Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/SB2xvXRDMAoIRLkXvyzjh8_ptCY.asa
File:                     SB2xvXRDMAoIRLkXvyzjh8_ptCY.asa (raw, json)
Hash identifier:          557bSQyAJGxqIDus0t3bgSF8MnIEflLqvfCF/h7s8Ns=
Subject key identifier:   48:1D:B1:BD:74:43:30:0A:08:44:B9:17:BF:2C:E3:87:CF:E9:B4:26
Certificate issuer:       /CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
Certificate serial:       01A058722B64E51FEDF49066B4405BC1FF24
Authority key identifier: AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/SB2xvXRDMAoIRLkXvyzjh8_ptCY.asa
Signing time:             Mon 31 Aug 2026 15:31:12 +0000
ASPA not before:          Mon 31 Aug 2026 15:31:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200879
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 34927
                          AS: 41051
                          AS: 47272
                          AS: 52025
                          AS: 56655
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Sep 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:58:72:2b:64:e5:1f:ed:f4:90:66:b4:40:5b:c1:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
        Validity
            Not Before: Aug 31 15:31:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=481db1bd7443300a0844b917bf2ce387cfe9b426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:de:dc:54:be:85:6b:b8:b1:59:49:fd:04:
                    70:b2:1d:9c:d5:dc:21:f0:b0:be:2b:e1:00:55:8b:
                    c3:60:9f:4e:70:de:81:b7:1b:27:35:70:32:a8:24:
                    3c:13:0d:4b:b7:d6:1f:eb:26:d0:b3:39:c4:89:11:
                    b1:4b:e3:4f:8a:73:3f:0e:1a:1c:7d:d2:db:77:08:
                    7d:b0:69:e4:7e:ca:75:51:07:75:43:16:e9:74:c0:
                    4a:1e:1e:1c:89:84:3c:18:96:03:2b:f9:cc:55:8d:
                    0b:0c:a3:bb:09:d3:3d:44:ca:ef:3b:2e:32:e7:5c:
                    ee:09:9d:48:a3:56:93:fc:53:d7:04:13:01:76:61:
                    c1:31:1d:a8:e7:67:79:68:0e:f7:ed:ca:f2:af:fa:
                    36:d8:26:bc:14:d9:90:cb:73:ce:91:3c:be:e7:b6:
                    1a:71:d0:b3:39:e3:18:b9:60:99:75:17:dd:59:5a:
                    6b:94:cc:88:03:67:bc:52:e9:95:e7:63:d8:92:44:
                    3d:b7:f0:a1:12:0e:1e:7c:3b:26:98:e3:fe:8b:38:
                    41:0a:ad:c8:bf:8c:31:3f:7e:e7:82:b0:22:0d:40:
                    30:77:9e:91:48:6d:05:5c:69:92:d6:54:a2:5c:69:
                    5c:76:14:72:48:4b:84:10:2d:d9:a9:9d:42:e0:51:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1D:B1:BD:74:43:30:0A:08:44:B9:17:BF:2C:E3:87:CF:E9:B4:26
            X509v3 Authority Key Identifier:
                keyid:AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/SB2xvXRDMAoIRLkXvyzjh8_ptCY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200879

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:68:9d:5b:98:5c:52:0d:2b:95:01:30:f7:18:0a:15:d8:
         15:9e:48:5e:46:77:e5:cf:34:19:11:6f:6e:4d:4f:02:bb:19:
         c3:31:ff:70:df:cb:19:59:87:7b:ed:ce:60:2a:06:7b:5b:37:
         81:66:49:6e:55:45:5e:14:21:45:ff:f9:fe:3c:6b:9a:1a:42:
         aa:df:43:c9:33:80:79:d3:c6:4d:40:b6:d6:52:14:92:1c:e7:
         1c:55:47:2a:0f:6b:ff:bb:93:f9:2c:79:c7:e4:bc:76:97:6e:
         7c:e8:0c:46:12:77:f7:a0:0c:32:8f:b1:76:55:bf:bc:1b:77:
         6c:7b:53:91:aa:05:59:e9:e7:6b:72:4e:f3:1d:9b:f8:8b:19:
         1c:10:83:fc:86:fe:58:4c:50:38:20:43:01:9b:23:f4:6c:59:
         6c:72:0a:6a:58:08:b6:28:9c:69:2f:90:eb:25:58:0f:56:95:
         ff:f8:97:66:92:60:ad:ef:24:ac:d3:71:96:a9:2b:88:43:f6:
         4d:90:7e:3f:92:5c:d6:cd:28:f5:8a:07:ce:cc:93:65:47:6d:
         35:43:79:7b:1f:89:80:26:98:ff:c1:fc:03:b6:72:cb:20:ae:
         c0:a0:0c:5f:9c:45:05:3b:cb:c6:4b:90:75:35:34:1f:e2:57:
         a7:86:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 19:46:52 2026 by rpki-client