Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/JJnkIZ86azq7jvZ91HGssrxnuZE.asa
File:                     JJnkIZ86azq7jvZ91HGssrxnuZE.asa (raw, json)
Hash identifier:          ftGt54l4QvaK8JWs6Qw0CopKYLzIITxVmjy16p978zo=
Subject key identifier:   24:99:E4:21:9F:3A:6B:3A:BB:8E:F6:7D:D4:71:AC:B2:BC:67:B9:91
Certificate issuer:       /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial:       01A04CED80A926C807D3744286AC58FA48C7
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/JJnkIZ86azq7jvZ91HGssrxnuZE.asa
Signing time:             Sat 29 Aug 2026 09:50:28 +0000
ASPA not before:          Sat 29 Aug 2026 09:50:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209990
Providers:                AS: 6939
                          AS: 8283
                          AS: 34927
                          AS: 52025
                          AS: 56630
                          AS: 211588
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:4c:ed:80:a9:26:c8:07:d3:74:42:86:ac:58:fa:48:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
        Validity
            Not Before: Aug 29 09:50:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2499e4219f3a6b3abb8ef67dd471acb2bc67b991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:a3:64:58:66:76:50:dc:d5:dc:a5:64:6b:
                    cd:5f:c6:48:9a:74:49:f9:48:dd:93:0f:24:35:b4:
                    bc:37:f0:7f:ec:cc:61:06:98:06:8b:08:88:49:f6:
                    5d:e9:fa:3d:4f:9a:bf:08:19:1b:cb:2d:7a:ec:51:
                    06:1a:41:57:1c:c9:05:47:26:9b:a7:90:a6:2e:1b:
                    ff:3f:c5:3c:c8:82:90:43:39:9b:3b:2a:35:d7:dc:
                    02:b8:ec:37:d4:1a:a3:3b:14:46:36:ee:50:8b:91:
                    4c:6e:45:e4:0b:bc:d0:07:3b:9e:16:48:07:16:7b:
                    77:ce:2d:21:8e:76:51:56:ca:96:9f:b1:e8:49:fb:
                    27:9d:53:47:4b:5c:0c:9b:a5:b1:53:28:f4:dc:55:
                    9a:de:7b:96:41:53:e5:39:92:58:83:1a:dd:58:79:
                    ac:54:1e:9a:b8:fb:07:cc:ce:16:c5:f3:1e:b7:9c:
                    cf:17:dd:d3:53:80:0e:6d:07:13:88:91:1a:89:de:
                    fb:34:92:67:5f:5e:86:de:61:e9:cf:71:18:d9:50:
                    9f:d6:e9:4c:e9:b1:ad:d8:3a:6b:cf:02:8d:da:9c:
                    21:5f:f0:0d:12:2f:e8:6a:e5:ef:1e:07:4b:82:e6:
                    69:d4:cd:9a:b6:ee:90:c4:9e:ea:74:fc:cb:da:b2:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:E4:21:9F:3A:6B:3A:BB:8E:F6:7D:D4:71:AC:B2:BC:67:B9:91
            X509v3 Authority Key Identifier:
                keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/JJnkIZ86azq7jvZ91HGssrxnuZE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209990

    Signature Algorithm: sha256WithRSAEncryption
         73:54:f2:54:c8:be:0b:fd:04:c6:c2:b2:c9:e0:ef:ae:88:a9:
         2b:60:b9:c1:8a:ea:8f:21:75:a5:84:d4:c9:aa:52:97:09:38:
         30:7c:43:bd:38:11:cc:c5:e4:bc:ab:b2:20:fb:37:64:b8:9e:
         d8:50:2e:d8:8c:bf:75:ee:ce:12:54:0c:43:b8:17:32:67:c9:
         80:cc:9b:ac:e0:17:af:7f:1d:4b:43:39:22:e5:3f:0a:83:5d:
         9b:8f:a5:27:b9:45:4e:6d:5c:5c:08:1e:df:de:fc:53:45:cd:
         c2:b7:df:99:10:c2:e0:4d:ba:ce:16:e7:25:c7:7b:fc:21:aa:
         f8:b6:73:db:21:d3:9e:a6:57:0e:66:eb:5d:2a:29:4c:96:bd:
         f8:3f:93:a1:c8:0c:6d:48:66:24:22:3b:b6:0a:3b:0e:02:24:
         54:04:9d:31:30:ff:3d:2c:bd:55:04:e1:e5:15:ef:33:78:0c:
         d3:50:79:80:8e:93:b1:64:2b:65:a4:ac:77:34:16:66:8a:42:
         ff:03:1e:0d:c4:fa:fe:07:c4:b5:95:46:e9:17:48:de:90:49:
         1b:8e:2b:65:45:71:60:82:1b:76:af:3b:8c:14:05:37:dc:53:
         e5:00:8c:3c:ec:7f:e7:8e:c9:90:59:ed:72:43:32:b4:3e:1d:
         c2:f1:ee:09
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBM7YCpJsgH03RChqxY+kjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx
M2M5NGQwHhcNMjYwODI5MDk1MDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDk5ZTQyMTlmM2E2YjNhYmI4ZWY2N2RkNDcxYWNiMmJjNjdiOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JejZFhmdlDc1dylZGvNX8ZImnRJ
+Ujdkw8kNbS8N/B/7MxhBpgGiwiISfZd6fo9T5q/CBkbyy167FEGGkFXHMkFRyab
p5CmLhv/P8U8yIKQQzmbOyo119wCuOw31BqjOxRGNu5Qi5FMbkXkC7zQBzueFkgH
Fnt3zi0hjnZRVsqWn7HoSfsnnVNHS1wMm6WxUyj03FWa3nuWQVPlOZJYgxrdWHms
VB6auPsHzM4WxfMet5zPF93TU4AObQcTiJEaid77NJJnX16G3mHpz3EY2VCf1ulM
6bGt2DprzwKN2pwhX/ANEi/oauXvHgdLguZp1M2atu6QxJ7qdPzL2rImkQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCSZ5CGfOms6u472fdRxrLK8Z7mRMB8GA1UdIwQY
MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt
MmU5N2FiYTBmYjJjLzEvSkpua0laODZhenE3anZaOTFIR3NzcnhudVpFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj
LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0RjANBgkqhkiG
9w0BAQsFAAOCAQEAc1TyVMi+C/0ExsKyyeDvroipK2C5wYrqjyF1pYTUyapSlwk4
MHxDvTgRzMXkvKuyIPs3ZLie2FAu2Iy/de7OElQMQ7gXMmfJgMybrOAXr38dS0M5
IuU/CoNdm4+lJ7lFTm1cXAge3978U0XNwrffmRDC4E26zhbnJcd7/CGq+LZz2yHT
nqZXDmbrXSopTJa9+D+TocgMbUhmJCI7tgo7DgIkVASdMTD/PSy9VQTh5RXvM3gM
01B5gI6TsWQrZaSsdzQWZopC/wMeDcT6/gfEtZVG6RdI3pBJG44rZUVxYIIbdq87
jBQFN9xT5QCMPOx/547JkFntckMytD4dwvHuCQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:29 2026 by rpki-client