Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/35utKvBtiXeNfg8seaGi1SE4iXY.asa
File:                     35utKvBtiXeNfg8seaGi1SE4iXY.asa (raw, json)
Hash identifier:          Ooj6fgR1vHdN1c38VG3gOAmyTwchJRaH4Y6sqFM8lRE=
Subject key identifier:   DF:9B:AD:2A:F0:6D:89:77:8D:7E:0F:2C:79:A1:A2:D5:21:38:89:76
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019FB4571C57C19CDA011F6CA4D22A425F0A
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/35utKvBtiXeNfg8seaGi1SE4iXY.asa
Signing time:             Thu 30 Jul 2026 18:43:55 +0000
ASPA not before:          Thu 30 Jul 2026 18:43:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209978
Providers:                AS: 211138
                          AS: 215114
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b4:57:1c:57:c1:9c:da:01:1f:6c:a4:d2:2a:42:5f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Jul 30 18:43:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df9bad2af06d89778d7e0f2c79a1a2d521388976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:a4:7f:e7:61:76:d5:2b:0c:63:c7:8f:5c:
                    1f:be:f2:01:76:8f:29:82:c7:cd:38:c3:71:8b:cc:
                    44:6f:19:a1:96:c2:fa:4f:69:4b:aa:c3:d0:c4:8b:
                    3b:96:fd:19:d0:e8:b4:f4:15:90:f0:71:de:8d:15:
                    9c:32:5e:b7:46:fe:ca:a1:1e:e9:56:ac:3c:b1:69:
                    fb:a8:54:00:e6:9f:cd:c2:c3:e8:0a:32:78:d7:1b:
                    8e:61:d8:db:be:26:02:2a:c3:d9:fa:73:6f:31:bb:
                    a8:e6:31:8c:39:20:75:39:a0:fa:d5:e4:82:9c:bc:
                    6b:f6:d1:fe:ca:c9:63:c3:a6:0c:62:a1:1c:af:85:
                    9b:dc:e4:04:f6:6c:d5:3a:2c:05:4e:6b:5a:11:d1:
                    98:34:88:aa:d5:7c:7c:6d:79:bf:ff:74:70:e4:18:
                    ce:d3:71:4a:32:e8:b8:1f:e9:78:70:bd:0f:34:3b:
                    33:e3:db:9e:ad:8f:16:62:d3:b0:53:49:ac:26:20:
                    38:37:aa:ab:e9:25:78:c6:ca:ea:86:00:89:f3:74:
                    2f:96:a8:0a:07:57:c1:b4:83:6b:09:57:c8:05:77:
                    6c:ad:74:58:07:45:c9:a4:c1:eb:20:85:3c:6c:03:
                    42:85:c7:21:57:64:dd:c0:57:77:55:34:3c:42:12:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:AD:2A:F0:6D:89:77:8D:7E:0F:2C:79:A1:A2:D5:21:38:89:76
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/35utKvBtiXeNfg8seaGi1SE4iXY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209978

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:08:73:81:8d:48:71:b2:7c:74:6f:8b:78:4d:61:ae:0c:
         50:8a:03:74:b9:66:1e:3a:8a:1a:23:3d:8f:bf:06:2b:9c:89:
         2b:7b:23:6d:80:f5:26:b1:1d:89:80:a7:36:89:a4:4a:ec:22:
         84:5f:c9:21:d1:13:4c:68:6c:b0:28:ef:5a:6c:b8:8b:3e:38:
         84:ec:7a:a5:62:ab:5f:3d:02:e6:e9:a6:c1:ce:d7:c2:2a:44:
         09:aa:22:63:ff:17:4c:b1:b3:fc:ec:35:be:f6:1f:2f:b6:07:
         e1:3d:17:fd:a1:f5:d0:12:7b:e8:d8:72:60:e5:3b:29:cf:4e:
         2b:74:09:7a:53:7c:d0:90:e2:a0:39:f5:46:5f:45:e8:35:35:
         ae:64:ea:9a:ca:bf:bf:de:8d:a1:4d:d7:e8:ed:91:60:1a:98:
         1b:cf:45:69:53:5a:8a:ae:12:6f:37:11:a6:c8:49:62:e2:75:
         26:b1:74:6b:70:ab:e8:38:61:29:b8:99:33:92:ae:3f:ed:86:
         06:1e:f4:65:1d:18:4e:5a:1d:02:ad:d6:73:a9:8a:7b:47:4f:
         d5:3b:69:e6:75:64:4b:96:c6:29:32:fc:1c:5a:1c:5e:3d:fd:
         54:21:3a:37:01:a3:96:8c:ad:04:ba:31:9a:99:3e:ff:27:7e:
         e4:de:56:6e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ+0VxxXwZzaAR9spNIqQl8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDhlNTg2NzU3NWJhZGZiNDE3MDY5YzZkOTAxYTA5MWQ4
NGJmMzEwHhcNMjYwNzMwMTg0MzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjliYWQyYWYwNmQ4OTc3OGQ3ZTBmMmM3OWExYTJkNTIxMzg4OTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNOkf+dhdtUrDGPHj1wfvvIBdo8p
gsfNOMNxi8xEbxmhlsL6T2lLqsPQxIs7lv0Z0Oi09BWQ8HHejRWcMl63Rv7KoR7p
Vqw8sWn7qFQA5p/NwsPoCjJ41xuOYdjbviYCKsPZ+nNvMbuo5jGMOSB1OaD61eSC
nLxr9tH+ysljw6YMYqEcr4Wb3OQE9mzVOiwFTmtaEdGYNIiq1Xx8bXm//3Rw5BjO
03FKMui4H+l4cL0PNDsz49uerY8WYtOwU0msJiA4N6qr6SV4xsrqhgCJ83QvlqgK
B1fBtINrCVfIBXdsrXRYB0XJpMHrIIU8bANChcchV2TdwFd3VTQ8QhLyqwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFN+brSrwbYl3jX4PLHmhotUhOIl2MB8GA1UdIwQY
MBaAFH7Y5YZ1dbrftBcGnG2QGgkdhL8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODct
NmRlOTM1NWVkYjNhLzEvMzV1dEt2QnRpWGVOZmc4c2VhR2kxU0U0aVhZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODctNmRlOTM1NWVkYjNh
LzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0OjANBgkqhkiG
9w0BAQsFAAOCAQEAX48Ic4GNSHGyfHRvi3hNYa4MUIoDdLlmHjqKGiM9j78GK5yJ
K3sjbYD1JrEdiYCnNomkSuwihF/JIdETTGhssCjvWmy4iz44hOx6pWKrXz0C5umm
wc7XwipECaoiY/8XTLGz/Ow1vvYfL7YH4T0X/aH10BJ76NhyYOU7Kc9OK3QJelN8
0JDioDn1Rl9F6DU1rmTqmsq/v96NoU3X6O2RYBqYG89FaVNaiq4SbzcRpshJYuJ1
JrF0a3Cr6DhhKbiZM5KuP+2GBh70ZR0YTlodAq3Wc6mKe0dP1Ttp5nVkS5bGKTL8
HFocXj39VCE6NwGjloytBLoxmpk+/yd+5N5Wbg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:15 2026 by rpki-client