Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/gXBH-XlgpLuYkohpzvO2FkMoumY.asa
File:                     gXBH-XlgpLuYkohpzvO2FkMoumY.asa (raw, json)
Hash identifier:          DtMcO3PNIaPFH8mu6H1UmOdsSLwdFJaoWNKN2NFa8cw=
Subject key identifier:   81:70:47:F9:79:60:A4:BB:98:92:88:69:CE:F3:B6:16:43:28:BA:66
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       01A0087DF60457EFD741FDF2DA87849B3E74
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/gXBH-XlgpLuYkohpzvO2FkMoumY.asa
Signing time:             Sun 16 Aug 2026 02:54:27 +0000
ASPA not before:          Sun 16 Aug 2026 02:54:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208563
Providers:                AS: 6939
                          AS: 31142
                          AS: 34549
                          AS: 34854
                          AS: 34927
                          AS: 41051
                          AS: 47498
                          AS: 58299
                          AS: 61190
                          AS: 202409
                          AS: 207960
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Aug 2026 17:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:08:7d:f6:04:57:ef:d7:41:fd:f2:da:87:84:9b:3e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Aug 16 02:54:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=817047f97960a4bb98928869cef3b6164328ba66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:83:62:3d:25:6b:aa:63:9e:a8:bf:6b:77:
                    79:78:a1:b6:37:27:56:bb:b2:4c:88:bd:06:4f:5b:
                    ec:3f:b0:37:02:49:37:9b:47:c0:43:66:7c:f4:77:
                    5b:65:eb:fc:32:92:be:de:cc:96:b0:d0:86:77:ea:
                    c5:6b:65:68:62:cb:51:f0:e2:aa:1b:a8:c3:fc:6a:
                    58:e1:0c:45:30:b9:64:f2:1b:66:37:4e:3f:93:de:
                    55:c1:44:e0:82:ae:88:5a:25:ce:f9:72:37:82:9e:
                    23:06:69:e7:9e:c4:69:97:60:97:c1:43:cd:05:56:
                    7c:fa:ff:51:5a:d0:4a:88:34:9c:4c:29:c3:e8:0d:
                    c8:48:d9:80:90:c4:f0:27:34:5f:5f:fb:89:0a:59:
                    37:e0:75:93:08:4e:77:33:42:7e:9a:0b:ab:93:ca:
                    9c:e3:9d:dd:f9:f1:6c:bf:d5:6f:ba:a9:20:d9:a4:
                    b6:4c:69:b4:52:11:49:37:4a:c4:0f:49:c0:8e:28:
                    8c:9f:6e:e5:81:f4:2c:29:83:5f:d6:0d:d6:1a:85:
                    60:02:1d:41:e2:e5:81:5a:f3:37:06:f9:6e:36:6f:
                    1c:5e:70:fe:d4:f6:56:c8:7b:fe:3f:db:c2:d6:01:
                    44:b6:bc:37:d5:e0:b2:c3:b5:cf:1f:79:5e:5b:2b:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:70:47:F9:79:60:A4:BB:98:92:88:69:CE:F3:B6:16:43:28:BA:66
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/gXBH-XlgpLuYkohpzvO2FkMoumY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208563

    Signature Algorithm: sha256WithRSAEncryption
         ac:e6:84:a3:aa:ae:d7:2c:74:d9:10:1f:e2:cd:59:29:4f:ad:
         c2:0a:67:f1:9d:d2:e5:e2:7c:e1:27:c1:41:a3:41:18:0e:24:
         73:e2:e5:42:05:72:e6:bd:eb:4f:5d:1c:3b:41:09:c7:6c:1f:
         51:69:65:40:79:00:03:ea:e1:4a:c9:08:b9:30:f9:60:af:38:
         f4:ae:6d:1c:40:f4:17:4e:40:b8:8b:9b:75:da:61:f2:08:bb:
         67:f6:ba:51:db:db:09:57:11:e5:1a:d8:97:03:e4:c0:b3:f7:
         b3:29:b3:b5:b5:4b:1a:5f:bb:49:2d:b5:81:26:2f:96:35:e8:
         89:1a:41:86:af:74:2d:af:b7:d4:23:c6:41:6c:73:ad:10:d7:
         23:ff:e6:6e:6d:cd:4e:72:0d:34:c6:d1:32:29:28:8f:62:a0:
         db:0c:4b:25:5d:ad:3e:24:03:ec:ca:8d:3a:42:4d:f0:ce:1a:
         5f:22:9c:3e:83:c1:5c:65:df:8a:d3:94:06:e5:84:29:12:89:
         4b:37:10:ae:84:a4:97:36:ee:70:a8:91:0d:40:be:dc:57:8f:
         b8:27:e0:7f:81:99:af:c6:8c:20:4b:e4:41:48:52:bc:5f:4a:
         22:f4:ac:8e:5d:a6:05:8f:4e:f7:c5:7f:90:00:ed:7b:d7:8e:
         15:36:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:53:23 2026 by rpki-client