Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa
File:                     GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (raw, json)
Hash identifier:          afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=
Subject key identifier:   18:32:46:49:AB:39:39:8E:85:BF:FE:69:CA:EF:C3:6A:B1:3F:B0:34
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       019C1D5E2C7ACB2E639C90E78A519FC599D3
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa
Signing time:             Mon 02 Feb 2026 08:00:36 +0000
ASPA not before:          Mon 02 Feb 2026 08:00:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208437
Providers:                AS: 6939
                          AS: 9002
                          AS: 41720
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:5e:2c:7a:cb:2e:63:9c:90:e7:8a:51:9f:c5:99:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: Feb  2 08:00:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18324649ab39398e85bffe69caefc36ab13fb034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:bd:89:8b:e3:87:98:2d:42:ac:f1:24:67:
                    13:1b:16:9b:cd:08:7c:ce:47:1c:a1:cc:d3:59:c4:
                    53:92:79:56:dd:37:04:22:4a:c7:d6:9b:be:11:1f:
                    f8:68:09:a4:eb:d8:06:46:e9:2a:eb:93:4c:7b:95:
                    09:a7:1c:08:ba:ed:c4:65:3f:43:e2:c4:af:f2:da:
                    d3:94:ec:63:7b:33:9d:3d:ff:d9:4e:7b:7c:54:2c:
                    a5:2b:14:64:9f:fd:87:c1:b4:f3:5c:22:a0:17:3e:
                    23:ad:e2:3f:b6:c6:95:78:01:96:de:5f:8e:1f:7f:
                    15:c6:d7:92:5d:2f:21:46:22:30:9b:31:cd:c0:e8:
                    5f:8b:b6:19:0c:09:17:3f:d6:3a:6c:91:b7:13:ba:
                    88:48:77:a5:6e:5e:96:c3:f7:41:74:d8:d1:a8:fc:
                    95:5a:d0:18:f4:44:ec:c5:d5:80:99:fd:0c:11:57:
                    21:7f:33:ae:e6:5f:a3:da:62:b6:e1:ad:63:76:0b:
                    94:a9:90:e6:5a:dc:33:5e:da:61:3a:51:7a:7e:43:
                    a3:30:32:dd:71:91:09:a9:db:93:8e:b9:e5:1a:42:
                    1a:c3:24:e7:60:40:50:a1:2b:2e:46:53:81:5d:0c:
                    c6:0c:7e:dc:20:ec:d1:56:d5:18:f6:04:af:4c:d3:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:46:49:AB:39:39:8E:85:BF:FE:69:CA:EF:C3:6A:B1:3F:B0:34
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208437

    Signature Algorithm: sha256WithRSAEncryption
         b4:b2:58:28:56:77:3b:58:8d:bc:6a:04:db:93:74:fc:27:18:
         5b:18:b7:5b:48:bb:21:0a:9e:f8:ee:d4:c5:bd:12:f8:38:33:
         07:6e:54:b2:8d:23:01:62:9d:8c:a7:ba:9b:66:47:e4:ed:e2:
         0c:31:d3:b2:b3:45:29:5f:39:d1:ed:0a:ed:73:c5:c5:74:15:
         da:24:82:78:ec:e0:60:63:70:f3:7b:68:1b:6d:77:4d:25:77:
         30:10:0e:cf:4d:a6:b1:03:cf:c8:b9:fd:23:1f:52:5d:51:88:
         2d:3a:04:d5:f0:c5:76:20:06:7c:5d:18:15:7f:48:c2:c8:22:
         16:2b:c1:70:03:a2:14:d1:55:74:38:89:f1:95:5d:85:86:df:
         95:80:0c:ab:f4:08:69:a9:13:b0:1f:04:05:31:2b:96:7b:a7:
         50:f5:b4:b7:a1:56:c9:cb:91:97:61:e7:46:85:7e:c4:97:7b:
         4c:d4:f9:45:ab:3a:f7:4e:2c:ed:47:23:a6:47:04:cd:4d:41:
         b8:55:20:1c:a3:34:c8:ca:13:e6:49:32:58:e1:99:25:8c:17:
         9f:b6:f9:c2:dd:68:b7:6e:27:33:64:ac:0c:45:22:f6:3c:bf:
         70:b9:2f:4c:49:9c:4f:82:63:46:1c:82:2b:d1:b1:0c:be:4a:
         69:43:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:06 2026 by rpki-client