Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/ffpcvugPIwnXkSiO1M4dNL_Qguc.asa
File:                     ffpcvugPIwnXkSiO1M4dNL_Qguc.asa (raw, json)
Hash identifier:          qLiAEYMfUER4ToU97ut1DBJqLMRcUXL+g8tguEsdh7w=
Subject key identifier:   7D:FA:5C:BE:E8:0F:23:09:D7:91:28:8E:D4:CE:1D:34:BF:D0:82:E7
Certificate issuer:       /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial:       01A066E553A008ACD98E8A7BC25689D2BF60
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/ffpcvugPIwnXkSiO1M4dNL_Qguc.asa
Signing time:             Thu 03 Sep 2026 10:51:40 +0000
ASPA not before:          Thu 03 Sep 2026 10:51:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219421
Providers:                AS: 11967
                          AS: 31898
                          AS: 41051
                          AS: 47272
                          AS: 52025
                          AS: 209533
                          AS: 212895
                          AS: 214205
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:66:e5:53:a0:08:ac:d9:8e:8a:7b:c2:56:89:d2:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
        Validity
            Not Before: Sep  3 10:51:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7dfa5cbee80f2309d791288ed4ce1d34bfd082e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:4e:e2:ef:9f:28:c6:9b:ab:9b:1c:7a:fa:
                    96:9b:c4:90:c3:93:26:10:5a:1b:f1:a4:41:c3:8c:
                    23:51:8e:82:b2:f5:af:1c:9b:32:84:22:5c:87:86:
                    ab:3c:51:52:71:6e:07:47:0f:ff:68:d2:9c:dd:8d:
                    a5:9f:ff:b5:6f:08:57:5c:8a:bb:76:c5:f5:4c:0b:
                    9b:e5:4c:af:8e:52:99:6f:47:81:05:ab:28:fa:43:
                    bb:cf:42:bc:bc:41:89:e0:3c:37:b1:81:bb:ed:91:
                    da:66:3e:71:87:ae:95:89:dc:dc:9d:c8:4e:cd:90:
                    b7:fd:ee:68:8e:11:c5:6d:fe:bc:82:d1:20:31:fc:
                    13:71:2a:0f:8e:5b:e0:fe:8f:7f:7c:49:0b:b5:c1:
                    7f:83:89:47:28:73:51:e7:6f:6b:dc:cd:16:b8:9c:
                    b9:82:25:15:91:20:d6:d0:11:7d:eb:69:3a:cd:03:
                    fc:a4:ab:e1:0c:cc:57:12:fc:af:ef:a2:2c:05:e9:
                    b0:13:50:9a:8b:d3:b6:57:69:c6:6d:5b:04:b9:ae:
                    f4:0f:0d:ce:cd:2f:e8:14:bf:85:b7:33:01:f4:ff:
                    c5:3c:02:81:56:0e:f8:dc:4d:3e:59:ab:f0:cf:f6:
                    a1:6b:6f:56:7c:72:85:06:4e:1d:dc:a9:d5:25:d0:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FA:5C:BE:E8:0F:23:09:D7:91:28:8E:D4:CE:1D:34:BF:D0:82:E7
            X509v3 Authority Key Identifier:
                keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/ffpcvugPIwnXkSiO1M4dNL_Qguc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219421

