Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/GIFLi-jt7KNEKVqJVWyKYcnJxqs.asa
File:                     GIFLi-jt7KNEKVqJVWyKYcnJxqs.asa (raw, json)
Hash identifier:          0Qw32jTKGN4ZNEHg/fNiti4vKA/46+3dnBe8MFnmC3A=
Subject key identifier:   18:81:4B:8B:E8:ED:EC:A3:44:29:5A:89:55:6C:8A:61:C9:C9:C6:AB
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       01A12685F378E1602F201CFCDB9D44B4572E
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/GIFLi-jt7KNEKVqJVWyKYcnJxqs.asa
Signing time:             Sat 10 Oct 2026 15:54:35 +0000
ASPA not before:          Sat 10 Oct 2026 15:54:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206207
Providers:                AS: 20912
                          AS: 31263
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:85:f3:78:e1:60:2f:20:1c:fc:db:9d:44:b4:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Oct 10 15:54:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18814b8be8edeca344295a89556c8a61c9c9c6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:6f:b9:c2:ae:43:e2:90:09:b8:ec:55:86:
                    ad:ec:23:65:ba:7e:81:f3:02:53:45:08:08:08:19:
                    e4:5f:4b:51:05:d3:6a:e8:d1:40:d0:fc:fe:15:47:
                    29:78:13:c2:92:1c:64:62:d8:3a:59:3c:84:16:53:
                    d2:77:4a:24:8a:a8:37:b2:2f:d3:c9:37:7c:75:55:
                    0e:28:35:cd:bb:c7:05:eb:e9:c0:d3:0a:ed:16:a2:
                    ef:ba:6e:9e:3f:bf:ef:4c:8c:da:9b:5e:07:cf:df:
                    eb:f7:90:94:cf:e4:7a:98:95:bd:92:3e:d4:2c:e2:
                    3b:f9:80:68:12:fe:27:b1:8b:41:31:5d:94:c0:ce:
                    df:08:d6:d3:92:90:7f:eb:dc:5a:24:f1:0a:86:09:
                    3b:55:93:15:42:67:55:1b:ba:70:ce:92:44:a1:eb:
                    59:2e:ab:0b:b8:8a:6e:6d:91:57:c5:42:7c:00:8d:
                    fc:89:cd:6b:2d:b0:f0:d5:20:42:4d:7f:51:df:da:
                    f6:0a:e9:ca:3c:7a:47:d3:4b:bc:4d:59:e3:72:7f:
                    ee:cd:7d:9f:fc:65:f5:62:f3:fb:9f:88:0e:be:c1:
                    ac:63:59:f8:a0:3a:4b:64:dc:9e:b2:f2:df:cf:8c:
                    a6:11:42:9a:70:99:6b:f2:a1:7f:06:ae:81:15:a9:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:4B:8B:E8:ED:EC:A3:44:29:5A:89:55:6C:8A:61:C9:C9:C6:AB
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/GIFLi-jt7KNEKVqJVWyKYcnJxqs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206207

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:98:95:87:f9:58:bd:48:1e:ea:ad:c4:dc:6e:4f:8b:46:
         73:7a:e1:94:9c:fd:72:1a:49:77:31:e0:f1:3c:b9:fe:b9:aa:
         7a:db:f2:13:89:69:71:a7:6d:ea:a2:d0:ae:ff:65:9e:0e:10:
         bc:a5:e2:e9:5c:94:4d:71:ce:db:72:19:c3:56:78:9c:c4:c9:
         e4:b8:db:29:63:f9:ae:f7:a3:01:8a:2e:74:75:dd:7c:a7:ab:
         5f:b4:e0:e0:ce:e9:5a:c3:c3:f5:1f:33:c0:24:b0:27:14:85:
         a7:ca:a3:7e:39:1f:8a:8c:f1:bf:78:bb:29:9e:f1:db:eb:f5:
         16:c0:03:cf:4f:5f:c4:f2:0a:02:99:3b:c4:0e:d6:9c:fd:61:
         e2:53:fc:58:1f:b5:92:de:19:bc:0b:11:7d:07:8d:2d:94:2e:
         8d:a2:ec:6b:72:3f:19:0d:2e:1c:25:49:7b:2c:4d:97:18:5c:
         ed:8c:38:8e:84:4a:be:d6:1c:ca:61:77:f8:3d:c4:ef:03:60:
         08:38:8e:db:ba:a0:87:16:6f:da:6f:88:49:2c:11:13:0c:20:
         5b:a9:14:15:86:64:89:b0:11:87:b7:fa:30:80:98:99:88:28:
         68:19:66:a0:e5:ea:db:e5:20:42:bf:2c:85:61:fa:b3:c4:69:
         89:1e:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:37 2026 by rpki-client