Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/zvXYFDRMBmdtrWW83QBWL5pe_xg.asa
File:                     zvXYFDRMBmdtrWW83QBWL5pe_xg.asa (raw, json)
Hash identifier:          PjKpfmDVSkgo9TP/TQvIvWmCKdqKtpoJYwtUOMSdrYk=
Subject key identifier:   CE:F5:D8:14:34:4C:06:67:6D:AD:65:BC:DD:00:56:2F:9A:5E:FF:18
Certificate issuer:       /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial:       019CE674F69B70C562AD3BEB03455E8D1FBD
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/zvXYFDRMBmdtrWW83QBWL5pe_xg.asa
Signing time:             Fri 13 Mar 2026 09:09:10 +0000
ASPA not before:          Fri 13 Mar 2026 09:09:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200882
Providers:                AS: 34872
                          AS: 34927
                          AS: 210233
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:74:f6:9b:70:c5:62:ad:3b:eb:03:45:5e:8d:1f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
        Validity
            Not Before: Mar 13 09:09:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cef5d814344c06676dad65bcdd00562f9a5eff18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:99:52:f4:3a:0f:22:91:be:2e:9d:1b:21:
                    a4:f9:f7:28:38:5c:3c:0e:df:a1:db:b0:b6:45:84:
                    6d:44:f7:14:fe:1e:1d:83:85:d7:26:3d:45:85:55:
                    71:39:84:b2:04:52:af:8c:6d:5f:70:80:f4:63:55:
                    0c:ed:13:6d:6b:f2:88:4d:f9:2b:60:6a:d9:14:ba:
                    51:45:37:cd:84:74:bf:75:1d:bd:42:35:cc:ee:d8:
                    c6:ec:e6:3c:db:c7:f4:80:9d:32:5a:5c:b0:5e:69:
                    a0:30:f4:ec:3a:47:b3:ef:0e:bc:17:be:27:f6:eb:
                    f5:4c:e7:ad:b9:dc:8e:72:4a:96:cb:38:0d:7a:d5:
                    2b:dc:2a:d6:81:cb:21:c0:a2:da:b9:c4:80:55:d1:
                    2f:53:0e:c2:3d:98:8d:e4:18:e0:7e:8a:44:a6:30:
                    46:b4:5b:33:a5:4f:c5:cb:4e:ee:7f:2f:69:30:33:
                    dc:25:f5:e3:fc:5f:cc:a4:d6:53:71:33:2b:a3:7c:
                    09:5f:48:87:62:23:b8:d8:6a:a9:a6:c2:f9:41:67:
                    a2:72:4e:28:55:56:14:5e:18:a4:43:a2:62:78:67:
                    ec:a6:73:c1:93:56:82:2d:2e:f8:a6:0a:d8:60:cc:
                    01:d5:62:62:29:ca:5a:5e:f4:4a:ec:d4:80:14:71:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:D8:14:34:4C:06:67:6D:AD:65:BC:DD:00:56:2F:9A:5E:FF:18
            X509v3 Authority Key Identifier:
                keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/zvXYFDRMBmdtrWW83QBWL5pe_xg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200882

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:fb:87:ed:ce:f8:f1:d9:5f:59:6a:b4:1c:ad:6a:cb:f2:
         01:fd:99:7c:c4:32:5d:6b:d6:52:8e:eb:8b:a9:66:d6:21:b9:
         bb:e8:db:f9:44:7f:b9:0b:8b:71:5c:e6:cc:84:f4:f7:ca:ec:
         e2:cb:ff:9f:b2:c5:9c:38:32:1a:c9:e0:7c:41:e6:6b:39:37:
         30:0d:d0:a7:a3:7f:9d:09:05:76:73:fb:88:6b:b9:38:99:42:
         16:08:56:84:5f:6a:26:02:5c:b1:29:35:38:15:5e:f9:df:c1:
         bf:d7:3d:a7:a5:64:b8:be:ff:e9:97:cc:dd:d9:35:44:c8:87:
         93:19:da:a0:17:c8:42:33:78:45:6c:f4:4b:80:96:1b:63:65:
         41:dc:70:d8:ef:f6:43:74:19:5d:c2:aa:99:67:03:35:08:37:
         98:ca:76:b5:2f:ca:c9:52:fa:ac:b7:bb:13:46:74:c0:19:3e:
         80:b5:2f:86:6f:10:7b:18:80:3e:2e:56:b3:60:f3:bb:7c:94:
         56:7c:0f:0f:55:f2:ab:23:93:94:3f:28:cf:d1:14:99:56:f2:
         95:5f:0a:15:ed:07:16:23:b2:25:e7:a8:0c:81:6e:6e:b2:da:
         28:97:38:17:b5:28:95:da:1c:17:34:5a:01:e6:d2:6c:b2:0e:
         63:fe:ac:9f
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAZzmdPabcMVirTvrA0VejR+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OGI0NDNlOTkyYzY2NTY1ODk0MmU2ODkwZDI5OGQ2OGNk
ZTY0MjUwHhcNMjYwMzEzMDkwOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY1ZDgxNDM0NGMwNjY3NmRhZDY1YmNkZDAwNTYyZjlhNWVmZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1riZUvQ6DyKRvi6dGyGk+fcoOFw8
Dt+h27C2RYRtRPcU/h4dg4XXJj1FhVVxOYSyBFKvjG1fcID0Y1UM7RNta/KITfkr
YGrZFLpRRTfNhHS/dR29QjXM7tjG7OY828f0gJ0yWlywXmmgMPTsOkez7w68F74n
9uv1TOetudyOckqWyzgNetUr3CrWgcshwKLaucSAVdEvUw7CPZiN5BjgfopEpjBG
tFszpU/Fy07ufy9pMDPcJfXj/F/MpNZTcTMro3wJX0iHYiO42GqppsL5QWeick4o
VVYUXhikQ6JieGfspnPBk1aCLS74pgrYYMwB1WJiKcpaXvRK7NSAFHEdsQIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFM712BQ0TAZnba1lvN0AVi+aXv8YMB8GA1UdIwQY
MBaAFPiLRD6ZLGZWWJQuaJDSmNaM3mQlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JdEVQcGtzWmxaWWxDNW9rTktZMW96ZVpDVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvYmZiNTQyLTRmNjctNDZjNS05NzEw
LTY5NDI1MmYwMjlmMS8xL3p2WFlGRFJNQm1kdHJXVzgzUUJXTDVwZV94Zy5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWIvYmZiNTQyLTRmNjctNDZjNS05NzEwLTY5NDI1MmYwMjlm
MS8xLzEtSXRFUHBrc1psWllsQzVva05LWTFvemVaQ1UuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxCyMA0GCSqG
SIb3DQEBCwUAA4IBAQB15PuH7c748dlfWWq0HK1qy/IB/Zl8xDJda9ZSjuuLqWbW
Ibm76Nv5RH+5C4txXObMhPT3yuziy/+fssWcODIayeB8QeZrOTcwDdCno3+dCQV2
c/uIa7k4mUIWCFaEX2omAlyxKTU4FV7538G/1z2npWS4vv/pl8zd2TVEyIeTGdqg
F8hCM3hFbPRLgJYbY2VB3HDY7/ZDdBldwqqZZwM1CDeYyna1L8rJUvqst7sTRnTA
GT6AtS+GbxB7GIA+LlazYPO7fJRWfA8PVfKrI5OUPyjP0RSZVvKVXwoV7QcWI7Il
56gMgW5ustoolzgXtSiV2hwXNFoB5tJssg5j/qyf
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:05 2026 by rpki-client