Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/AwjHZOUDzV2do1pKjQJTigNmWvY.asa
File:                     AwjHZOUDzV2do1pKjQJTigNmWvY.asa (raw, json)
Hash identifier:          AVjOvrWcyb3LLZ1yPyNBczaWWyURv9WbV2eyywQTRm4=
Subject key identifier:   03:08:C7:64:E5:03:CD:5D:9D:A3:5A:4A:8D:02:53:8A:03:66:5A:F6
Certificate issuer:       /CN=f19261baf46e4336d6f045a38302807a15114f28
Certificate serial:       01A052FA54BDE7D2D20409409691A6A4860A
Authority key identifier: F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/AwjHZOUDzV2do1pKjQJTigNmWvY.asa
Signing time:             Sun 30 Aug 2026 14:02:12 +0000
ASPA not before:          Sun 30 Aug 2026 14:02:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214909
Providers:                AS: 47272
                          AS: 56655
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 212514
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:52:fa:54:bd:e7:d2:d2:04:09:40:96:91:a6:a4:86:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19261baf46e4336d6f045a38302807a15114f28
        Validity
            Not Before: Aug 30 14:02:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0308c764e503cd5d9da35a4a8d02538a03665af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:82:f7:ef:3e:75:eb:6c:10:7c:0c:78:6c:
                    88:00:d3:ec:98:89:b5:ba:98:4f:b9:8f:33:1e:37:
                    5d:42:05:2d:00:d5:e5:fa:52:39:fe:38:14:8f:20:
                    18:55:54:b1:bc:c3:10:c0:1e:b1:62:d8:82:4d:61:
                    e3:a5:2f:f0:48:4c:3f:15:65:bc:65:0a:51:9c:20:
                    df:e9:90:6b:87:37:09:98:80:99:ee:86:7f:b3:59:
                    50:4b:cd:8e:8f:73:98:c8:75:17:ae:f1:f4:bb:b5:
                    c3:82:21:1f:56:25:c5:64:a2:53:73:64:58:e2:36:
                    de:35:7f:95:42:2a:7a:8d:13:2c:15:a4:b3:ee:fb:
                    14:25:20:5a:14:76:94:8e:4d:f5:3c:e0:69:19:26:
                    9c:2c:37:75:72:a3:e2:42:bb:e6:e9:d1:11:1f:15:
                    1d:2d:64:f4:9b:3e:6d:df:3a:96:c1:3b:75:57:f0:
                    42:86:0c:5a:7a:31:10:a8:4a:62:e2:b7:98:6e:86:
                    e7:32:3d:af:fd:c3:99:de:ad:d1:65:d4:67:2d:1e:
                    53:4a:c7:8c:00:51:9a:74:88:9b:f8:69:8d:0b:cb:
                    09:02:96:8d:4f:96:56:cc:fa:6c:91:c1:1f:a7:a0:
                    a4:c9:72:08:ac:9a:ad:44:3d:59:c5:c2:64:8c:93:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:08:C7:64:E5:03:CD:5D:9D:A3:5A:4A:8D:02:53:8A:03:66:5A:F6
            X509v3 Authority Key Identifier:
                keyid:F1:92:61:BA:F4:6E:43:36:D6:F0:45:A3:83:02:80:7A:15:11:4F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZJhuvRuQzbW8EWjgwKAehURTyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/AwjHZOUDzV2do1pKjQJTigNmWvY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/8ZJhuvRuQzbW8EWjgwKAehURTyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214909

