Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/gbt_B8vVXTypNEnXce8HlY3ojHQ.asa
File:                     gbt_B8vVXTypNEnXce8HlY3ojHQ.asa (raw, json)
Hash identifier:          /VQ5E20iFSb11ZwdrgV0PkgeT2bkuefW1BPmr+djQBs=
Subject key identifier:   81:BB:7F:07:CB:D5:5D:3C:A9:34:49:D7:71:EF:07:95:8D:E8:8C:74
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       019DF3DB4FD4890618B248871D443E119A97
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/gbt_B8vVXTypNEnXce8HlY3ojHQ.asa
Signing time:             Mon 04 May 2026 16:38:49 +0000
ASPA not before:          Mon 04 May 2026 16:38:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200625
Providers:                AS: 212895
                          AS: 215467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f3:db:4f:d4:89:06:18:b2:48:87:1d:44:3e:11:9a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: May  4 16:38:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=81bb7f07cbd55d3ca93449d771ef07958de88c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:dd:22:5c:a4:fa:fd:39:e2:c1:5b:6b:f4:
                    5e:66:49:25:f7:0f:5a:a8:32:83:b4:21:15:5e:c9:
                    f1:b4:c6:85:db:d1:c6:31:96:d8:b2:47:02:f6:e6:
                    08:ff:19:86:b1:67:80:f7:4d:66:18:06:46:ff:47:
                    c2:9a:04:c9:0c:7e:fe:93:af:15:b8:98:88:01:a7:
                    5d:ff:35:35:c3:77:cd:5f:26:e4:2c:b3:5b:84:b8:
                    ce:79:6a:0e:e9:7a:0e:2e:e8:00:a2:08:9e:de:40:
                    71:c8:4f:6a:6d:9b:4b:f8:18:d2:f1:5b:24:4e:a9:
                    ac:40:8e:16:dd:be:4a:de:31:72:5d:c4:8a:b9:d8:
                    d6:53:40:25:93:dd:76:3a:0f:99:d2:1a:21:b3:1b:
                    a5:b8:dc:ba:6f:b9:a0:c8:16:01:f0:f0:90:8d:65:
                    47:00:2e:1d:6d:8e:07:17:86:cf:e1:16:ad:44:f2:
                    48:55:53:07:5b:09:5c:9a:77:c5:32:ea:27:11:be:
                    9a:72:0c:fb:c6:71:cc:ba:82:6a:99:a7:73:34:48:
                    9c:ef:d7:35:01:3f:0f:68:9f:72:5c:7d:a8:de:7b:
                    a9:13:7d:30:2b:58:17:6e:1b:57:84:4f:ac:b1:f7:
                    34:86:15:1b:3a:df:33:1a:ea:da:b1:00:25:2d:2b:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BB:7F:07:CB:D5:5D:3C:A9:34:49:D7:71:EF:07:95:8D:E8:8C:74
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/gbt_B8vVXTypNEnXce8HlY3ojHQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200625

    Signature Algorithm: sha256WithRSAEncryption
         32:83:8a:16:f6:81:28:37:df:e9:49:57:39:3f:24:0c:b3:08:
         7a:b3:ca:26:c7:37:70:45:61:93:be:97:11:d6:21:76:7d:15:
         e2:52:b8:84:1b:79:08:b0:2f:2a:a7:13:ac:98:e9:8b:54:62:
         34:2e:41:30:a3:d7:26:ac:25:8e:68:86:4e:b1:11:aa:9b:62:
         ab:14:b4:15:11:1f:87:63:4a:e0:c4:d4:7d:ef:24:68:ea:3c:
         13:66:11:98:4f:1e:a7:25:35:f3:58:24:84:f9:f2:6a:5c:03:
         e8:4d:0f:fb:ef:8b:2b:c5:80:2f:f0:da:56:ba:f7:bc:6f:22:
         58:52:1c:28:5c:b3:eb:30:74:58:c3:a3:08:3a:e0:36:a4:81:
         41:bd:cb:16:e7:f1:bc:68:63:d7:6c:3d:13:9b:7a:fa:c8:f4:
         b2:1f:05:92:94:1d:e2:1a:62:d9:42:03:b4:60:5b:02:6a:ae:
         98:f1:e1:4e:a9:6e:12:ab:fa:cc:9c:50:6f:37:35:62:56:3c:
         0a:31:8a:e8:ab:03:1e:e2:4d:83:00:4d:d6:23:b3:3b:13:80:
         74:47:0f:ef:fa:22:23:0c:01:cb:99:e9:6f:6d:27:df:46:99:
         ae:01:7f:b6:c5:d9:f0:bf:e2:30:17:51:8c:c5:9f:8f:e3:a8:
         eb:87:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:19 2026 by rpki-client