Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/GxmFZKoeSokq_arDJysOmo_3tg8.asa
File:                     GxmFZKoeSokq_arDJysOmo_3tg8.asa (raw, json)
Hash identifier:          b47MbY633BzF4nlJJLUstWtUWj5EB3hpz6X2FKlv9JY=
Subject key identifier:   1B:19:85:64:AA:1E:4A:89:2A:FD:AA:C3:27:2B:0E:9A:8F:F7:B6:0F
Certificate issuer:       /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial:       01A1268A872871B3D2164DF9CDAF74A42001
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/GxmFZKoeSokq_arDJysOmo_3tg8.asa
Signing time:             Sat 10 Oct 2026 15:59:35 +0000
ASPA not before:          Sat 10 Oct 2026 15:59:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201127
Providers:                AS: 20912
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:8a:87:28:71:b3:d2:16:4d:f9:cd:af:74:a4:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
        Validity
            Not Before: Oct 10 15:59:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b198564aa1e4a892afdaac3272b0e9a8ff7b60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:16:e3:6a:05:1d:45:4e:71:fa:3c:53:0a:
                    03:56:20:87:82:dc:df:c4:20:27:1e:3f:75:43:4d:
                    e2:02:c3:43:b8:aa:ce:a6:e6:7a:b5:66:bd:79:1c:
                    e7:be:ea:71:ee:70:46:06:b9:21:ee:a6:9e:94:5d:
                    5c:56:63:28:09:67:20:c7:bb:02:0a:53:9c:b4:33:
                    4c:e2:de:86:3d:f7:dc:11:fe:d7:4a:0b:82:46:80:
                    83:e4:5c:22:b7:be:b7:d0:39:00:40:24:23:85:80:
                    e4:c0:3d:de:2e:44:48:cb:67:cc:20:73:d0:6e:4b:
                    59:74:32:f9:9c:71:8c:72:e1:e8:79:58:66:98:b4:
                    22:4e:68:77:2e:0d:23:83:80:49:39:fc:ff:a6:d6:
                    10:22:72:cc:b9:25:dd:b6:5e:3d:31:67:cc:c6:ae:
                    18:14:4f:08:57:f5:a1:67:98:25:52:9c:86:c2:42:
                    a1:2a:e1:4d:37:18:48:27:ac:82:18:3a:6e:0c:f1:
                    89:95:a5:9b:7e:33:2b:db:72:c1:22:e8:0a:ab:40:
                    01:4b:d8:4a:cc:c8:ee:98:23:12:a3:fa:7d:a8:b2:
                    24:0d:5e:65:4d:80:24:85:c3:9b:91:14:30:9c:9f:
                    d6:21:ec:87:20:44:bb:6b:0e:d1:05:65:52:7a:92:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:19:85:64:AA:1E:4A:89:2A:FD:AA:C3:27:2B:0E:9A:8F:F7:B6:0F
            X509v3 Authority Key Identifier:
                keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/GxmFZKoeSokq_arDJysOmo_3tg8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201127

    Signature Algorithm: sha256WithRSAEncryption
         29:95:6f:11:b2:ef:40:45:18:95:86:6a:e5:d0:69:1e:65:6b:
         e5:7c:da:a2:bf:1a:d0:47:df:71:30:b8:2b:c3:dc:e7:5b:0c:
         1a:bb:6e:ef:aa:e2:ef:59:70:a2:4b:ea:01:95:1e:61:84:1d:
         a9:0f:6a:8a:b4:7d:d9:3b:d1:d2:5c:a4:44:6c:75:17:20:90:
         08:59:40:8c:e5:c3:5a:ee:e9:92:fb:72:34:64:23:85:87:96:
         3b:0f:5b:7f:86:d9:9d:9d:1b:9a:bc:2e:45:bd:63:69:44:3e:
         e2:cc:55:d5:70:61:46:b2:19:bb:37:84:9a:ab:a0:d2:e0:84:
         c5:45:83:38:47:fe:0c:c9:4d:6f:04:01:07:d4:c7:99:32:c4:
         ce:aa:fc:b4:0c:a8:ac:f3:82:b1:c1:60:78:e1:db:8c:bb:66:
         f0:97:cd:58:7b:27:5e:6e:b6:9a:6d:c8:7b:54:83:fe:15:da:
         18:0c:fc:09:32:01:d6:1b:28:9a:89:66:32:a0:cf:83:3e:29:
         9e:87:27:02:1a:63:06:40:f2:24:f0:d1:a6:3e:af:86:31:93:
         6b:38:07:b9:c9:a1:07:33:b8:2e:43:fb:22:05:72:31:24:ee:
         68:7b:58:1c:58:2a:5a:cc:8a:6f:db:30:d6:c8:ce:17:9d:5e:
         11:c8:36:54
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaEmiococbPSFk35za90pCABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTYyY2Y4MTAwZThjMWI0NzU0NDNmZDk0Y2Q1OGQ4ZWYy
YTMzYWUwHhcNMjYxMDEwMTU1OTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjE5ODU2NGFhMWU0YTg5MmFmZGFhYzMyNzJiMGU5YThmZjdiNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMgW42oFHUVOcfo8UwoDViCHgtzf
xCAnHj91Q03iAsNDuKrOpuZ6tWa9eRznvupx7nBGBrkh7qaelF1cVmMoCWcgx7sC
ClOctDNM4t6GPffcEf7XSguCRoCD5Fwit7630DkAQCQjhYDkwD3eLkRIy2fMIHPQ
bktZdDL5nHGMcuHoeVhmmLQiTmh3Lg0jg4BJOfz/ptYQInLMuSXdtl49MWfMxq4Y
FE8IV/WhZ5glUpyGwkKhKuFNNxhIJ6yCGDpuDPGJlaWbfjMr23LBIugKq0ABS9hK
zMjumCMSo/p9qLIkDV5lTYAkhcObkRQwnJ/WIeyHIES7aw7RBWVSepL/OQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBsZhWSqHkqJKv2qwycrDpqP97YPMB8GA1UdIwQY
MBaAFIimLPgQDowbR1RD/ZTNWNjvKjOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMt
MTVhMGRkZGQ3NDljLzEvR3htRlpLb2VTb2txX2FyREp5c09tb18zdGc4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMtMTVhMGRkZGQ3NDlj
LzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRpzANBgkqhkiG
9w0BAQsFAAOCAQEAKZVvEbLvQEUYlYZq5dBpHmVr5Xzaor8a0EffcTC4K8Pc51sM
Grtu76ri71lwokvqAZUeYYQdqQ9qirR92TvR0lykRGx1FyCQCFlAjOXDWu7pkvty
NGQjhYeWOw9bf4bZnZ0bmrwuRb1jaUQ+4sxV1XBhRrIZuzeEmqug0uCExUWDOEf+
DMlNbwQBB9THmTLEzqr8tAyorPOCscFgeOHbjLtm8JfNWHsnXm62mm3Ie1SD/hXa
GAz8CTIB1hsomolmMqDPgz4pnocnAhpjBkDyJPDRpj6vhjGTazgHucmhBzO4LkP7
IgVyMSTuaHtYHFgqWsyKb9sw1sjOF51eEcg2VA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:11:51 2026 by rpki-client