Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/3RKPC7OoCU6c5LmejYY-G_3_1G8.asa
File:                     3RKPC7OoCU6c5LmejYY-G_3_1G8.asa (raw, json)
Hash identifier:          qh8DrXyDdtSiioYm6A0nGUFjKi214Icbt8p40Quuiek=
Subject key identifier:   DD:12:8F:0B:B3:A8:09:4E:9C:E4:B9:9E:8D:86:3E:1B:FD:FF:D4:6F
Certificate issuer:       /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial:       019FC2E80EAD6A4EAC1E5F8E22BAE7A7203F
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/3RKPC7OoCU6c5LmejYY-G_3_1G8.asa
Signing time:             Sun 02 Aug 2026 14:36:55 +0000
ASPA not before:          Sun 02 Aug 2026 14:36:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200201
Providers:                AS: 37988
                          AS: 41108
                          AS: 47272
                          AS: 62553
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:e8:0e:ad:6a:4e:ac:1e:5f:8e:22:ba:e7:a7:20:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
        Validity
            Not Before: Aug  2 14:36:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dd128f0bb3a8094e9ce4b99e8d863e1bfdffd46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8c:a5:f3:4b:aa:0f:a5:a9:5f:10:18:47:4c:
                    6f:fa:fa:33:1c:6b:2d:3f:6e:53:f7:ca:bd:ff:1a:
                    78:03:74:ea:bc:1f:f8:18:61:77:d8:72:ed:25:79:
                    ae:a5:5a:68:30:5a:11:49:9a:f5:df:9c:75:17:3a:
                    c7:4a:60:3e:8a:d2:cb:26:d4:65:aa:5c:bc:d0:85:
                    46:f2:89:70:47:fa:8d:77:45:4e:2f:38:23:8d:8e:
                    16:91:ee:4a:99:75:35:a9:08:e4:a0:12:18:4e:64:
                    73:0b:51:ee:b9:7d:d1:cb:60:4f:5e:86:ce:fa:53:
                    ac:1f:82:53:ff:d5:3b:50:22:52:a3:6e:97:38:8d:
                    34:d2:7d:c4:d1:3e:09:37:be:ff:5b:03:6e:b5:f2:
                    8d:93:dc:43:61:0f:d7:a2:01:32:f5:b7:97:61:d5:
                    b8:60:f3:56:e8:46:0a:96:4e:db:7b:c9:01:fa:39:
                    65:45:7a:3b:2a:e7:5c:ac:15:ac:c1:67:17:4b:8b:
                    03:07:49:3b:69:b3:67:c9:d6:d4:18:b6:b0:a6:e6:
                    ea:08:82:62:58:3f:dd:52:7a:9a:f8:ec:9d:bd:41:
                    d2:75:64:4b:7a:05:52:ca:e2:28:26:23:3d:28:40:
                    f2:fa:f0:0d:06:48:59:06:e3:7b:fd:8a:ec:60:54:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:8F:0B:B3:A8:09:4E:9C:E4:B9:9E:8D:86:3E:1B:FD:FF:D4:6F
            X509v3 Authority Key Identifier:
                keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/3RKPC7OoCU6c5LmejYY-G_3_1G8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200201

    Signature Algorithm: sha256WithRSAEncryption
         16:03:62:82:2f:cf:7a:f6:62:94:39:e2:e3:d0:ff:77:61:da:
         84:07:c9:e2:1a:4a:32:cc:aa:ac:5c:e1:8b:6d:39:cd:b7:7f:
         a6:45:6d:b2:b5:f0:5b:f8:0c:52:05:08:e9:af:f3:78:3d:f8:
         bb:c9:cd:c7:7a:90:11:c8:d5:54:3a:b1:48:01:98:12:53:db:
         df:58:96:5f:79:04:15:5b:ee:39:85:c5:ce:f8:12:6c:49:cd:
         a5:72:96:99:bb:ee:68:fe:2d:bb:f9:11:2f:b6:52:d3:6e:44:
         ce:d3:79:ab:3b:e5:ab:77:e1:49:2c:c5:c5:4f:ba:02:f7:4b:
         d3:fe:05:c5:91:a4:c5:f3:87:7a:46:1d:d1:fa:e6:61:d0:f1:
         7e:7b:89:22:e3:6b:2e:08:8f:73:18:46:45:54:8a:b8:44:7d:
         d7:d9:ab:53:1e:34:15:92:29:a8:a7:a0:35:55:bb:a7:f7:46:
         4f:08:4c:a3:fa:ed:f7:da:df:e1:5c:d3:b0:c1:3c:8f:35:71:
         b2:11:7f:0b:39:37:a1:cd:fb:d6:e9:61:ad:07:39:3c:29:45:
         e9:46:25:8f:72:06:f5:d3:b2:4d:69:fc:4c:d9:05:d3:02:22:
         cc:5c:db:4b:33:d6:ef:02:3e:44:49:de:de:99:6f:b7:02:8f:
         b5:21:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:48 2026 by rpki-client