Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/GeZC1hcbpJu21FuvM78X-6jBsEE.asa
File:                     GeZC1hcbpJu21FuvM78X-6jBsEE.asa (raw, json)
Hash identifier:          /sd8wtX0Lk11Ts9xSoJhwy+7LHXvIREISLh/WsrJ9vU=
Subject key identifier:   19:E6:42:D6:17:1B:A4:9B:B6:D4:5B:AF:33:BF:17:FB:A8:C1:B0:41
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019DF99877D38D9ADF18AAA03867B7249F69
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/GeZC1hcbpJu21FuvM78X-6jBsEE.asa
Signing time:             Tue 05 May 2026 19:23:32 +0000
ASPA not before:          Tue 05 May 2026 19:23:32 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 205941
                          AS: 213449
                          AS: 214757
                          AS: 214819
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:98:77:d3:8d:9a:df:18:aa:a0:38:67:b7:24:9f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: May  5 19:23:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=19e642d6171ba49bb6d45baf33bf17fba8c1b041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:48:fe:45:14:64:99:c5:d5:43:33:0d:df:
                    53:56:ee:3c:a0:04:67:c1:02:e3:ce:f2:18:78:71:
                    bc:51:74:01:24:30:78:ae:55:41:7f:d3:4a:b7:96:
                    fa:11:c9:56:99:02:21:91:8c:35:cd:67:cd:34:ca:
                    0f:b9:4c:e8:fd:88:5a:e9:e9:32:1a:ad:d1:9d:11:
                    e1:45:1e:a2:92:32:3e:da:05:ba:42:6f:ac:c0:48:
                    0c:de:76:6c:b0:40:1a:a6:74:15:d8:0f:03:8d:4f:
                    9b:77:d0:77:35:87:79:c4:a3:b3:46:55:37:96:d1:
                    03:a4:bd:e8:7d:2c:f1:b6:68:f4:9b:52:6e:12:aa:
                    53:df:e8:60:64:f6:66:90:d8:47:41:e8:3b:61:dd:
                    e7:01:69:d3:60:64:a1:1f:65:ad:d3:03:59:34:b3:
                    6e:36:ae:10:9d:57:f2:82:71:5b:63:be:f7:f4:f3:
                    03:4d:65:3e:fa:31:72:d5:78:d8:fc:67:7c:4c:43:
                    31:33:fa:90:8e:c5:64:e2:36:5f:c2:33:2a:b2:3a:
                    fa:4c:30:82:23:57:eb:32:c5:82:56:12:57:ef:dd:
                    50:7e:93:91:13:22:1f:dc:f5:47:b4:87:34:0b:db:
                    86:6a:f6:68:4b:31:0c:c8:8b:e1:27:b2:98:e9:11:
                    fb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E6:42:D6:17:1B:A4:9B:B6:D4:5B:AF:33:BF:17:FB:A8:C1:B0:41
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/GeZC1hcbpJu21FuvM78X-6jBsEE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:c2:91:17:95:92:f3:c3:d0:ae:b2:3c:df:9c:44:97:b5:
         44:12:94:6c:5c:39:bf:46:f9:c1:63:fc:25:eb:a0:6f:5b:f2:
         57:b7:b9:b8:68:54:33:b2:66:0b:f3:ba:87:a4:6d:e5:c7:6b:
         29:9c:f0:2a:47:c8:1f:fc:5c:95:01:f8:d4:6f:ba:c9:76:e2:
         78:05:53:92:88:35:22:2b:3e:1f:94:ec:16:46:8d:86:e3:0a:
         94:19:a3:f0:a0:6a:64:20:1f:30:09:d2:04:c8:cb:22:fe:79:
         6f:de:19:ae:3c:e8:0a:bd:50:1b:5e:bb:63:ec:0d:4d:27:85:
         28:43:24:e8:b3:05:7d:46:f9:9c:b9:6c:6c:8f:76:d3:94:25:
         eb:55:ab:5a:a1:21:36:a4:b4:ce:4b:cc:14:78:ee:75:38:69:
         34:64:56:3d:f1:c7:a1:51:39:2b:c4:2d:b3:5c:a8:5e:c3:9b:
         c0:fa:16:e6:02:ff:68:71:01:56:93:be:23:2b:5f:ad:78:2d:
         1d:9e:90:ad:65:99:d0:dc:70:66:81:fc:2b:30:d7:66:1e:04:
         59:94:10:98:34:56:66:a1:1a:b0:69:05:fa:cf:3a:66:f6:1d:
         a6:33:d0:fe:ae:1a:51:90:e2:60:ea:47:d9:30:1c:e5:30:09:
         f1:a5:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:09 2026 by rpki-client