Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/gZ3wq_mAZJreWQuC_PJ4XCaGV4U.asa
File:                     gZ3wq_mAZJreWQuC_PJ4XCaGV4U.asa (raw, json)
Hash identifier:          Sp5lTfywYFRQNmdnEzEg/9nc4vL2w4AX0dUfvEF9Wy4=
Subject key identifier:   81:9D:F0:AB:F9:80:64:9A:DE:59:0B:82:FC:F2:78:5C:26:86:57:85
Certificate issuer:       /CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
Certificate serial:       019F95DC5AC8A40BA68E21CD668090671550
Authority key identifier: 51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/gZ3wq_mAZJreWQuC_PJ4XCaGV4U.asa
Signing time:             Fri 24 Jul 2026 20:41:14 +0000
ASPA not before:          Fri 24 Jul 2026 20:41:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200010
Providers:                AS: 174
                          AS: 5405
                          AS: 6823
                          AS: 9121
                          AS: 44901
                          AS: 59796
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:dc:5a:c8:a4:0b:a6:8e:21:cd:66:80:90:67:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dc7807e84af523930fe023e5c5adafdfe1d4d5
        Validity
            Not Before: Jul 24 20:41:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=819df0abf980649ade590b82fcf2785c26865785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:72:7f:b4:60:32:30:32:d2:c4:a8:44:34:ba:
                    f3:1b:2f:8e:a6:ea:74:d6:8a:4b:f3:31:b6:d2:6f:
                    c5:1b:a7:a8:f1:41:fc:cf:74:fb:10:6d:d9:8d:4a:
                    3b:7e:2f:9d:1f:58:f2:1b:e2:34:38:23:f7:a3:ba:
                    a5:2d:f7:5b:7a:40:bb:72:06:df:63:9c:be:ff:30:
                    70:3b:77:d1:db:b3:45:3f:92:8e:c4:47:30:7e:97:
                    bf:95:14:f0:72:93:6d:e9:b8:19:41:b8:9d:6b:91:
                    63:88:58:35:b4:c4:4f:a0:7d:7a:a6:12:d6:93:5b:
                    e9:09:12:65:00:33:30:6b:b8:6c:8d:57:74:f3:80:
                    6b:dd:b2:43:01:cc:40:8c:fd:10:03:42:3e:61:d5:
                    5d:89:15:7b:ca:78:96:11:d3:51:46:d1:8f:92:7c:
                    aa:e0:48:b6:e2:ab:aa:12:f3:de:8b:96:13:c7:f9:
                    d4:a9:48:ca:8d:2d:25:8d:75:90:64:dd:68:b8:5d:
                    85:d7:40:05:74:12:d3:01:a8:32:8d:54:5f:8b:0b:
                    6b:bc:22:70:42:8f:b3:cd:13:67:43:57:ed:6a:4d:
                    e1:b7:01:2c:be:16:2e:ef:35:cd:dc:da:a8:9c:8a:
                    79:ae:c8:1c:f9:df:d2:02:de:57:04:39:df:9b:bd:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9D:F0:AB:F9:80:64:9A:DE:59:0B:82:FC:F2:78:5C:26:86:57:85
            X509v3 Authority Key Identifier:
                keyid:51:DC:78:07:E8:4A:F5:23:93:0F:E0:23:E5:C5:AD:AF:DF:E1:D4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/gZ3wq_mAZJreWQuC_PJ4XCaGV4U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bd9ef3-0de2-46ac-8c09-82dc94bdd5a5/1/Udx4B-hK9SOTD-Aj5cWtr9_h1NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200010

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:a1:15:d9:81:22:87:c3:05:17:56:b2:f9:8c:a9:b6:73:
         bb:2f:26:ac:e5:d5:50:4d:5c:62:7e:1d:dc:a8:07:00:0b:1b:
         1d:7f:68:4c:72:2e:8c:31:eb:44:3e:eb:df:a1:9e:6d:4d:99:
         64:74:84:b6:4d:29:dd:3a:0c:7c:8f:49:df:5e:a2:50:15:85:
         5f:70:f2:47:1e:cf:1b:98:ea:1e:c1:77:13:62:12:51:6c:e2:
         06:e0:d9:46:7e:88:fb:30:b7:82:7b:13:7c:09:ce:07:a4:43:
         18:6c:b8:6b:d7:69:10:bd:0f:2a:de:98:35:7b:dd:0c:cc:09:
         bc:7c:01:50:fa:32:08:26:bb:0d:9f:9c:bd:05:da:4e:58:63:
         e8:f9:5f:7a:45:23:84:51:9a:59:e6:b2:8a:3f:a0:bb:18:20:
         13:db:cf:63:d8:82:55:61:0e:c4:85:53:11:8e:7d:b1:ea:5b:
         ad:25:bc:2f:0c:13:aa:20:1c:14:c1:79:80:1a:1e:95:52:81:
         64:2c:ef:cf:34:9b:20:19:f0:41:43:06:bb:1a:9a:92:ee:9a:
         92:1c:e4:2e:ed:eb:b6:31:cf:b7:7f:62:d2:eb:26:d0:b4:28:
         e8:f2:30:cf:d9:43:3f:61:59:55:e2:aa:4f:fb:50:a5:14:b7:
         25:ee:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:52 2026 by rpki-client