Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/1-NBpY510vqF2qMVY3oMXM3A9Gl8.asa
File:                     1-NBpY510vqF2qMVY3oMXM3A9Gl8.asa (raw, json)
Hash identifier:          z2xAwmjVjy4CnWbYBOYKee0sNevfcPGJCAb69p6hRWI=
Subject key identifier:   F8:D0:69:63:9D:74:BE:A1:76:A8:C5:58:DE:83:17:33:70:3D:1A:5F
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       019F58B45F2EC934512089A2B49A611F4707
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/1-NBpY510vqF2qMVY3oMXM3A9Gl8.asa
Signing time:             Sun 12 Jul 2026 23:40:43 +0000
ASPA not before:          Sun 12 Jul 2026 23:40:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200482
Providers:                AS: 45014
                          AS: 48314
                          AS: 49192
                          AS: 50629
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:58:b4:5f:2e:c9:34:51:20:89:a2:b4:9a:61:1f:47:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Jul 12 23:40:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8d069639d74bea176a8c558de831733703d1a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:be:aa:23:af:f7:41:80:44:51:6f:39:f6:
                    2f:d0:a1:e9:79:aa:fb:0a:00:ee:63:43:10:77:bc:
                    83:b9:55:18:03:a4:c4:64:ee:b6:c0:86:c3:29:03:
                    37:07:a4:ed:c2:2a:ef:4d:53:3b:42:cc:3e:d1:1a:
                    a0:a8:1f:ba:46:1c:62:df:63:f7:ae:76:9e:a8:ca:
                    1d:be:78:9e:0d:4f:78:dd:92:a5:c7:08:b4:90:8e:
                    90:27:18:4f:c8:76:98:fc:d5:db:c8:7e:bb:dd:5a:
                    25:9e:6f:5f:7c:46:56:01:76:0c:ec:10:9f:c8:18:
                    96:87:f7:5b:38:90:1e:c3:6d:4e:92:0d:08:39:7b:
                    d3:43:a7:02:9d:2d:75:88:b7:d2:89:1c:6f:bf:77:
                    b0:da:fa:d1:59:0a:cd:fc:2c:28:93:e0:2c:79:c2:
                    de:1a:56:e0:a9:07:df:6d:67:eb:84:9f:0a:20:7f:
                    5f:3d:e0:08:e5:d2:87:f2:f7:8a:96:d5:ee:23:f7:
                    4c:84:dc:de:a7:48:fe:de:4e:ae:7d:35:60:b5:bd:
                    dc:55:ec:c9:8b:0c:fc:01:24:61:9c:a1:38:64:a0:
                    86:d7:7f:30:b1:00:9f:2d:40:32:fc:2f:26:0b:6c:
                    30:51:24:9c:4c:21:c6:40:3b:e0:a9:52:bf:a2:83:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:69:63:9D:74:BE:A1:76:A8:C5:58:DE:83:17:33:70:3D:1A:5F
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/1-NBpY510vqF2qMVY3oMXM3A9Gl8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200482

    Signature Algorithm: sha256WithRSAEncryption
         29:95:f8:26:42:1c:e0:8b:c9:6a:5a:cd:55:9b:f4:81:91:22:
         68:4b:2f:1d:40:a8:3d:4f:3b:4d:1f:3a:56:4c:a1:b1:52:df:
         16:2e:8d:0e:7e:e1:b4:f2:51:f2:28:46:e9:4e:98:f8:f1:fc:
         a1:55:09:35:6c:4b:4f:78:ce:ec:c4:fb:96:8c:d7:36:77:5f:
         8d:fc:1b:57:42:2c:cc:23:f4:49:29:b2:c6:17:35:42:a5:36:
         d6:f4:75:19:eb:2a:7a:61:ec:b9:34:85:7b:f5:54:d5:40:d8:
         9c:aa:d5:e0:1a:46:f8:76:52:8a:87:5d:2e:8b:b2:1d:06:4b:
         3c:06:92:99:be:75:3a:dd:58:a3:50:71:d8:55:6f:86:30:f6:
         39:a0:cc:2e:14:a6:1b:e6:a0:c8:11:26:18:66:89:bb:01:8d:
         57:c2:e3:1d:95:8a:98:fc:aa:8d:20:da:72:87:49:27:bf:f9:
         35:e9:a8:6f:06:0a:99:96:06:3c:13:28:a9:8f:9e:57:65:a1:
         e1:2d:33:6c:c2:5e:0a:3c:55:38:1d:0e:19:d7:4e:96:45:b6:
         dd:4b:3f:bf:57:ff:08:c2:67:e1:fe:7b:09:86:66:79:a5:16:
         29:92:1d:b8:35:5a:fe:cf:41:6f:28:21:9c:34:9c:15:04:d2:
         66:40:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:14 2026 by rpki-client