Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/560UvqVud9DEuhQPr1x60Rz_4no.asa
File:                     560UvqVud9DEuhQPr1x60Rz_4no.asa (raw, json)
Hash identifier:          R22iZnCp/y6i8IZet00/Fkh5m7KFKy8c2ikVMY1ramc=
Subject key identifier:   E7:AD:14:BE:A5:6E:77:D0:C4:BA:14:0F:AF:5C:7A:D1:1C:FF:E2:7A
Certificate issuer:       /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial:       019E1D4195EF050BDB7CFE94CA43DE8DA062
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/560UvqVud9DEuhQPr1x60Rz_4no.asa
Signing time:             Tue 12 May 2026 17:34:57 +0000
ASPA not before:          Tue 12 May 2026 17:34:57 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200882
Providers:                AS: 6939
                          AS: 14618
                          AS: 16509
                          AS: 20473
                          AS: 34927
                          AS: 39923
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:41:95:ef:05:0b:db:7c:fe:94:ca:43:de:8d:a0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
        Validity
            Not Before: May 12 17:34:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e7ad14bea56e77d0c4ba140faf5c7ad11cffe27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:4e:71:d8:96:e3:a6:5f:14:25:b1:e3:e2:
                    fa:c6:d8:f8:58:1d:ec:be:94:75:00:7a:4a:fb:fa:
                    32:44:16:69:22:3d:95:5f:18:42:ce:dd:fa:20:b3:
                    90:ba:38:4e:41:2c:4f:4d:3b:30:2e:68:0b:de:3a:
                    de:43:02:13:85:6a:e3:b3:2e:68:47:70:09:53:b4:
                    1e:02:3f:79:4a:62:c9:4c:46:30:fb:1f:79:0c:a0:
                    df:e2:e5:a4:37:5e:a5:45:b8:66:53:0a:86:fc:a3:
                    a7:c0:96:a5:58:cf:59:01:f4:cc:49:7d:41:fc:9e:
                    3b:f6:1f:cc:dc:9b:9d:07:3e:f8:c3:09:f1:e3:2f:
                    17:f6:a5:20:39:2c:06:57:60:ea:67:f5:7a:fb:05:
                    c4:e9:64:56:e9:18:0b:73:88:77:55:56:a8:af:7d:
                    18:8e:7b:1e:9c:1c:ed:24:7c:8d:34:75:db:a5:60:
                    8a:28:1d:31:da:eb:01:f5:72:41:90:4d:58:83:d2:
                    20:29:c6:e3:77:02:33:9d:22:9c:b0:ed:4d:57:18:
                    0a:3d:10:f2:70:fd:98:3a:42:3f:97:27:3f:8e:f5:
                    51:4f:a1:cd:02:74:82:30:c8:6d:d2:96:9e:11:06:
                    0c:9a:f8:ae:9a:bd:2a:9a:12:ca:da:10:28:70:47:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AD:14:BE:A5:6E:77:D0:C4:BA:14:0F:AF:5C:7A:D1:1C:FF:E2:7A
            X509v3 Authority Key Identifier:
                keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/560UvqVud9DEuhQPr1x60Rz_4no.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200882

    Signature Algorithm: sha256WithRSAEncryption
         27:b8:38:d7:6b:53:c4:eb:aa:aa:4e:9a:26:ca:9e:2a:a6:df:
         69:31:ec:15:ef:ea:7d:02:14:32:23:59:46:68:55:ec:3d:5f:
         9e:92:e4:8b:97:f0:f4:38:89:9e:c7:e3:e9:41:37:da:e3:2a:
         6a:1e:c5:6e:78:9b:00:8e:53:33:1f:25:59:3e:44:dc:66:4c:
         55:2e:5a:50:6f:13:f2:a9:9f:e1:82:f0:0f:f7:f3:3c:1c:cd:
         2c:2c:be:e7:c3:dd:68:7d:cd:7e:ea:60:a6:d6:55:5e:21:33:
         52:bf:11:f9:01:99:26:ad:92:00:2a:c7:e7:c8:fc:dc:4f:a4:
         dc:83:ae:36:0d:a9:14:d7:8f:d2:f7:2c:e7:80:ea:40:dc:52:
         dd:0d:ae:db:27:a6:20:2e:8b:42:00:d7:6d:34:79:ab:f8:7d:
         36:cd:bf:40:8a:2d:7a:99:b6:82:63:18:39:9b:ae:41:7d:58:
         e7:d8:33:5b:87:4b:18:3b:07:60:3e:58:d1:b4:f6:98:04:ae:
         2c:1f:0c:55:32:40:2e:7f:9c:12:b3:72:5c:cd:4f:37:2f:1e:
         5f:e9:a6:0e:47:f4:f4:cd:1b:25:34:03:78:b7:06:65:91:fb:
         4d:e0:4b:d9:cb:ea:51:d7:14:a9:54:af:d6:ec:22:ff:b8:90:
         3e:5e:a1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:54 2026 by rpki-client