77:
         d0:30:5f:28:d0:fa:99:78:76:da:b0:3c:d4:8a:ff:77:fc:1a:
         36:61:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:16:14 2026 by rpki-client