Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/_gcG-qxhs5FT350l47QjHNfP-20.asa
File:                     _gcG-qxhs5FT350l47QjHNfP-20.asa (raw, json)
Hash identifier:          8jI/hH/ENiZ59CokHDs0dB3VMFdL+oTQLn4fo4mrtqM=
Subject key identifier:   FE:07:06:FA:AC:61:B3:91:53:DF:9D:25:E3:B4:23:1C:D7:CF:FB:6D
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019DCFA62B2C10FFB87CE56A6F93C7B9CD61
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/_gcG-qxhs5FT350l47QjHNfP-20.asa
Signing time:             Mon 27 Apr 2026 15:54:26 +0000
ASPA not before:          Mon 27 Apr 2026 15:54:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 11967
                          AS: 205941
                          AS: 211358
                          AS: 213449
                          AS: 214757
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:a6:2b:2c:10:ff:b8:7c:e5:6a:6f:93:c7:b9:cd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Apr 27 15:54:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe0706faac61b39153df9d25e3b4231cd7cffb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:21:80:4e:cb:79:9d:36:31:e3:a4:13:bc:
                    e4:ec:2c:02:73:dc:c1:2b:f9:48:b5:02:95:ba:aa:
                    92:a1:1c:f9:99:91:c6:16:48:0a:a8:b8:65:02:30:
                    fb:48:f3:65:e5:1f:92:79:7a:16:25:bf:22:f2:69:
                    78:d1:f3:42:dc:b2:57:7b:79:e0:e0:72:a1:db:51:
                    3c:c2:c4:df:79:cb:dd:21:5a:e1:d8:69:90:23:f4:
                    0b:91:33:23:e5:41:b4:df:70:70:9b:5c:bb:f7:d4:
                    af:4d:37:6f:6f:0b:47:00:f5:1d:20:69:59:c8:5a:
                    40:82:74:0d:42:57:1d:03:cb:c7:b7:20:a3:08:37:
                    ab:af:89:db:2a:63:d5:48:48:da:05:df:89:6f:44:
                    47:4b:e3:7c:92:08:2d:ed:99:69:2c:10:c7:eb:87:
                    0c:bc:a3:ba:ca:f2:63:d4:99:72:bc:58:4e:e0:99:
                    23:a4:84:86:52:9d:1e:1b:7d:35:b2:2b:34:a4:0e:
                    de:31:9f:d8:10:ae:c6:17:ed:71:30:4f:2d:07:39:
                    f0:a9:db:61:51:2a:13:11:8c:82:79:66:a9:9b:8f:
                    34:1e:70:f2:c8:e1:61:a1:3a:2b:86:b1:56:34:b3:
                    53:f6:ce:64:87:e7:d1:af:b4:e1:7f:ca:0c:81:a2:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:06:FA:AC:61:B3:91:53:DF:9D:25:E3:B4:23:1C:D7:CF:FB:6D
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/_gcG-qxhs5FT350l47QjHNfP-20.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         89:ad:90:24:f1:ea:17:a9:b8:2f:49:9a:91:f3:da:9f:c8:0d:
         16:50:5e:24:0f:ce:a9:a0:71:c5:e2:ff:8f:19:61:7c:44:31:
         ad:66:ae:05:f9:76:b1:03:d0:da:63:c7:8a:93:62:e5:67:68:
         63:f8:ca:ff:b6:55:9c:12:a4:04:33:6a:88:e9:90:20:b5:c9:
         19:14:5d:af:7f:70:df:17:27:8f:43:9a:10:19:94:a7:c3:3f:
         34:99:08:4c:2a:74:f5:87:fb:16:32:be:0e:71:e1:31:c1:8c:
         74:14:80:be:20:c1:ce:43:cb:d3:c6:7d:84:6b:26:7c:dc:31:
         48:a8:fa:77:13:c5:27:81:89:a8:53:cb:8c:c9:03:cb:f7:99:
         76:56:99:a0:e3:ed:a0:ac:a1:0c:95:f9:da:47:d6:fb:eb:75:
         8d:f5:77:fb:6f:73:93:6f:37:8f:c1:e3:f7:63:94:a8:b8:e0:
         6c:b6:72:93:22:75:b0:37:30:da:7d:8d:35:91:83:7b:0b:26:
         6b:5d:58:90:4d:fa:63:86:a7:c2:63:6f:8e:20:42:c0:db:cc:
         d0:11:9c:3d:9f:fc:0f:34:2d:b3:b5:46:57:99:32:20:de:3a:
         b2:d9:92:bd:e9:fb:9a:70:47:a5:d5:3c:cc:d3:b6:5e:11:40:
         24:54:5b:2e
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAZ3PpissEP+4fOVqb5PHuc1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw
YjUxMjIwHhcNMjYwNDI3MTU1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTA3MDZmYWFjNjFiMzkxNTNkZjlkMjVlM2I0MjMxY2Q3Y2ZmYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRMhgE7LeZ02MeOkE7zk7CwCc9zB
K/lItQKVuqqSoRz5mZHGFkgKqLhlAjD7SPNl5R+SeXoWJb8i8ml40fNC3LJXe3ng
4HKh21E8wsTfecvdIVrh2GmQI/QLkTMj5UG033Bwm1y799SvTTdvbwtHAPUdIGlZ
yFpAgnQNQlcdA8vHtyCjCDerr4nbKmPVSEjaBd+Jb0RHS+N8kggt7ZlpLBDH64cM
vKO6yvJj1JlyvFhO4JkjpISGUp0eG301sis0pA7eMZ/YEK7GF+1xME8tBznwqdth
USoTEYyCeWapm480HnDyyOFhoTorhrFWNLNT9s5kh+fRr7Thf8oMgaJtXwIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFP4HBvqsYbORU9+dJeO0IxzXz/ttMB8GA1UdIwQY
MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2
LWM4NjE1YTU0MGNkZC8xL19nY0ctcXhoczVGVDM1MGw0N1FqSE5mUC0yMC5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2LWM4NjE1YTU0MGNk
ZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxNFMA0GCSqG
SIb3DQEBCwUAA4IBAQCJrZAk8eoXqbgvSZqR89qfyA0WUF4kD86poHHF4v+PGWF8
RDGtZq4F+XaxA9DaY8eKk2LlZ2hj+Mr/tlWcEqQEM2qI6ZAgtckZFF2vf3DfFyeP
Q5oQGZSnwz80mQhMKnT1h/sWMr4OceExwYx0FIC+IMHOQ8vTxn2EayZ83DFIqPp3
E8UngYmoU8uMyQPL95l2Vpmg4+2grKEMlfnaR9b763WN9Xf7b3OTbzePweP3Y5So
uOBstnKTInWwNzDafY01kYN7CyZrXViQTfpjhqfCY2+OIELA28zQEZw9n/wPNC2z
tUZXmTIg3jqy2ZK96fuacEel1TzM07ZeEUAkVFsu
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:15 2026 by rpki-client