Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/vrpJMRq--LU7egmQY6pj2VWmf8o.asa
File:                     vrpJMRq--LU7egmQY6pj2VWmf8o.asa (raw, json)
Hash identifier:          Y+k0dQCB6nSlVKkCd7bC0O2dU2Ogg04osi5deXawbYE=
Subject key identifier:   BE:BA:49:31:1A:BE:F8:B5:3B:7A:09:90:63:AA:63:D9:55:A6:7F:CA
Certificate issuer:       /CN=77811cb89bcc8889b9a125da300f1fae95037ecc
Certificate serial:       019DFEC1BCC114745C85EA2E292D80BEA169
Authority key identifier: 77:81:1C:B8:9B:CC:88:89:B9:A1:25:DA:30:0F:1F:AE:95:03:7E:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4EcuJvMiIm5oSXaMA8frpUDfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/vrpJMRq--LU7egmQY6pj2VWmf8o.asa
Signing time:             Wed 06 May 2026 19:26:42 +0000
ASPA not before:          Wed 06 May 2026 19:26:42 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200104
Providers:                AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4EcuJvMiIm5oSXaMA8frpUDfsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:fe:c1:bc:c1:14:74:5c:85:ea:2e:29:2d:80:be:a1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77811cb89bcc8889b9a125da300f1fae95037ecc
        Validity
            Not Before: May  6 19:26:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=beba49311abef8b53b7a099063aa63d955a67fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:7c:02:de:4f:2e:49:95:47:07:7e:1c:67:
                    95:21:c7:e9:dd:e6:71:88:49:c1:e2:73:a9:27:f5:
                    70:8a:9a:50:ae:62:b0:fe:3c:65:e0:d5:01:8e:19:
                    4e:de:9e:03:28:9e:51:78:e7:2e:48:20:06:34:50:
                    2b:e0:2e:b1:0b:af:44:13:c7:d4:1a:b9:76:d8:34:
                    f6:e6:84:f8:e4:ea:74:22:18:8a:9a:ff:cb:9e:39:
                    c2:ba:48:24:e8:31:8f:74:38:0b:b0:af:6a:60:f8:
                    d5:2a:86:08:e3:28:1b:3f:14:bd:0b:8d:93:3d:69:
                    76:c0:a0:7d:7d:54:b2:d4:22:5b:1a:b9:24:fb:9b:
                    e6:58:bc:75:c1:aa:0c:36:78:93:0c:15:7e:07:34:
                    04:c6:07:fc:01:82:9a:b9:28:9b:c5:65:b1:93:d8:
                    9b:3f:ab:f4:bb:14:80:0f:47:36:ff:03:79:40:30:
                    e1:c1:df:4f:cd:ae:af:12:3e:9d:72:ba:15:ae:2d:
                    14:07:66:1b:39:8c:51:46:0a:42:c6:15:ad:44:65:
                    18:86:17:c8:57:7e:39:17:4d:5f:db:ba:07:f5:79:
                    db:68:f4:7c:4a:a4:46:70:62:98:64:b7:b6:63:e9:
                    d1:bf:95:e9:54:23:c2:e1:66:8b:e9:83:be:19:aa:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BA:49:31:1A:BE:F8:B5:3B:7A:09:90:63:AA:63:D9:55:A6:7F:CA
            X509v3 Authority Key Identifier:
                keyid:77:81:1C:B8:9B:CC:88:89:B9:A1:25:DA:30:0F:1F:AE:95:03:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4EcuJvMiIm5oSXaMA8frpUDfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/vrpJMRq--LU7egmQY6pj2VWmf8o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/60bf71-c44a-4dbe-bbbd-e5512fcbe246/1/d4EcuJvMiIm5oSXaMA8frpUDfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200104

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:09:b9:04:77:83:c8:16:b1:3e:c7:02:8b:c5:24:4e:b0:
         73:89:17:46:76:11:36:99:eb:1f:cf:b6:ec:c2:b2:f2:2f:c2:
         43:eb:28:e1:39:55:94:eb:6c:5d:eb:c5:19:f4:93:0c:f0:9c:
         c1:16:09:88:a5:04:06:97:c2:c6:53:f1:0c:95:f7:af:57:22:
         cd:7d:57:aa:52:1b:ef:f0:18:46:3a:2d:bb:f8:82:3d:8c:3b:
         8e:87:c0:ec:2b:90:52:cf:d6:33:40:0f:40:ae:c9:57:9b:7a:
         0e:a8:ab:e4:89:49:b7:2e:bc:0f:1b:3d:33:44:ea:08:9e:5a:
         9d:28:f9:a5:e6:d7:f7:9e:c1:69:48:1c:a1:2f:c2:99:21:cc:
         f0:3f:07:f9:11:5c:96:96:66:38:5a:1f:20:bd:87:7b:11:91:
         1f:71:e5:e6:33:8c:f6:29:ce:b1:10:33:7f:6e:24:3a:51:cc:
         6b:5b:f1:a8:87:80:b6:c4:58:9e:de:8f:42:a8:a9:9f:66:bb:
         3e:da:99:e9:f2:5b:d8:84:9d:ed:db:49:34:8b:c7:c6:a1:c1:
         fb:80:f6:4c:d9:8c:68:d1:8c:8b:3c:f0:45:39:fe:00:0e:55:
         77:4e:f8:89:4d:b2:b0:b5:02:1b:16:8e:0e:78:3b:43:6b:24:
         54:bc:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----