Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/AfhobbiBIx7rmWZMvE1W7mQPrvY.asa
File:                     AfhobbiBIx7rmWZMvE1W7mQPrvY.asa (raw, json)
Hash identifier:          8lwXmlTFi7MObX5OppsQ7xkdMgfEa5Dfel8kT68LWHk=
Subject key identifier:   01:F8:68:6D:B8:81:23:1E:EB:99:66:4C:BC:4D:56:EE:64:0F:AE:F6
Certificate issuer:       /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial:       019D5EDEFF4C1556D8D0F5A10479C069AF75
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/AfhobbiBIx7rmWZMvE1W7mQPrvY.asa
Signing time:             Sun 05 Apr 2026 18:19:25 +0000
ASPA not before:          Sun 05 Apr 2026 18:19:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200882
Providers:                AS: 14618
                          AS: 16509
                          AS: 20473
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5e:de:ff:4c:15:56:d8:d0:f5:a1:04:79:c0:69:af:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
        Validity
            Not Before: Apr  5 18:19:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01f8686db881231eeb99664cbc4d56ee640faef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:5b:be:14:b2:84:60:89:be:5b:56:1f:55:
                    42:8f:e8:26:89:3e:26:ba:05:c3:e7:58:69:df:c4:
                    52:d7:eb:02:74:8b:26:85:f3:5d:67:38:d9:46:78:
                    cf:3f:d0:65:a9:d3:ed:69:9f:86:56:f1:99:79:5f:
                    b9:2f:f6:1e:5b:ce:44:09:bd:d0:87:75:10:6d:fd:
                    0f:63:86:ca:54:83:82:f2:66:5a:f3:f6:3f:94:b6:
                    de:d1:77:89:b9:b9:05:51:9f:4a:6f:8b:75:72:f1:
                    11:fd:29:18:ca:61:26:17:96:6c:c1:76:3b:9f:5d:
                    9d:bb:49:09:91:1c:49:e3:9e:98:78:56:06:bd:24:
                    40:f5:db:f2:38:7d:a4:dd:1f:b8:0e:38:86:47:16:
                    23:64:70:65:b3:a9:cc:54:af:fe:ea:10:cb:f3:87:
                    47:f7:dc:07:48:87:40:f8:28:ca:37:01:35:63:41:
                    37:3f:8d:a5:ce:03:6a:23:4d:d4:3a:8b:ac:8a:51:
                    fb:59:ca:98:39:a3:34:a7:93:68:d3:dd:74:c4:4a:
                    bc:46:de:11:2f:08:0b:74:77:1e:46:e4:92:05:81:
                    6c:10:81:12:0f:33:3c:ce:64:b5:d5:aa:dd:29:63:
                    13:25:81:30:35:4c:a4:b3:6a:5e:65:1c:e5:87:ab:
                    b1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:68:6D:B8:81:23:1E:EB:99:66:4C:BC:4D:56:EE:64:0F:AE:F6
            X509v3 Authority Key Identifier:
                keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/AfhobbiBIx7rmWZMvE1W7mQPrvY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200882

    Signature Algorithm: sha256WithRSAEncryption
         77:23:68:b2:24:6e:02:25:03:24:92:af:1c:8c:b9:6b:7f:7e:
         be:e7:48:c7:37:05:92:e3:73:d3:71:2e:04:3c:3f:90:d9:9f:
         66:ba:76:fa:50:19:3d:9c:f3:d5:02:29:ab:d3:d8:4f:40:aa:
         48:84:3d:8a:9b:21:69:68:50:3a:7f:ba:70:3a:cd:5c:d9:4b:
         db:0b:d4:91:d1:f0:b9:78:74:fe:5c:d0:fd:99:b1:c5:18:d6:
         84:5c:c3:85:b3:b5:0c:48:b8:79:1e:09:62:7c:30:93:04:c6:
         ce:d8:f8:04:a0:4e:b2:ca:0f:0e:75:35:82:3a:33:fa:be:c6:
         93:42:2b:71:78:12:2a:f7:d0:07:cb:58:0d:98:51:ad:03:97:
         09:89:5f:76:fd:10:33:2a:e8:92:40:08:f2:2a:ad:74:02:d5:
         ee:ba:6b:76:74:bf:be:7e:c0:d9:41:d0:59:24:77:ea:81:b6:
         45:8d:9e:4b:2d:a2:46:cb:66:51:be:fe:98:d1:a2:4a:e7:35:
         0a:0c:d0:b3:07:a8:95:d0:2a:a6:18:48:98:1b:7b:0e:5f:2a:
         f0:54:bc:cb:76:a3:5b:9b:4a:1d:34:98:d7:59:d0:fb:f8:b4:
         ee:87:38:8a:1e:eb:23:8b:2e:47:0b:0f:a9:96:0a:17:8a:89:
         ac:e1:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:45:49 2026 by rpki-client