Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/AIp9_RM31K0wW6st5d3M-6Aj0t0.asa
File:                     AIp9_RM31K0wW6st5d3M-6Aj0t0.asa (raw, json)
Hash identifier:          1ayURs+KBoPQdd0mGltNGGJP12vnONErmbl882xqTKs=
Subject key identifier:   00:8A:7D:FD:13:37:D4:AD:30:5B:AB:2D:E5:DD:CC:FB:A0:23:D2:DD
Certificate issuer:       /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial:       019C6D36C9312129B268B4DE87F5D6784FC0
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/AIp9_RM31K0wW6st5d3M-6Aj0t0.asa
Signing time:             Tue 17 Feb 2026 20:07:12 +0000
ASPA not before:          Tue 17 Feb 2026 20:07:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207992
Providers:                AS: 35625
                          AS: 47160
                          AS: 62000
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:6d:36:c9:31:21:29:b2:68:b4:de:87:f5:d6:78:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
        Validity
            Not Before: Feb 17 20:07:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=008a7dfd1337d4ad305bab2de5ddccfba023d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:1e:e4:8f:8c:05:64:5a:b6:98:f6:c7:ec:
                    f9:c6:9d:08:17:9f:84:63:60:4f:d2:f7:66:b3:aa:
                    b9:64:e5:19:1a:11:35:8a:d6:c0:5a:2a:7f:f1:ca:
                    0a:71:d5:4a:fa:b7:eb:71:f5:8c:7e:93:01:9a:a0:
                    eb:c1:f3:13:5d:b0:f8:9a:aa:12:cc:1c:d9:33:72:
                    43:33:64:a9:5a:4a:1c:40:ae:ff:81:c9:07:15:50:
                    7a:3c:88:36:d2:03:5b:29:61:c0:50:19:c3:bb:f1:
                    5b:2f:fb:23:92:8c:b9:9b:9d:db:00:be:dc:41:84:
                    95:07:13:0d:d7:51:20:d7:30:65:59:ff:8d:49:46:
                    9e:72:ef:18:b1:b6:65:e6:0b:80:1d:f4:6d:9e:73:
                    d6:9c:f8:c2:43:86:11:9b:6b:ae:ae:a5:2b:fd:4d:
                    c7:1f:7c:ed:64:59:eb:f8:74:a8:d0:64:7e:bc:ed:
                    0d:ec:0a:cb:c9:10:28:b7:10:44:1c:f3:8d:5d:5a:
                    9b:2f:27:6d:8f:dc:13:56:cd:12:cb:c4:2b:ba:a1:
                    e7:69:ae:56:99:ca:18:67:9e:17:da:82:07:85:3d:
                    f5:e5:70:2e:ec:05:58:e1:0c:ff:0f:53:5a:e9:f1:
                    0b:47:95:30:6a:d3:a2:31:96:a2:35:84:1d:f0:24:
                    50:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:7D:FD:13:37:D4:AD:30:5B:AB:2D:E5:DD:CC:FB:A0:23:D2:DD
            X509v3 Authority Key Identifier:
                keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/AIp9_RM31K0wW6st5d3M-6Aj0t0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207992

    Signature Algorithm: sha256WithRSAEncryption
         84:67:a1:cf:2a:75:9d:70:66:0f:42:4b:52:ce:3e:cd:87:f7:
         6f:f0:0d:61:6c:76:7e:91:3c:c2:55:ae:64:2e:a3:87:81:df:
         c2:fa:28:a6:27:7b:e9:96:e4:48:86:62:d1:ca:dc:5e:0f:73:
         1b:f6:19:09:ae:53:77:a3:9e:bb:f1:38:a7:9a:e6:d9:05:e6:
         b2:7c:b4:56:cb:e0:b4:b4:8b:be:f4:f3:f7:c5:c2:9c:e2:9f:
         37:28:0f:90:ed:59:77:18:05:86:30:89:fb:51:c5:79:d7:7a:
         f1:91:21:3d:59:b5:01:df:dd:69:aa:1b:30:5f:46:a3:71:97:
         07:5b:f1:f6:93:7d:db:70:1a:ef:a1:1e:63:69:6a:fb:41:77:
         42:9e:56:37:d7:5e:bf:ee:49:9a:01:19:29:74:b5:68:07:64:
         09:ba:5a:6e:0a:67:ad:6e:83:5c:df:95:c1:6b:41:07:f7:e6:
         93:08:15:9b:ff:81:00:ae:3f:61:3c:22:3b:28:cc:ff:65:e5:
         16:80:38:56:7a:8c:5d:8a:b6:d2:49:b2:ba:e2:8d:df:12:5f:
         fb:76:0f:15:1d:9c:44:6e:27:10:dc:b6:69:91:12:8e:47:7f:
         0d:c7:b7:bf:0a:58:bb:b6:4a:a3:a0:9c:85:55:0a:33:2e:e6:
         39:66:b7:76
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZxtNskxISmyaLTeh/XWeE/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk
ODE1NmYwHhcNMjYwMjE3MjAwNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDhhN2RmZDEzMzdkNGFkMzA1YmFiMmRlNWRkY2NmYmEwMjNkMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Ue5I+MBWRatpj2x+z5xp0IF5+E
Y2BP0vdms6q5ZOUZGhE1itbAWip/8coKcdVK+rfrcfWMfpMBmqDrwfMTXbD4mqoS
zBzZM3JDM2SpWkocQK7/gckHFVB6PIg20gNbKWHAUBnDu/FbL/sjkoy5m53bAL7c
QYSVBxMN11Eg1zBlWf+NSUaecu8YsbZl5guAHfRtnnPWnPjCQ4YRm2uurqUr/U3H
H3ztZFnr+HSo0GR+vO0N7ArLyRAotxBEHPONXVqbLydtj9wTVs0Sy8QruqHnaa5W
mcoYZ54X2oIHhT315XAu7AVY4Qz/D1Na6fELR5UwatOiMZaiNYQd8CRQ0QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFACKff0TN9StMFurLeXdzPugI9LdMB8GA1UdIwQY
MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt
ZDQ3MmU0OWY1OTFlLzEvQUlwOV9STTMxSzB3VzZzdDVkM00tNkFqMHQwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl
LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMseDANBgkqhkiG
9w0BAQsFAAOCAQEAhGehzyp1nXBmD0JLUs4+zYf3b/ANYWx2fpE8wlWuZC6jh4Hf
wvoopid76ZbkSIZi0crcXg9zG/YZCa5Td6Oeu/E4p5rm2QXmsny0VsvgtLSLvvTz
98XCnOKfNygPkO1ZdxgFhjCJ+1HFedd68ZEhPVm1Ad/daaobMF9Go3GXB1vx9pN9
23Aa76EeY2lq+0F3Qp5WN9dev+5JmgEZKXS1aAdkCbpabgpnrW6DXN+VwWtBB/fm
kwgVm/+BAK4/YTwiOyjM/2XlFoA4VnqMXYq20kmyuuKN3xJf+3YPFR2cRG4nENy2
aZESjkd/Dce3vwpYu7ZKo6CchVUKMy7mOWa3dg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:02 2026 by rpki-client