Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa
File:                     TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa (raw, json)
Hash identifier:          V32WZ60pl0CbZiR2Xww+WSeiolXx8sZ4RQF4hMAGck8=
Subject key identifier:   4D:51:AF:B7:E1:95:FB:71:15:7C:CB:ED:A1:41:F8:B4:71:F5:CE:52
Certificate issuer:       /CN=3b74b9081513d77e53a1ff225b33400fbb391355
Certificate serial:       019F677B5FB3E97F041CB656085410641D85
Authority key identifier: 3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa
Signing time:             Wed 15 Jul 2026 20:32:46 +0000
ASPA not before:          Wed 15 Jul 2026 20:32:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200378
Providers:                AS: 41051
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:67:7b:5f:b3:e9:7f:04:1c:b6:56:08:54:10:64:1d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b74b9081513d77e53a1ff225b33400fbb391355
        Validity
            Not Before: Jul 15 20:32:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d51afb7e195fb71157ccbeda141f8b471f5ce52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:f6:69:ad:aa:ad:14:72:9d:8c:1c:f1:cf:
                    d9:28:8d:49:1f:70:f0:31:2c:82:c5:d1:d1:0a:14:
                    76:2e:41:60:b0:a5:57:cb:25:85:f3:f5:8b:ac:a9:
                    ef:96:51:de:79:6a:66:42:78:81:1a:94:69:5a:41:
                    75:c9:cc:04:48:1a:8e:bb:2f:65:e1:28:73:a8:c1:
                    48:9b:b9:11:84:ed:76:f8:96:ec:71:95:84:fb:4b:
                    c0:ef:36:bc:17:76:df:b8:cf:6a:c9:80:52:9f:f6:
                    37:98:de:9b:c2:c1:c3:ef:95:ed:cb:5b:13:76:f2:
                    48:08:7d:56:24:48:d6:78:ea:12:d5:0b:a7:3b:2d:
                    c7:a5:d6:a7:71:e3:69:e8:c9:f1:12:56:0b:df:02:
                    96:e1:3f:6b:d0:2c:2d:ae:05:9a:7b:21:12:85:ee:
                    d8:0f:b3:fa:95:4b:c8:47:68:5d:dc:60:ce:ad:17:
                    9f:29:a5:bc:54:fb:2d:2e:46:3c:11:29:7d:6b:21:
                    0b:6f:c8:02:20:35:3c:31:eb:30:25:80:6e:af:dc:
                    c0:c6:12:40:1f:6c:3a:c1:43:40:3b:92:49:4a:2c:
                    02:9b:05:69:c5:0b:c2:0c:b2:02:81:e6:65:be:fb:
                    0e:70:76:1f:05:ab:37:19:25:d2:a6:31:f0:ee:ff:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:AF:B7:E1:95:FB:71:15:7C:CB:ED:A1:41:F8:B4:71:F5:CE:52
            X509v3 Authority Key Identifier:
                keyid:3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200378

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:54:ff:8b:a0:4b:c9:5c:90:0d:0d:f2:48:26:8b:12:42:
         0f:e2:e0:72:2b:2c:ca:72:47:c2:b0:0d:49:1a:ef:4b:f2:72:
         91:28:51:d7:ce:5b:c8:99:f8:a6:6d:4b:3f:13:78:e1:8d:50:
         78:1c:a4:0d:49:c0:20:d4:8c:ba:f6:1c:14:f6:10:36:15:9c:
         dc:fe:93:11:32:d2:a1:29:59:fe:06:b0:40:66:f4:f1:eb:70:
         b2:ac:b2:23:de:8d:af:07:b4:25:63:6f:1f:4a:11:95:db:6b:
         02:14:9c:07:31:a2:20:a5:72:f5:37:49:d2:99:7e:2d:21:d9:
         6b:95:31:4a:39:4f:b4:8e:c1:82:da:f6:dc:87:54:a0:b0:29:
         20:ca:54:67:78:4e:df:8f:f2:a9:3f:82:58:24:cb:c9:3f:b2:
         73:c3:dd:0e:1d:0c:49:cc:7b:84:63:1e:d1:56:e1:db:d8:9f:
         be:b7:de:54:2b:15:4a:b0:11:4c:8d:79:4e:d5:99:bb:6c:01:
         7e:3f:f9:d2:95:de:fd:9c:5d:f1:d1:92:40:ed:a7:94:0e:ee:
         9c:31:95:df:6f:65:e4:94:a8:44:da:dc:2c:f0:27:a6:f2:c0:
         67:18:0a:8b:73:46:47:cc:b8:c8:09:b3:65:28:ea:6c:d7:99:
         66:57:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:26 2026 by rpki-client