Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa
File:                     MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa (raw, json)
Hash identifier:          wfWinCwDhzmsC0zOg51AT7GSB/rtsiDVC/qy5SZCJIw=
Subject key identifier:   30:A5:D4:16:59:0C:0A:C8:D2:8E:CF:A8:D8:D4:25:AC:76:0F:D2:1D
Certificate issuer:       /CN=9f000a7e27d714872984fae378875af65be4056c
Certificate serial:       019FE7B5AEB752398F239E96388030E59737
Authority key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa
Signing time:             Sun 09 Aug 2026 18:07:51 +0000
ASPA not before:          Sun 09 Aug 2026 18:07:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209552
Providers:                AS: 6939
                          AS: 41051
                          AS: 50952
                          AS: 214757
                          AS: 215638
                          AS: 393577
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e7:b5:ae:b7:52:39:8f:23:9e:96:38:80:30:e5:97:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f000a7e27d714872984fae378875af65be4056c
        Validity
            Not Before: Aug  9 18:07:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30a5d416590c0ac8d28ecfa8d8d425ac760fd21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:e7:f6:68:eb:5d:6f:0c:21:06:e1:4a:65:
                    69:59:63:5b:ed:02:ca:23:d9:3e:f5:b6:c7:ec:21:
                    84:11:8e:52:ac:16:d9:25:1f:7c:7a:69:15:70:a1:
                    a5:0c:d5:9f:de:25:1c:44:26:f3:99:57:29:46:9c:
                    bd:4f:6a:35:ad:65:da:e4:f1:cd:a1:13:3c:b3:3b:
                    03:03:3d:cd:ab:c7:7c:1b:ec:32:f6:ae:23:bf:62:
                    8f:47:c6:36:4b:4e:95:18:7d:1e:e8:2f:06:c0:95:
                    05:96:fc:c1:04:77:f1:e9:22:be:b3:43:6e:81:e8:
                    cc:3f:52:53:4f:73:73:1d:3f:8c:78:b0:a2:02:a9:
                    54:9f:dc:e1:b9:cd:29:cf:e1:fd:0d:4d:dc:52:b5:
                    b5:cd:1b:8a:0b:d0:66:ff:ae:3d:45:ae:21:a7:23:
                    2e:99:a1:8a:1b:3a:bd:b6:b8:64:72:e3:c3:26:52:
                    25:fa:25:e1:69:ab:2d:dd:28:18:79:d8:27:76:49:
                    47:60:ff:5d:09:b1:87:ef:c2:5e:9c:8c:a4:62:4d:
                    45:53:da:41:86:2b:03:83:3f:95:b9:64:c3:7d:17:
                    64:d4:9e:20:ac:51:c3:fb:09:9a:85:17:8c:46:5d:
                    d6:66:4c:54:a7:d2:3b:95:fd:8b:72:f3:63:d3:ed:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A5:D4:16:59:0C:0A:C8:D2:8E:CF:A8:D8:D4:25:AC:76:0F:D2:1D
            X509v3 Authority Key Identifier:
                keyid:9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/MKXUFlkMCsjSjs-o2NQlrHYP0h0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209552

    Signature Algorithm: sha256WithRSAEncryption
         89:70:0b:4c:c9:24:4e:db:ea:cc:4e:a9:28:47:97:b4:db:aa:
         b1:02:74:de:df:99:13:17:88:d4:12:e9:6e:b7:b2:97:eb:0d:
         cb:c2:e7:15:a6:5d:3c:90:c1:7b:2f:24:7a:20:d4:66:be:0c:
         b7:8d:d9:13:c7:9f:19:bf:2d:78:dc:0f:32:a0:7b:97:94:d3:
         68:76:91:07:46:c9:72:cd:61:76:8d:54:5c:5e:69:57:e7:80:
         f6:e3:4c:25:65:e5:28:5c:da:41:04:83:c9:94:8b:2d:22:28:
         36:1d:83:af:0a:53:62:b3:52:8b:ea:97:ba:a6:7f:27:af:e3:
         df:4b:a0:6b:fd:f3:ca:d5:27:e6:e9:e3:12:64:f9:6a:2b:93:
         79:2b:c3:35:12:2b:72:3a:57:6f:b2:7e:ee:25:ae:19:5e:dd:
         cf:e1:fb:84:7a:b2:79:b7:c1:8a:8c:8f:41:75:7e:0d:f7:dd:
         74:b1:ad:06:72:77:83:33:85:1e:a5:08:24:6c:30:96:0e:fe:
         72:43:7c:7e:d2:90:f4:91:87:32:91:81:b1:eb:84:a0:ec:b8:
         85:8e:d1:6f:88:67:58:c2:2f:8c:11:7b:98:83:30:18:94:03:
         54:1b:de:f6:80:29:5a:a9:05:d4:b7:aa:42:38:70:19:3f:b8:
         8d:94:a2:57
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/nta63UjmPI56WOIAw5Zc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDAwYTdlMjdkNzE0ODcyOTg0ZmFlMzc4ODc1YWY2NWJl
NDA1NmMwHhcNMjYwODA5MTgwNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGE1ZDQxNjU5MGMwYWM4ZDI4ZWNmYThkOGQ0MjVhYzc2MGZkMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKHn9mjrXW8MIQbhSmVpWWNb7QLK
I9k+9bbH7CGEEY5SrBbZJR98emkVcKGlDNWf3iUcRCbzmVcpRpy9T2o1rWXa5PHN
oRM8szsDAz3Nq8d8G+wy9q4jv2KPR8Y2S06VGH0e6C8GwJUFlvzBBHfx6SK+s0Nu
gejMP1JTT3NzHT+MeLCiAqlUn9zhuc0pz+H9DU3cUrW1zRuKC9Bm/649Ra4hpyMu
maGKGzq9trhkcuPDJlIl+iXhaast3SgYedgndklHYP9dCbGH78JenIykYk1FU9pB
hisDgz+VuWTDfRdk1J4grFHD+wmahReMRl3WZkxUp9I7lf2LcvNj0+2iJwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDCl1BZZDArI0o7PqNjUJax2D9IdMB8GA1UdIwQY
MBaAFJ8ACn4n1xSHKYT643iHWvZb5AVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndBS2ZpZlhGSWNwaFByamVJZGE5bHZrQld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82YjJhNTgtYmVjYy00OWJjLThkODQt
YTAzODkyZmMzNDBiLzEvTUtYVUZsa01Dc2pTanMtbzJOUWxySFlQMGgwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82YjJhNTgtYmVjYy00OWJjLThkODQtYTAzODkyZmMzNDBi
LzEvbndBS2ZpZlhGSWNwaFByamVJZGE5bHZrQld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMykDANBgkqhkiG
9w0BAQsFAAOCAQEAiXALTMkkTtvqzE6pKEeXtNuqsQJ03t+ZExeI1BLpbreyl+sN
y8LnFaZdPJDBey8keiDUZr4Mt43ZE8efGb8teNwPMqB7l5TTaHaRB0bJcs1hdo1U
XF5pV+eA9uNMJWXlKFzaQQSDyZSLLSIoNh2DrwpTYrNSi+qXuqZ/J6/j30uga/3z
ytUn5unjEmT5aiuTeSvDNRIrcjpXb7J+7iWuGV7dz+H7hHqyebfBioyPQXV+Dffd
dLGtBnJ3gzOFHqUIJGwwlg7+ckN8ftKQ9JGHMpGBseuEoOy4hY7Rb4hnWMIvjBF7
mIMwGJQDVBve9oApWqkF1LeqQjhwGT+4jZSiVw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:21 2026 by rpki-client