Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/GV7iEDnNYdYg20oPiUtBKMXvBL4.asa
File:                     GV7iEDnNYdYg20oPiUtBKMXvBL4.asa (raw, json)
Hash identifier:          1D90YaXh+ehod2DoGFTzDrbiggzmKIXv96e4PCXTDXI=
Subject key identifier:   19:5E:E2:10:39:CD:61:D6:20:DB:4A:0F:89:4B:41:28:C5:EF:04:BE
Certificate issuer:       /CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
Certificate serial:       01A15CB16D4EA3D5BCB4A9C86D579FD94C2A
Authority key identifier: B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/GV7iEDnNYdYg20oPiUtBKMXvBL4.asa
Signing time:             Wed 21 Oct 2026 04:21:34 +0000
ASPA not before:          Wed 21 Oct 2026 04:21:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202119
Providers:                AS: 34927
                          AS: 41051
                          AS: 47272
                          AS: 201398
                          AS: 207252
                          AS: 215296
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5c:b1:6d:4e:a3:d5:bc:b4:a9:c8:6d:57:9f:d9:4c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b392d21ebcf6ed4454c4ff468324bdedd49baa13
        Validity
            Not Before: Oct 21 04:21:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=195ee21039cd61d620db4a0f894b4128c5ef04be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:95:ac:e1:bd:93:7f:ed:df:fb:63:85:bc:
                    7e:49:e0:9c:a7:0a:4e:e0:2a:d6:0d:0b:cc:8d:3b:
                    12:02:0b:91:09:63:ed:43:f3:05:17:ae:7f:a0:b3:
                    b0:14:cb:fd:09:73:88:62:50:b3:29:96:77:26:10:
                    e6:4c:cd:02:e7:fe:b0:bb:37:d5:f1:1c:eb:6e:13:
                    8a:21:cb:bb:74:55:da:05:5a:b4:6d:ba:7d:db:7b:
                    d2:c5:5a:ba:00:76:47:b0:b2:cd:fd:7c:ba:19:27:
                    85:64:32:20:19:18:58:8c:9c:b6:f3:1c:61:76:f6:
                    26:45:10:a5:5f:1d:53:10:9d:6c:6f:54:b9:80:4c:
                    e8:81:3c:e4:c2:7a:10:5a:1e:8d:7a:45:48:ee:1a:
                    1f:0f:b5:2d:48:eb:0b:d4:6a:07:26:6b:71:81:2c:
                    9b:a6:23:e1:87:3a:8c:b1:fe:be:af:0f:5e:e5:35:
                    e1:15:ed:2a:8b:e2:fb:50:bf:1e:21:d5:ef:e1:b9:
                    ff:45:fc:2b:84:50:2c:fe:01:c9:38:99:9c:43:35:
                    56:ee:ff:c0:98:73:48:97:83:41:d7:95:0c:db:5b:
                    45:ed:71:1f:29:ad:1a:e8:72:4a:74:1a:87:41:9c:
                    85:91:3a:8f:3a:5f:7a:14:fa:eb:a7:70:c9:2f:7e:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:E2:10:39:CD:61:D6:20:DB:4A:0F:89:4B:41:28:C5:EF:04:BE
            X509v3 Authority Key Identifier:
