Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/G4aM6x0AG2D6PtCOX1dZ7NbMyy8.asa
File:                     G4aM6x0AG2D6PtCOX1dZ7NbMyy8.asa (raw, json)
Hash identifier:          alUP+9RKB/AQR/aizeOk3F0b/OLNxUq3IcysaUOsi94=
Subject key identifier:   1B:86:8C:EB:1D:00:1B:60:FA:3E:D0:8E:5F:57:59:EC:D6:CC:CB:2F
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       019DBBD62418B969AFE2F7276B1076617C46
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/G4aM6x0AG2D6PtCOX1dZ7NbMyy8.asa
Signing time:             Thu 23 Apr 2026 19:34:26 +0000
ASPA not before:          Thu 23 Apr 2026 19:34:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200819
Providers:                AS: 917
                          AS: 20473
                          AS: 21700
                          AS: 34872
                          AS: 47272
                          AS: 52025
                          AS: 53667
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 04:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:bb:d6:24:18:b9:69:af:e2:f7:27:6b:10:76:61:7c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Apr 23 19:34:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b868ceb1d001b60fa3ed08e5f5759ecd6cccb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:8c:0b:be:41:92:12:af:2d:39:61:84:3f:
                    18:15:83:94:1a:7a:92:5f:7b:ee:2d:1e:b8:70:da:
                    30:48:cb:9c:73:46:6b:b6:6a:ce:8c:16:de:dc:9f:
                    2c:a6:c5:a5:94:d4:69:53:13:ff:77:53:bc:67:36:
                    c3:7c:11:ba:cc:16:cd:7d:05:e5:90:b5:1f:c5:e4:
                    83:28:dc:7c:f3:74:2e:02:77:49:a0:5c:8e:98:56:
                    37:3c:ba:33:c3:db:ee:27:c1:d7:b7:99:59:56:8d:
                    6b:7a:26:cc:91:48:7e:1a:6b:a4:a8:72:cf:cb:84:
                    98:14:18:a3:40:18:80:ea:0f:1d:e8:d6:06:7d:e1:
                    0d:7c:ab:72:02:13:c3:56:4e:06:31:e2:65:f9:0e:
                    bc:33:03:7f:d0:9a:18:f4:be:5b:2d:81:b3:d9:4c:
                    46:2a:1c:69:cb:f6:8c:35:77:ae:d9:2a:2a:a6:d1:
                    02:5a:b1:3f:ff:f6:73:d6:82:6b:9a:b7:98:81:d0:
                    a3:f8:4b:93:2b:92:f6:6c:4f:fa:73:bf:10:2e:0b:
                    ab:c0:13:ca:17:ae:83:89:bd:18:3d:a5:5e:4c:a1:
                    d6:8b:9c:e7:24:67:a5:3f:7e:c6:2c:23:ae:c2:4b:
                    c0:4d:1d:da:98:48:58:a6:64:01:6e:d4:50:63:60:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:8C:EB:1D:00:1B:60:FA:3E:D0:8E:5F:57:59:EC:D6:CC:CB:2F
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/G4aM6x0AG2D6PtCOX1dZ7NbMyy8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200819

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:76:ac:6d:7f:ec:77:ba:9e:e6:67:31:c9:c1:d3:48:93:
         24:c4:ab:37:e1:28:c3:33:81:c4:ce:1c:6e:55:f4:e2:6e:cc:
         e0:f3:76:01:5c:6a:eb:12:57:36:a8:9a:d7:c3:16:f0:b6:53:
         e9:50:09:af:63:7e:19:99:75:98:e6:61:98:1c:f5:c3:a5:04:
         ee:02:1a:1c:59:96:7a:bd:26:7f:9b:87:4d:27:5b:71:a1:24:
         76:2f:86:ad:25:bc:60:96:bd:4d:ad:45:71:1e:02:29:50:b5:
         20:2f:e4:24:f5:1e:71:82:d2:e9:9d:45:1e:b5:53:fc:a4:61:
         0f:96:67:95:c0:8b:db:26:db:a2:aa:f3:76:c6:e6:45:d2:fd:
         31:6f:53:17:de:18:40:d9:28:cd:6b:0d:7c:c6:96:66:b9:5e:
         4f:1d:65:ff:b1:41:27:e7:80:c9:fb:dc:1f:63:8d:ea:40:20:
         7f:d9:28:bf:72:2f:49:47:bd:d7:04:eb:a0:2e:9e:50:fb:e6:
         04:3c:b6:9b:b4:c7:8d:9f:63:69:27:fb:90:7e:51:6f:2a:57:
         a2:4b:e0:ac:e7:af:90:ac:4d:40:c3:51:6f:4f:96:1f:13:ae:
         9f:e4:4d:72:64:01:12:94:d9:61:71:f2:bb:84:35:5c:ef:2c:
         c0:4e:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:40 2026 by rpki-client