    Signature Algorithm: sha256WithRSAEncryption
         ae:c4:e9:33:ee:ad:c7:d0:d2:6e:af:f7:89:a1:b9:8b:2e:e6:
         bc:27:22:94:58:1f:2e:b3:e9:53:bc:a4:1b:42:e4:38:d5:b5:
         30:6e:99:75:0d:67:a3:4d:37:b3:45:44:c0:be:7f:b8:8b:0c:
         80:4e:bc:5a:7e:42:d7:67:c5:ab:a0:0c:da:9c:49:98:76:b4:
         bd:84:32:38:c6:a5:b1:61:cb:4c:98:18:d3:73:23:66:3b:8c:
         e9:77:cf:a2:82:9a:86:a4:3b:53:a4:33:8b:d3:d6:ec:e0:c0:
         76:8a:02:67:f1:1f:c0:45:72:b9:de:1c:b6:7f:40:e7:4e:7d:
         e2:5b:a9:0c:4c:74:34:5b:1f:67:e2:a2:4b:06:6f:36:8f:72:
         f6:64:7a:8c:78:ef:3c:79:8e:c1:03:b2:92:e4:69:a7:91:4f:
         27:17:38:1d:7c:db:38:90:38:9d:e9:ce:79:a0:15:de:8f:b9:
         ef:62:32:dc:13:d9:68:06:79:a3:44:9c:3b:c8:88:ea:17:c6:
         c1:c8:16:ca:53:2f:76:4d:11:82:e4:2b:d6:92:69:8e:a9:c5:
         25:01:9b:96:24:bc:16:30:a4:85:60:54:1b:14:c8:d8:8f:5a:
         ea:1b:eb:d2:3e:ef:f9:ed:aa:f0:e5:f0:ce:02:c5:79:9b:20:
         81:ac:68:b8
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBm5VOgCKzZjop7wlaJ0r9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjFmYzBmMTY1YjQ2NDhiNzVmZGZhMzgwZDIzNzg5Yjk2
ZmViNTIwHhcNMjYwOTAzMTA1MTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGZhNWNiZWU4MGYyMzA5ZDc5MTI4OGVkNGNlMWQzNGJmZDA4MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvdO4u+fKMabq5scevqWm8SQw5Mm
EFob8aRBw4wjUY6CsvWvHJsyhCJch4arPFFScW4HRw//aNKc3Y2ln/+1bwhXXIq7
dsX1TAub5UyvjlKZb0eBBaso+kO7z0K8vEGJ4Dw3sYG77ZHaZj5xh66VidzcnchO
zZC3/e5ojhHFbf68gtEgMfwTcSoPjlvg/o9/fEkLtcF/g4lHKHNR529r3M0WuJy5
giUVkSDW0BF962k6zQP8pKvhDMxXEvyv76IsBemwE1Cai9O2V2nGbVsEua70Dw3O
zS/oFL+FtzMB9P/FPAKBVg743E0+Wavwz/aha29WfHKFBk4d3KnVJdB3KQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFH36XL7oDyMJ15EojtTOHTS/0ILnMB8GA1UdIwQY
MBaAFIth/A8WW0ZIt1/fo4DSN4m5b+tSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJIOER4WmJSa2kzWDktamdOSTNpYmx2NjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iODI3NDctNzBhZi00ZDgwLWE4MWYt
YjZlMTg1ZTE1NWE5LzEvZmZwY3Z1Z1BJd25Ya1NpTzFNNGROTF9RZ3VjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iODI3NDctNzBhZi00ZDgwLWE4MWYtYjZlMTg1ZTE1NWE5
LzEvaTJIOER4WmJSa2kzWDktamdOSTNpYmx2NjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNZHTANBgkqhkiG
9w0BAQsFAAOCAQEArsTpM+6tx9DSbq/3iaG5iy7mvCcilFgfLrPpU7ykG0LkONW1
MG6ZdQ1no003s0VEwL5/uIsMgE68Wn5C12fFq6AM2pxJmHa0vYQyOMalsWHLTJgY
03MjZjuM6XfPooKahqQ7U6Qzi9PW7ODAdooCZ/EfwEVyud4ctn9A50594lupDEx0
NFsfZ+KiSwZvNo9y9mR6jHjvPHmOwQOykuRpp5FPJxc4HXzbOJA4nenOeaAV3o+5
72Iy3BPZaAZ5o0ScO8iI6hfGwcgWylMvdk0RguQr1pJpjqnFJQGbliS8FjCkhWBU
GxTI2I9a6hvr0j7v+e2q8OXwzgLFeZsggaxouA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:08 2026 by rpki-client