                keyid:B3:92:D2:1E:BC:F6:ED:44:54:C4:FF:46:83:24:BD:ED:D4:9B:AA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5LSHrz27URUxP9GgyS97dSbqhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/GV7iEDnNYdYg20oPiUtBKMXvBL4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/72e632-362a-442a-99fc-dbdda4757155/1/s5LSHrz27URUxP9GgyS97dSbqhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202119

    Signature Algorithm: sha256WithRSAEncryption
         29:38:fa:3b:e7:3a:d8:07:8d:f3:e9:c5:15:48:0b:a7:3f:01:
         cf:f2:c6:af:46:0c:c3:ae:f1:90:17:54:e0:d9:f7:d4:07:ac:
         8a:d8:2b:55:59:37:c1:f2:d0:2b:15:5a:82:c0:c9:c5:e1:e6:
         0a:ab:4a:71:3f:1a:20:d9:62:af:8b:b8:46:a1:68:65:63:f7:
         b4:af:6e:08:57:08:8e:3d:65:ff:a8:59:40:33:1b:5a:60:b6:
         9d:5d:c8:55:ca:ce:29:80:53:15:a4:d0:94:f0:85:86:9e:56:
         b3:6f:6e:20:54:7a:f6:45:00:0f:02:99:1a:1c:3f:94:c5:4d:
         fe:ff:34:1d:8f:8d:0a:9a:c2:92:40:73:90:46:f1:8a:5a:b1:
         ce:a0:ae:f5:6d:22:10:14:32:50:c0:40:35:30:de:7f:07:63:
         01:0a:5c:5c:23:32:27:96:62:ec:05:ab:ed:c2:8f:81:36:23:
         0b:a5:d6:34:a6:7f:60:42:d1:fe:78:be:e1:46:5a:a7:ac:94:
         37:a2:5e:b7:48:51:f0:43:f9:52:75:d6:0e:9e:6b:f7:77:95:
         f3:5b:1b:7d:f5:95:b9:7e:14:4c:7e:f1:9e:ed:ce:ce:da:cb:
         87:43:b2:78:30:53:df:a8:29:5c:2c:8a:7a:87:2b:03:f2:18:
         87:b8:16:e5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaFcsW1Oo9W8tKnIbVef2UwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTJkMjFlYmNmNmVkNDQ1NGM0ZmY0NjgzMjRiZGVkZDQ5
YmFhMTMwHhcNMjYxMDIxMDQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTVlZTIxMDM5Y2Q2MWQ2MjBkYjRhMGY4OTRiNDEyOGM1ZWYwNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BqVrOG9k3/t3/tjhbx+SeCcpwpO
4CrWDQvMjTsSAguRCWPtQ/MFF65/oLOwFMv9CXOIYlCzKZZ3JhDmTM0C5/6wuzfV
8RzrbhOKIcu7dFXaBVq0bbp923vSxVq6AHZHsLLN/Xy6GSeFZDIgGRhYjJy28xxh
dvYmRRClXx1TEJ1sb1S5gEzogTzkwnoQWh6NekVI7hofD7UtSOsL1GoHJmtxgSyb
piPhhzqMsf6+rw9e5TXhFe0qi+L7UL8eIdXv4bn/RfwrhFAs/gHJOJmcQzVW7v/A
mHNIl4NB15UM21tF7XEfKa0a6HJKdBqHQZyFkTqPOl96FPrrp3DJL34vtwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBle4hA5zWHWINtKD4lLQSjF7wS+MB8GA1UdIwQY
MBaAFLOS0h689u1EVMT/RoMkve3Um6oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MmU2MzItMzYyYS00NDJhLTk5ZmMt
ZGJkZGE0NzU3MTU1LzEvR1Y3aUVEbk5ZZFlnMjBvUGlVdEJLTVh2Qkw0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MmU2MzItMzYyYS00NDJhLTk5ZmMtZGJkZGE0NzU3MTU1
LzEvczVMU0hyejI3VVJVeFA5R2d5Uzk3ZFNicWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVhzANBgkqhkiG
9w0BAQsFAAOCAQEAKTj6O+c62AeN8+nFFUgLpz8Bz/LGr0YMw67xkBdU4Nn31Aes
itgrVVk3wfLQKxVagsDJxeHmCqtKcT8aINlir4u4RqFoZWP3tK9uCFcIjj1l/6hZ
QDMbWmC2nV3IVcrOKYBTFaTQlPCFhp5Ws29uIFR69kUADwKZGhw/lMVN/v80HY+N
CprCkkBzkEbxilqxzqCu9W0iEBQyUMBANTDefwdjAQpcXCMyJ5Zi7AWr7cKPgTYj
C6XWNKZ/YELR/ni+4UZap6yUN6Jet0hR8EP5UnXWDp5r93eV81sbffWVuX4UTH7x
nu3OztrLh0OyeDBT36gpXCyKeocrA/IYh7gW5Q==
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:15:20 2026 by rpki-client