Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/4hhrMDyDfOgGT_xbG8VzvHmhgpA.asa
File:                     4hhrMDyDfOgGT_xbG8VzvHmhgpA.asa (raw, json)
Hash identifier:          q2G9D7ouC7pXSONEAvnhW6gftqfvA3ns9EAOQxLV4U8=
Subject key identifier:   E2:18:6B:30:3C:83:7C:E8:06:4F:FC:5B:1B:C5:73:BC:79:A1:82:90
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019D9A7DAC8AFA7266D48ECF9E954B807DCF
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/4hhrMDyDfOgGT_xbG8VzvHmhgpA.asa
Signing time:             Fri 17 Apr 2026 08:10:20 +0000
ASPA not before:          Fri 17 Apr 2026 08:10:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209978
Providers:                AS: 199524
                          AS: 215114
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:7d:ac:8a:fa:72:66:d4:8e:cf:9e:95:4b:80:7d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Apr 17 08:10:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2186b303c837ce8064ffc5b1bc573bc79a18290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:ad:b8:27:38:c3:9e:71:6d:dc:01:76:b3:
                    3d:66:30:c3:e2:ff:d9:62:f9:d6:b1:51:64:d3:1c:
                    d2:31:44:d6:01:02:87:de:a7:b3:6c:c0:33:34:a4:
                    fe:09:5d:e8:48:99:4c:a9:2c:29:06:e5:e4:bf:d3:
                    d1:70:a9:ee:ba:e8:c6:7d:9f:e6:d0:d3:00:a9:8f:
                    a0:4f:8b:34:7d:10:f9:3e:ae:13:3f:90:d9:c3:d0:
                    c7:1d:86:cb:73:5a:28:3e:5a:1c:c4:56:bb:4c:8e:
                    9c:bd:51:1d:86:bb:8b:54:aa:35:28:26:cc:dd:0a:
                    5e:d8:fb:5b:a7:1d:a1:47:c1:d2:11:a6:07:bf:2c:
                    74:74:a9:60:10:65:b7:24:03:4d:bb:4b:09:bf:cb:
                    a4:29:15:67:9a:9b:6c:a8:77:62:01:90:52:cd:b6:
                    0b:c9:2d:f4:9e:7c:af:ab:57:d4:35:56:a7:56:25:
                    ac:95:f7:00:8b:83:73:1b:c1:6a:c1:de:1a:cd:9b:
                    ba:97:dc:59:50:27:8c:ec:95:66:5b:84:ad:fe:1c:
                    54:92:1d:1e:b3:af:52:11:ef:eb:b5:b4:2a:af:78:
                    3c:60:db:b3:8b:95:87:0b:7f:c7:9c:27:2d:d6:0d:
                    c6:40:ef:76:ba:9a:ca:3c:d2:3c:3f:c3:2a:f3:dd:
                    80:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:18:6B:30:3C:83:7C:E8:06:4F:FC:5B:1B:C5:73:BC:79:A1:82:90
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/4hhrMDyDfOgGT_xbG8VzvHmhgpA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209978

    Signature Algorithm: sha256WithRSAEncryption
         de:90:e1:9e:29:50:e8:cc:9f:40:f9:84:26:19:aa:c7:04:a6:
         da:25:9f:84:2c:f2:e8:a9:4c:e5:e4:22:f0:af:b9:15:bd:0a:
         16:aa:be:1d:8a:26:03:e3:cf:f9:de:b4:2c:bd:19:9b:38:34:
         7b:f5:de:13:b0:84:81:1b:0b:39:ba:ad:e9:b8:b8:c8:00:50:
         b5:3a:b5:1b:d0:8b:71:29:34:9c:39:7d:af:e5:f7:70:d3:27:
         39:a6:2d:1c:a9:d6:04:ca:12:7d:74:4c:2c:ae:a9:40:5d:4c:
         26:c9:31:f0:68:25:32:71:82:9e:e4:8b:d3:62:be:c5:eb:a2:
         46:77:fa:71:bd:7f:ec:d0:5f:f2:e5:11:b2:3f:a5:cc:43:1b:
         48:85:74:54:a0:1c:47:bd:66:58:10:16:57:c2:a8:27:3e:73:
         6b:bd:18:92:5c:83:5b:8f:5b:0d:da:d3:95:0e:f1:71:c2:af:
         f1:86:e3:d9:59:40:71:95:05:01:a9:f6:0b:21:8d:81:fb:42:
         7d:f8:88:e8:4a:3f:85:70:02:18:88:9f:e9:35:6c:81:9e:ba:
         38:97:b2:85:fe:c8:3f:f4:fb:00:9c:0d:1f:62:78:d3:87:a6:
         03:2d:16:50:ea:a3:65:2b:43:71:a6:83:8d:f1:5f:77:7a:6f:
         85:94:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 11:22:23 2026 by rpki-client