Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/BcvpOe8BqaxAkKRhXqgmCjilVHk.asa
File:                     BcvpOe8BqaxAkKRhXqgmCjilVHk.asa (raw, json)
Hash identifier:          P09d9IvVlQatls/eTEL8WEE93Ko3NhFUQO68jnE/PyQ=
Subject key identifier:   05:CB:E9:39:EF:01:A9:AC:40:90:A4:61:5E:A8:26:0A:38:A5:54:79
Certificate issuer:       /CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
Certificate serial:       01A06E5EC7709FE4EBC07E723C93BC69F334
Authority key identifier: 51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/BcvpOe8BqaxAkKRhXqgmCjilVHk.asa
Signing time:             Fri 04 Sep 2026 21:41:40 +0000
ASPA not before:          Fri 04 Sep 2026 21:41:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200010
Providers:                AS: 174
                          AS: 4849
                          AS: 5405
                          AS: 6823
                          AS: 9121
                          AS: 34565
                          AS: 44901
                          AS: 59796
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:5e:c7:70:9f:e4:eb:c0:7e:72:3c:93:bc:69:f3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
        Validity
            Not Before: Sep  4 21:41:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=05cbe939ef01a9ac4090a4615ea8260a38a55479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:77:92:98:00:53:91:18:9d:bb:40:e3:6b:
                    5b:50:c5:71:55:15:4b:40:d4:f7:ec:c4:86:1f:99:
                    df:3d:5d:65:81:34:c7:ff:12:00:f3:44:d6:ef:40:
                    c2:6f:96:27:d6:68:87:e2:ec:11:ce:67:64:fd:67:
                    50:7d:3f:c9:b4:95:ff:3c:48:f0:6b:d8:85:20:cc:
                    91:52:10:03:41:b4:d5:a0:01:3f:1f:2f:a5:1a:1f:
                    43:7a:0f:ec:fe:a3:83:7a:4e:b6:78:92:f6:3b:4f:
                    1c:eb:95:a4:6e:a4:70:d0:ff:35:77:8d:f8:22:d9:
                    ab:b7:60:08:bb:27:56:8a:cd:45:8d:cf:6e:10:a0:
                    bb:70:41:a5:04:a6:59:d2:94:6a:fe:2f:b4:40:ba:
                    de:57:94:a9:e2:64:bc:4a:83:1f:49:7a:a0:4e:9a:
                    00:cb:8d:06:8d:f2:26:95:24:ef:38:26:ea:84:8d:
                    63:a1:4c:d3:17:25:91:86:b9:09:65:44:0a:83:0b:
                    bf:bb:c4:5c:bd:f3:21:94:9b:cc:e8:f5:02:7b:b4:
                    a1:f8:c7:91:13:6d:f3:30:f9:ae:fb:9b:34:5e:83:
                    24:ae:6a:d7:ef:c4:79:7a:d3:be:49:cb:ca:d8:43:
                    ad:cf:8d:5a:95:31:98:ec:33:ed:0a:6e:96:69:e2:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:E9:39:EF:01:A9:AC:40:90:A4:61:5E:A8:26:0A:38:A5:54:79
            X509v3 Authority Key Identifier:
                keyid:51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/BcvpOe8BqaxAkKRhXqgmCjilVHk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200010

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:c0:92:8c:29:b5:3a:be:03:7c:ec:da:9a:a9:d7:b7:8d:
         bd:69:b4:8c:44:36:3c:52:8a:43:b7:0b:5f:80:43:ab:66:5a:
         d5:7a:42:0a:38:3d:61:6d:05:6e:8b:4d:9c:59:5a:4e:28:76:
         78:a6:bc:fd:ac:44:d0:e6:01:63:27:b0:ca:0d:94:32:1c:4c:
         a8:6b:4f:e7:3b:57:c2:7b:ce:8d:d5:08:30:24:f6:f9:0b:18:
         aa:c2:fd:54:5a:ff:42:61:c5:7a:ff:7e:46:be:ed:a2:d9:86:
         45:5a:5a:ec:5c:ff:c7:31:3a:20:08:06:bc:64:24:84:c4:6c:
         dc:27:3b:07:a2:97:db:a4:8b:8e:b0:5c:95:9d:50:24:00:44:
         d4:e3:c5:a4:a9:dc:72:a6:07:7d:27:d3:75:c0:5b:da:49:cf:
         75:89:bd:c6:24:d6:99:9d:68:22:dc:d6:5b:c7:63:f2:e8:e6:
         15:b4:57:85:fe:38:de:03:3a:b5:87:2d:aa:be:a2:53:54:0b:
         93:e2:49:1f:a8:b4:5c:75:48:d7:20:4e:82:3d:fd:34:37:8b:
         f5:1c:9c:a6:13:05:77:22:aa:04:2f:08:95:d4:bf:8b:86:c7:
         da:fc:ca:32:16:ba:4f:e0:13:18:e6:8a:f8:e7:93:1b:ad:26:
         2a:19:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:14 2026 by rpki-client