Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/HcZu53ikNbm6E6nULbzZ5BaC4s8.asa
File:                     HcZu53ikNbm6E6nULbzZ5BaC4s8.asa (raw, json)
Hash identifier:          aZUh5JSJtmadcsFgBZ/s+52L71m5F6dmNv0c812Q2Cc=
Subject key identifier:   1D:C6:6E:E7:78:A4:35:B9:BA:13:A9:D4:2D:BC:D9:E4:16:82:E2:CF
Certificate issuer:       /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial:       01A0A70748D36802E7F2E2028FB119908302
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/HcZu53ikNbm6E6nULbzZ5BaC4s8.asa
Signing time:             Tue 15 Sep 2026 21:44:27 +0000
ASPA not before:          Tue 15 Sep 2026 21:44:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200477
Providers:                AS: 174
                          AS: 6939
                          AS: 12713
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a7:07:48:d3:68:02:e7:f2:e2:02:8f:b1:19:90:83:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
        Validity
            Not Before: Sep 15 21:44:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1dc66ee778a435b9ba13a9d42dbcd9e41682e2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:90:db:55:a0:db:59:1c:c5:60:71:2f:f5:
                    4d:bc:30:da:6c:f9:15:e4:0d:b8:6a:9c:ad:62:40:
                    a0:de:4a:41:a2:18:80:aa:79:00:53:c6:b2:a1:b9:
                    78:cd:6f:64:78:28:7f:ea:ce:0f:b6:96:9a:12:d7:
                    2f:b2:cf:80:50:28:75:08:b6:3c:9f:22:62:07:f6:
                    18:c4:29:8d:12:1e:3c:78:64:4d:1e:2f:b5:db:21:
                    3f:a2:e7:f2:48:72:d6:52:a7:1b:4f:3b:4e:5b:99:
                    da:ec:b4:4e:b6:00:96:47:65:72:32:63:90:7e:ed:
                    68:b0:d4:22:7e:44:59:9b:f0:55:6a:1d:76:ce:87:
                    0e:02:39:66:96:87:f5:bd:0e:88:88:fe:29:fb:c4:
                    81:e6:c3:18:29:f7:67:f9:82:e9:8e:25:17:04:19:
                    97:39:8f:53:b9:12:f9:55:95:92:ec:e5:be:d6:b0:
                    4e:b8:67:ea:a6:40:60:c6:d8:57:19:a5:9e:f2:f7:
                    a6:5a:e7:56:9f:ee:5a:49:7d:26:fa:45:7e:3f:f0:
                    9e:03:38:8f:eb:53:f3:1e:fe:85:9d:64:04:51:3b:
                    f9:ff:1e:06:dd:47:ab:62:86:49:c4:a2:10:19:16:
                    7c:62:a2:ee:bd:8a:04:dc:48:ab:45:b6:fe:37:a6:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C6:6E:E7:78:A4:35:B9:BA:13:A9:D4:2D:BC:D9:E4:16:82:E2:CF
            X509v3 Authority Key Identifier:
                keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/HcZu53ikNbm6E6nULbzZ5BaC4s8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200477

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:41:ec:9b:0c:6f:f5:d9:9a:9e:b3:da:9d:91:64:91:d5:
         5e:a0:18:cb:bf:2e:77:8f:4c:e5:63:31:dd:5c:d5:36:44:f9:
         d1:72:a8:40:5c:4d:6d:78:11:31:13:a1:e6:84:5f:a4:41:33:
         82:72:2c:9c:53:b6:04:14:4d:82:db:87:4e:f5:d9:c1:83:13:
         12:10:5f:45:61:08:f6:96:f8:68:17:93:07:b9:00:f2:27:c9:
         6a:8e:d1:d9:aa:fe:63:61:51:dc:08:53:d3:d5:f6:96:10:bf:
         67:32:f0:ff:32:cb:72:32:d3:83:4d:a5:ad:f2:47:8c:82:52:
         58:24:36:11:7f:49:b8:0d:b6:95:f4:bb:27:3a:dc:64:cb:c5:
         84:b8:eb:08:07:4a:d7:78:93:d6:ae:a2:be:86:ae:c0:34:c1:
         38:ae:3e:da:93:43:d1:ca:01:3a:61:a0:41:96:62:65:39:cf:
         2d:0a:38:bb:9e:2d:50:9b:89:36:a9:a5:12:f1:64:f7:1d:e5:
         4e:de:e0:49:3f:77:da:f1:b9:60:74:b8:7f:b2:45:a4:d2:8e:
         27:16:06:b3:7a:e2:36:58:ae:5f:42:65:dd:b2:fb:f5:52:32:
         94:45:f3:1f:63:c1:e1:5c:00:6f:7d:96:4f:ce:f5:1a:1d:ea:
         6d:d0:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:22 2026 by rpki-client