Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/px_GZJfTi5UwknQM0owpyZ6ugnc.asa
File:                     px_GZJfTi5UwknQM0owpyZ6ugnc.asa (raw, json)
Hash identifier:          BsvT+BZHeWQ83aluMG0sOr/yOOyvxojSucFpFSqJDFE=
Subject key identifier:   A7:1F:C6:64:97:D3:8B:95:30:92:74:0C:D2:8C:29:C9:9E:AE:82:77
Certificate issuer:       /CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
Certificate serial:       019FBCE9A0E944CFE6856E6F9DB54E647B13
Authority key identifier: AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/px_GZJfTi5UwknQM0owpyZ6ugnc.asa
Signing time:             Sat 01 Aug 2026 10:40:55 +0000
ASPA not before:          Sat 01 Aug 2026 10:40:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200879
Providers:                AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 41051
                          AS: 47272
                          AS: 56655
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:bc:e9:a0:e9:44:cf:e6:85:6e:6f:9d:b5:4e:64:7b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
        Validity
            Not Before: Aug  1 10:40:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a71fc66497d38b953092740cd28c29c99eae8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:2c:12:7d:86:1b:25:20:04:d0:1b:74:b5:
                    e3:4c:ff:0c:f5:dc:4a:3f:49:6d:f9:8a:b8:84:ca:
                    fb:26:f4:70:fa:3e:e1:d2:c0:7b:57:d2:83:d5:4a:
                    19:71:93:61:6a:db:0a:d9:fc:6f:f4:80:fa:4a:67:
                    7c:1c:20:2d:ab:26:67:7d:4c:a0:e8:bc:20:91:12:
                    bf:60:f4:12:f7:a7:b9:cd:8a:f5:31:36:ef:e0:db:
                    e8:73:80:49:2f:9b:83:23:fb:6d:59:ba:0a:9f:8d:
                    b3:d3:c2:10:d4:c4:6b:5a:ca:60:bb:b3:a3:6c:6d:
                    ad:de:59:0e:2c:b1:4c:b3:1c:2d:1f:e7:8e:68:30:
                    0e:0a:c0:44:f5:1f:e1:c1:a8:e6:3e:d8:9f:59:6f:
                    2c:5a:cd:a7:4e:de:c2:12:06:da:75:01:50:85:1e:
                    d4:fa:7f:b8:17:9d:23:cb:c2:81:d3:29:01:be:33:
                    f4:59:23:2a:c6:44:9f:10:e5:5f:7b:94:4a:34:bb:
                    c4:ea:f1:73:98:e2:1f:18:82:fb:40:3d:1b:f9:90:
                    cb:db:81:68:62:68:67:8c:c9:07:36:8d:83:ab:c8:
                    be:3a:2d:22:d5:32:d3:43:1a:5c:09:a3:45:73:bd:
                    42:93:52:20:59:a0:cf:6b:3c:29:d6:6e:87:e9:1b:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:C6:64:97:D3:8B:95:30:92:74:0C:D2:8C:29:C9:9E:AE:82:77
            X509v3 Authority Key Identifier:
                keyid:AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/px_GZJfTi5UwknQM0owpyZ6ugnc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200879

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:96:86:ad:bb:5a:68:50:a1:2b:d6:fb:ba:eb:39:a5:dd:
         2c:8a:c4:98:12:5f:82:ac:7f:b9:c1:e2:e2:f0:ed:06:d3:04:
         66:38:5d:62:4d:90:02:e5:ac:5e:98:34:91:5a:2f:d1:73:3e:
         d4:74:45:a9:15:a6:7b:3d:0c:73:fd:1a:92:f4:b8:bd:5f:9e:
         dd:2b:ad:59:c3:b2:a4:02:0d:3a:fb:09:bf:2b:86:29:01:a5:
         a7:c1:3d:4a:10:d5:cc:99:e8:ae:7d:10:43:f5:01:f2:18:a4:
         a0:5c:d0:54:aa:15:1a:bd:29:8a:f4:64:2e:49:c6:ea:db:e2:
         5e:d2:ed:33:31:37:d5:5c:de:b5:ec:ac:e1:c5:21:e7:09:71:
         36:0c:9f:34:69:9b:fc:5b:28:66:6a:6a:22:de:a5:4c:bf:8f:
         d3:13:7d:13:d3:f4:74:4d:2a:e2:3f:7c:c0:62:32:7d:f8:d2:
         3f:0a:4f:d1:de:be:18:9a:01:1d:a1:65:0b:84:47:34:c5:4a:
         94:58:05:99:8a:73:87:25:bf:9f:ef:d8:b0:16:d6:11:9f:3c:
         05:9d:47:37:0f:a8:2d:b4:de:a0:ab:23:fe:63:dc:ba:0f:88:
         e4:1f:50:7c:f5:a9:35:22:24:ed:8e:5a:00:12:f6:f6:aa:62:
         fe:9a:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:32 2026 by rpki-client