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:79:d8:d6:65:a9:7b:72:2d:a4:05:7a:26:0d:eb:3d:fe:
         74:16:44:d5:77:49:a7:31:83:8a:bf:e6:d7:c7:d9:fd:a3:d2:
         95:7c:dc:33:b4:ce:a1:61:2f:b8:b3:5e:dc:11:30:a8:48:5e:
         9a:46:5f:2d:3c:f7:9e:7d:ba:99:a7:ba:7a:1c:73:80:81:8b:
         46:7b:92:d8:62:2f:49:fb:c0:c0:46:f0:ad:b1:d5:a4:c4:b4:
         59:22:4a:ae:d3:d6:a6:6b:1d:8a:70:bc:38:74:ff:ff:e1:ec:
         19:a5:8f:47:11:8c:7b:ec:33:65:bc:40:ce:24:87:54:d0:28:
         04:ab:a3:ed:50:03:c1:06:27:7f:4b:be:51:c1:f0:27:98:e3:
         ea:d8:d9:aa:18:ce:67:f6:b9:a3:12:ad:93:e6:46:30:59:90:
         91:11:5b:58:51:ea:c2:a5:73:2f:8d:2c:60:08:05:4a:33:5e:
         c3:bf:d6:4c:15:5d:9c:e9:37:fb:dc:3d:f6:c7:5c:59:08:53:
         6b:24:91:11:d2:e3:fb:32:f9:45:5f:88:34:85:d4:87:e1:0a:
         fc:d9:01:82:3a:c3:f8:c0:8d:13:10:f6:f4:dc:84:43:4f:78:
         b8:2a:a9:e9:c0:2e:50:f2:7d:c7:f9:94:92:8d:a8:59:06:3e:
         74:f0:dc:1a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBS+lS959LSBAlAlpGmpIYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTI2MWJhZjQ2ZTQzMzZkNmYwNDVhMzgzMDI4MDdhMTUx
MTRmMjgwHhcNMjYwODMwMTQwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzA4Yzc2NGU1MDNjZDVkOWRhMzVhNGE4ZDAyNTM4YTAzNjY1YWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PaC9+8+detsEHwMeGyIANPsmIm1
uphPuY8zHjddQgUtANXl+lI5/jgUjyAYVVSxvMMQwB6xYtiCTWHjpS/wSEw/FWW8
ZQpRnCDf6ZBrhzcJmICZ7oZ/s1lQS82Oj3OYyHUXrvH0u7XDgiEfViXFZKJTc2RY
4jbeNX+VQip6jRMsFaSz7vsUJSBaFHaUjk31POBpGSacLDd1cqPiQrvm6dERHxUd
LWT0mz5t3zqWwTt1V/BChgxaejEQqEpi4reYbobnMj2v/cOZ3q3RZdRnLR5TSseM
AFGadIib+GmNC8sJApaNT5ZWzPpskcEfp6CkyXIIrJqtRD1ZxcJkjJMUsQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAMIx2TlA81dnaNaSo0CU4oDZlr2MB8GA1UdIwQY
MBaAFPGSYbr0bkM21vBFo4MCgHoVEU8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpKaHV2UnVRemJXOEVXamd3S0FlaFVSVHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ODllODItNDc2OS00NmY4LWI0ZDYt
NTkyMGI5ODE0NDE5LzEvQXdqSFpPVUR6VjJkbzFwS2pRSlRpZ05tV3ZZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ODllODItNDc2OS00NmY4LWI0ZDYtNTkyMGI5ODE0NDE5
LzEvOFpKaHV2UnVRemJXOEVXamd3S0FlaFVSVHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHfTANBgkqhkiG
9w0BAQsFAAOCAQEAKkx52NZlqXtyLaQFeiYN6z3+dBZE1XdJpzGDir/m18fZ/aPS
lXzcM7TOoWEvuLNe3BEwqEhemkZfLTz3nn26mae6ehxzgIGLRnuS2GIvSfvAwEbw
rbHVpMS0WSJKrtPWpmsdinC8OHT//+HsGaWPRxGMe+wzZbxAziSHVNAoBKuj7VAD
wQYnf0u+UcHwJ5jj6tjZqhjOZ/a5oxKtk+ZGMFmQkRFbWFHqwqVzL40sYAgFSjNe
w7/WTBVdnOk3+9w99sdcWQhTaySREdLj+zL5RV+INIXUh+EK/NkBgjrD+MCNExD2
9NyEQ094uCqp6cAuUPJ9x/mUko2oWQY+dPDcGg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:54 2026 by rpki-client