Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/xVaYIBw7M6bRv3MOmzyAcV4by3I.asa
File:                     xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (raw, json)
Hash identifier:          PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=
Subject key identifier:   C5:56:98:20:1C:3B:33:A6:D1:BF:73:0E:9B:3C:80:71:5E:1B:CB:72
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019DD3535471CF3AE7E970CB5FCF499AD289
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/xVaYIBw7M6bRv3MOmzyAcV4by3I.asa
Signing time:             Tue 28 Apr 2026 09:02:26 +0000
ASPA not before:          Tue 28 Apr 2026 09:02:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200185
Providers:                AS: 174
                          AS: 1299
                          AS: 3356
                          AS: 19905
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d3:53:54:71:cf:3a:e7:e9:70:cb:5f:cf:49:9a:d2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Apr 28 09:02:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c55698201c3b33a6d1bf730e9b3c80715e1bcb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:e7:4b:fe:c7:cc:c3:7e:a9:b1:12:02:aa:
                    41:93:35:53:fe:c6:3d:b1:c9:8b:0f:ce:b9:f8:17:
                    14:13:e9:b4:28:a5:45:ce:82:78:a1:80:79:2a:1d:
                    38:c1:44:d8:45:85:77:1c:15:4e:24:ca:a9:12:82:
                    b8:7c:19:cb:35:fa:34:16:52:e8:60:8b:da:de:da:
                    42:1d:6e:f4:3b:92:3a:ff:db:ea:cd:cd:14:a9:9d:
                    f3:a1:9f:60:d5:fb:10:66:6e:36:a7:51:34:82:a4:
                    85:53:99:dd:d6:62:0a:ed:ad:83:fc:e9:0c:b1:c2:
                    22:e6:a1:7e:dc:88:d0:a3:23:cf:8e:79:77:ca:6e:
                    f3:bc:a3:8f:11:fb:e0:3b:e9:21:a7:aa:2e:ff:f8:
                    c1:02:40:5a:a0:50:ff:00:d7:6f:92:aa:50:39:c2:
                    d8:91:ac:4b:44:40:fc:a7:42:45:f9:d6:7d:66:f3:
                    5d:db:7e:32:34:39:53:9b:4f:3b:6b:27:44:85:4f:
                    05:e1:b2:6d:49:67:de:2c:91:a9:e0:da:e5:b6:39:
                    83:1c:ab:e0:50:bb:eb:62:76:6a:41:23:26:cc:b9:
                    0c:5f:25:24:80:f7:82:79:a8:36:f7:37:62:20:cd:
                    4d:0f:ed:73:ed:f4:71:ab:e8:be:4a:40:df:37:43:
                    ea:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:98:20:1C:3B:33:A6:D1:BF:73:0E:9B:3C:80:71:5E:1B:CB:72
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/xVaYIBw7M6bRv3MOmzyAcV4by3I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200185

    Signature Algorithm: sha256WithRSAEncryption
         10:76:d6:fe:c0:60:4d:4b:ec:ba:71:46:3d:d1:cb:c9:9e:5a:
         77:15:88:67:d2:6d:b5:33:e3:5e:ac:f2:ed:f0:7c:49:10:f9:
         78:49:ff:0d:32:22:65:db:7d:a9:1c:ab:10:64:54:59:40:42:
         1e:eb:a8:14:9f:31:03:8d:dc:c6:ff:3b:9d:43:0a:b1:0c:ac:
         44:d4:4a:1d:9f:07:8a:3d:49:31:e5:80:60:3a:1b:a0:e0:32:
         60:c6:1e:0d:d9:3c:19:d0:46:32:c8:2f:0a:fb:44:1b:42:6a:
         ee:ff:0c:15:13:d1:77:80:84:e0:37:b4:40:cc:95:d1:86:32:
         0b:13:db:11:59:83:61:3f:38:39:d4:96:53:7c:f4:0a:69:eb:
         e1:13:d6:bd:2c:a1:89:1c:34:f8:dd:ad:bb:6c:a4:0e:63:6d:
         df:ee:fe:36:e5:32:a2:99:1f:3c:8f:90:36:0e:5e:57:03:9f:
         f2:86:d4:99:76:b7:5e:14:63:89:33:cc:4e:0d:92:53:e4:fd:
         76:8d:d8:87:e1:e0:d1:72:82:65:a9:e6:b8:98:09:70:d2:3b:
         50:18:9c:a0:02:2e:d6:6f:2b:66:4a:45:0e:94:d1:f9:dc:b1:
         61:58:61:7c:22:30:4c:c1:e7:0f:05:0e:46:34:b7:7b:75:90:
         dd:48:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:31 2026 by rpki-client