Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/gz3wYuEOXuJqqRpPdLjCiALthOs.asa
File:                     gz3wYuEOXuJqqRpPdLjCiALthOs.asa (raw, json)
Hash identifier:          1dEzjEPopCatS+JC0ngGcqrORku5vAVH5rxpH1uWxME=
Subject key identifier:   83:3D:F0:62:E1:0E:5E:E2:6A:A9:1A:4F:74:B8:C2:88:02:ED:84:EB
Certificate issuer:       /CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
Certificate serial:       019C579697B2BA23D3627E5B7C42A24F263E
Authority key identifier: 56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/gz3wYuEOXuJqqRpPdLjCiALthOs.asa
Signing time:             Fri 13 Feb 2026 15:20:12 +0000
ASPA not before:          Fri 13 Feb 2026 15:20:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201182
Providers:                AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:57:96:97:b2:ba:23:d3:62:7e:5b:7c:42:a2:4f:26:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56522ff5fbca88544b87a342fef78d1c91fcfddb
        Validity
            Not Before: Feb 13 15:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=833df062e10e5ee26aa91a4f74b8c28802ed84eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:6d:e1:4f:c3:58:58:66:4e:5d:13:38:4c:
                    c7:6b:a2:6c:3d:78:2a:a7:3e:04:9e:70:ea:1d:ba:
                    8d:85:0f:33:e6:fd:8f:0e:5e:f9:9a:6f:6d:16:46:
                    b4:9d:e7:2f:89:04:2d:3b:de:ad:f7:c0:e1:33:35:
                    95:4c:63:fe:d1:64:10:7c:a1:00:64:29:f6:33:e7:
                    f0:ea:b5:d1:ad:9a:4b:88:13:a6:e9:12:80:65:31:
                    b2:e1:56:fb:ba:8d:fa:40:c4:e3:d1:7f:ad:8e:9c:
                    9e:3c:f8:9f:72:90:58:14:80:8f:29:c5:d7:2f:48:
                    15:dc:82:ba:9f:d0:33:65:94:67:75:65:ca:7e:d4:
                    f0:b5:c3:54:bc:e0:f9:78:58:ad:b0:e7:73:82:d8:
                    e6:63:29:f8:29:49:d0:81:0f:1a:8b:40:2f:bf:8e:
                    d3:d6:3a:6d:fd:41:7c:52:e0:09:b1:ae:6f:6b:17:
                    a4:9b:b9:75:3b:65:54:fb:a6:6f:f9:ab:43:7c:17:
                    a5:42:7d:f2:35:91:42:7f:7b:df:67:e8:1d:93:d9:
                    a4:f4:f2:4a:da:34:1d:03:4c:e1:68:f0:80:ad:40:
                    ef:19:f4:7d:c5:5d:c6:1a:9b:fb:66:0e:f2:88:cc:
                    b4:3c:34:3d:03:29:b3:d0:bf:07:3c:a8:e1:c1:77:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:F0:62:E1:0E:5E:E2:6A:A9:1A:4F:74:B8:C2:88:02:ED:84:EB
            X509v3 Authority Key Identifier:
                keyid:56:52:2F:F5:FB:CA:88:54:4B:87:A3:42:FE:F7:8D:1C:91:FC:FD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlIv9fvKiFRLh6NC_veNHJH8_ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/gz3wYuEOXuJqqRpPdLjCiALthOs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/785224-a01b-42e0-ac92-574b909dd32b/1/VlIv9fvKiFRLh6NC_veNHJH8_ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201182

    Signature Algorithm: sha256WithRSAEncryption
         13:25:62:83:5d:a8:44:d3:fb:b1:e0:33:0b:e8:95:fb:a1:62:
         0c:0c:82:88:94:cd:f2:a6:c2:d7:75:ae:72:f9:f3:02:b2:77:
         bf:42:f4:0c:e7:af:e7:e3:4b:04:fe:5d:0c:4b:4a:a4:93:e0:
         d4:e7:a4:39:a2:6f:e4:62:7a:0f:23:e7:e6:53:3e:78:08:65:
         53:04:5b:c5:bb:9b:74:f8:a8:6a:44:ef:c7:74:b6:20:6e:59:
         9c:d7:ff:27:11:44:f8:26:62:9f:06:26:2c:a3:15:58:12:77:
         db:6f:b9:06:9c:4b:db:34:8e:30:e4:46:d0:e5:a0:40:a6:6b:
         67:5d:c2:78:16:13:f5:ba:71:08:9c:d8:d9:48:c0:fc:e9:c8:
         44:55:0d:1d:d8:e7:14:6c:db:5e:4f:2c:3d:a9:a1:ff:3d:55:
         5e:06:fb:ce:d7:9d:95:c5:b6:52:b7:f2:50:8a:b7:ec:50:31:
         a3:42:34:89:63:cd:f8:59:3c:96:42:7f:bc:96:4f:56:a0:7b:
         74:fd:49:d8:f6:46:7b:cc:0a:c6:e9:6b:01:d4:f0:c3:c5:55:
         d1:aa:81:4b:c3:8e:39:5c:4f:b8:70:42:73:c6:ef:c3:a5:a3:
         32:17:d3:7c:e6:8d:3f:48:ed:fc:f5:91:2a:1f:32:32:f7:70:
         b0:57:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:57 2026 by rpki-client