Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/gBi5xtmED4TG3jUX37mYjraoscw.asa
File:                     gBi5xtmED4TG3jUX37mYjraoscw.asa (raw, json)
Hash identifier:          apBbLvMbeJiiPpO51fdXIrt4IofHYn/vGC5rF3XziIo=
Subject key identifier:   80:18:B9:C6:D9:84:0F:84:C6:DE:35:17:DF:B9:98:8E:B6:A8:B1:CC
Certificate issuer:       /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial:       019FD6CFDB6967DAA04D28615C0839FB5B4F
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/gBi5xtmED4TG3jUX37mYjraoscw.asa
Signing time:             Thu 06 Aug 2026 11:22:54 +0000
ASPA not before:          Thu 06 Aug 2026 11:22:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208471
Providers:                AS: 41051
                          AS: 199656
                          AS: 208453
                          AS: 209533
                          AS: 212895
                          AS: 214757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d6:cf:db:69:67:da:a0:4d:28:61:5c:08:39:fb:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
        Validity
            Not Before: Aug  6 11:22:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8018b9c6d9840f84c6de3517dfb9988eb6a8b1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:8b:66:58:45:7d:d5:53:68:c7:3d:f2:bf:
                    15:b5:79:e1:ba:1d:f5:cf:39:64:72:f7:49:5d:e7:
                    aa:43:25:fe:14:17:69:32:01:b5:fa:f2:eb:44:1a:
                    02:1e:65:df:5d:3d:09:50:46:30:fb:e9:a1:9a:3a:
                    0d:4c:bc:f2:38:c3:27:2c:43:6a:a3:37:24:69:21:
                    72:28:90:38:29:f8:5c:fd:ad:ee:4c:59:21:f2:11:
                    e1:ab:fd:ff:20:81:17:22:f4:8b:d6:3e:f4:aa:c2:
                    68:9f:9f:bc:dc:24:66:8e:ef:3b:77:e0:48:f1:2c:
                    13:c8:f6:7b:67:68:ee:17:2d:ee:86:42:3d:9f:5c:
                    81:d0:a3:52:6a:7d:4f:84:b7:ed:ca:15:12:ec:e7:
                    37:ac:75:c6:53:8d:48:b8:1d:96:1c:67:ef:b1:48:
                    d2:46:19:7d:10:5d:4e:40:ed:7c:3b:13:3a:60:9c:
                    c1:d8:e4:84:b5:5b:fa:d0:15:c2:99:2b:ec:de:1c:
                    44:02:60:26:74:f2:1d:02:0f:e4:27:6e:e5:79:5f:
                    58:f0:d4:e8:58:57:39:c3:48:5e:c7:54:e7:a1:53:
                    18:61:0b:ce:71:21:1c:40:71:f3:fd:9e:4a:ef:22:
                    58:80:30:c7:92:a6:50:5e:4c:45:a7:fe:e0:16:2a:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:18:B9:C6:D9:84:0F:84:C6:DE:35:17:DF:B9:98:8E:B6:A8:B1:CC
            X509v3 Authority Key Identifier:
                keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/gBi5xtmED4TG3jUX37mYjraoscw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208471

    Signature Algorithm: sha256WithRSAEncryption
         a1:68:ae:7b:30:25:43:61:3b:15:e5:f7:1b:16:1e:61:45:4e:
         b0:a4:a1:9f:43:fc:1b:9a:fd:cc:46:1f:92:ca:ba:b9:fc:43:
         83:53:00:79:a9:6d:7a:76:25:d7:cc:2b:8c:5d:03:66:76:20:
         e2:91:e6:b8:ae:7f:d4:96:9c:81:27:aa:c9:be:de:43:61:c4:
         5c:ed:f2:4d:97:31:b1:6a:22:1b:f0:0b:53:cc:3f:59:cb:68:
         03:c6:2c:86:cb:17:9a:ae:3e:47:74:0c:23:b0:b0:c0:0e:14:
         7d:f1:b9:f1:91:0f:c7:e1:e1:ba:d7:19:c9:6b:a9:b3:78:38:
         6f:ed:97:3d:b9:2c:2b:bd:85:40:86:d4:5d:5f:3c:44:d8:2c:
         b8:37:28:87:b8:c8:03:00:a9:b7:5a:cc:1c:25:8d:d7:f0:ca:
         10:96:2a:45:bb:6f:93:72:83:35:2a:40:71:61:c0:d0:4a:80:
         fd:a1:3f:a2:c9:2e:79:3b:0e:6e:a3:dc:db:5d:8c:a2:e6:f9:
         76:6a:77:30:a6:20:ca:3a:a3:13:a2:c4:5f:33:0f:b4:27:d5:
         6e:de:89:6b:6a:8d:b0:25:32:fd:30:3c:70:b8:8a:0c:be:7c:
         2b:78:b7:17:c0:c1:8c:5f:85:11:d3:cc:a5:77:66:6c:fd:88:
         36:54:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:48 2026 by rpki-client