Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/1h1Dnz7YBW1ZD0Bl4fmcrCgIP60.asa
File:                     1h1Dnz7YBW1ZD0Bl4fmcrCgIP60.asa (raw, json)
Hash identifier:          Y1q9+D0Ky8HP5v1utMRrBzbOndURPN1GEwHB3gr6J6Y=
Subject key identifier:   D6:1D:43:9F:3E:D8:05:6D:59:0F:40:65:E1:F9:9C:AC:28:08:3F:AD
Certificate issuer:       /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial:       01A15DD551F0EE23F35074F13723319EB880
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/1h1Dnz7YBW1ZD0Bl4fmcrCgIP60.asa
Signing time:             Wed 21 Oct 2026 09:40:23 +0000
ASPA not before:          Wed 21 Oct 2026 09:40:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207636
Providers:                AS: 200019
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:d5:51:f0:ee:23:f3:50:74:f1:37:23:31:9e:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
        Validity
            Not Before: Oct 21 09:40:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d61d439f3ed8056d590f4065e1f99cac28083fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:95:63:8a:d3:72:86:05:3f:29:87:b2:1d:
                    36:c3:4b:fc:76:cb:0a:3d:27:ab:84:45:1f:02:82:
                    da:f0:23:9a:cf:04:3e:91:91:a9:d3:3c:72:f2:aa:
                    f4:02:6e:9d:50:7f:2f:fe:f9:06:62:ad:a2:a2:05:
                    9d:e1:6c:ea:91:0d:f2:ee:ce:10:3a:19:fa:b4:86:
                    11:e6:1d:24:ee:1a:90:c5:5c:9e:a0:cd:37:64:e3:
                    f8:85:c6:95:25:1d:f5:e7:d6:0a:78:9b:e5:5d:79:
                    3a:74:36:fd:48:6c:6d:7a:00:db:b1:7d:55:28:75:
                    2d:21:8c:65:eb:80:05:f9:fd:26:48:24:f1:5e:85:
                    8d:8c:27:40:c1:0f:9a:d1:0e:f3:34:dd:a9:fa:38:
                    76:b1:b7:18:dc:a7:59:d0:44:7e:f6:cf:b9:ab:bb:
                    cc:33:b5:0c:b6:81:54:05:09:36:a1:10:34:73:a9:
                    4e:f3:a5:0b:1b:c1:53:d6:be:da:6b:19:42:2a:91:
                    dd:35:f8:99:83:46:31:cf:e3:0d:8f:3e:3f:f5:3f:
                    42:8b:bb:68:e8:27:1d:a0:0b:9c:40:80:48:fe:f7:
                    59:af:35:fe:fb:e2:84:75:54:c0:15:48:a7:fe:a7:
                    49:28:61:95:6a:9e:18:d5:d6:bc:fd:6d:68:40:7b:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1D:43:9F:3E:D8:05:6D:59:0F:40:65:E1:F9:9C:AC:28:08:3F:AD
            X509v3 Authority Key Identifier:
                keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/1h1Dnz7YBW1ZD0Bl4fmcrCgIP60.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207636

    Signature Algorithm: sha256WithRSAEncryption
         a9:c6:75:22:9c:b3:8e:47:78:85:20:86:7d:a3:9d:5e:e1:27:
         f1:50:da:10:4e:a1:7d:1f:a6:17:f8:90:25:98:eb:20:bc:fb:
         28:87:79:be:0a:0d:2a:7c:93:bc:24:d6:4b:14:af:75:8b:84:
         11:92:8c:e7:4e:3e:80:7a:eb:6d:62:74:3a:bb:b4:26:45:3c:
         f0:52:41:3c:01:6e:1f:3e:09:8a:81:15:b2:b4:b8:fd:1c:a3:
         54:43:52:4f:11:69:47:ee:ee:ab:f6:62:f7:d1:f6:df:68:c9:
         dc:f0:45:a9:a4:89:ee:6b:33:ab:3c:36:f2:53:f4:ed:84:31:
         8e:3d:1d:39:9b:c7:a9:c8:1f:74:f3:d2:7c:f3:0c:41:00:65:
         74:19:2a:64:6b:a7:09:f5:f7:a1:5a:4f:78:22:54:98:a9:09:
         63:80:a2:90:c0:38:62:7f:c3:de:28:f5:f7:59:cf:73:41:c8:
         5d:19:ce:01:61:c9:69:41:b4:36:c8:24:a4:29:02:59:37:a7:
         b6:ef:31:ed:ac:a7:4a:5a:d9:44:f8:6b:b2:13:d2:56:e0:71:
         f1:c0:c4:2b:a8:ca:cd:52:ff:c7:40:92:73:10:4d:f1:b4:f5:
         18:88:4e:3c:6d:1e:d8:96:27:9b:79:2f:d5:72:ec:a2:f5:82:
         7f:dd:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:52:01 2026 by rpki-client