Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/eHftEtrVJeK48pS78ZHucZUehcs.asa
File:                     eHftEtrVJeK48pS78ZHucZUehcs.asa (raw, json)
Hash identifier:          ijuGTjfu0G7KPysUosHsMD3fkqH2j9Y0uGe3akSkoZs=
Subject key identifier:   78:77:ED:12:DA:D5:25:E2:B8:F2:94:BB:F1:91:EE:71:95:1E:85:CB
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019F779CD33B1ADF3B0B44D17C56D5DA75E5
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/eHftEtrVJeK48pS78ZHucZUehcs.asa
Signing time:             Sat 18 Jul 2026 23:43:14 +0000
ASPA not before:          Sat 18 Jul 2026 23:43:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209978
Providers:                AS: 215114
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:77:9c:d3:3b:1a:df:3b:0b:44:d1:7c:56:d5:da:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Jul 18 23:43:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7877ed12dad525e2b8f294bbf191ee71951e85cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:1d:6d:6b:3f:24:bf:a2:35:42:e4:4d:50:
                    c4:26:fb:f5:42:19:21:57:43:96:b2:23:e0:0c:8d:
                    f8:5c:56:de:fc:44:cc:2f:2a:dc:c7:07:cc:19:34:
                    e6:6f:99:7b:ab:ff:2e:b3:4a:9d:5a:47:43:48:ed:
                    93:86:0f:95:bc:f7:63:41:99:72:3e:9a:79:bb:5b:
                    ee:76:21:0f:06:40:2f:54:68:33:2c:63:16:8c:f2:
                    9f:d3:cc:7c:5a:c9:15:94:f7:4e:41:fa:6a:64:bb:
                    69:7a:3d:25:f0:3d:e5:a8:c9:ea:19:c2:bd:25:7e:
                    07:fe:64:2a:ca:c1:dd:dc:e9:b1:14:98:c1:7e:87:
                    13:a3:a1:60:d8:8b:fb:77:b6:76:cd:bd:da:3f:02:
                    31:be:22:d8:56:ad:32:1b:ce:23:c3:48:f0:f5:51:
                    aa:38:a3:55:1b:fa:53:db:36:6a:d6:f5:51:2c:d6:
                    a0:d1:af:93:fc:ed:ae:43:df:c2:04:1b:6a:b1:c5:
                    66:6d:0c:dd:fc:4f:7b:27:bc:d8:21:e7:af:16:13:
                    a1:b5:c7:d1:fd:96:3b:f3:b7:d6:24:34:1f:24:1b:
                    25:55:1f:fa:50:49:b0:dd:b0:3e:86:98:0d:0d:01:
                    d6:3b:82:fb:1d:95:b3:3e:ce:d3:50:15:fd:88:be:
                    6f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:77:ED:12:DA:D5:25:E2:B8:F2:94:BB:F1:91:EE:71:95:1E:85:CB
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/eHftEtrVJeK48pS78ZHucZUehcs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209978

    Signature Algorithm: sha256WithRSAEncryption
         34:77:07:ad:cd:c3:e9:ab:91:ae:3e:7d:fb:b3:f1:70:1b:07:
         56:86:69:ce:62:01:7e:1a:1c:e3:a9:0c:71:e9:94:f8:ef:42:
         fd:ec:67:94:3b:14:d9:df:cb:14:d1:d8:85:d5:3d:19:3a:1b:
         6a:6d:13:0e:fd:ef:0b:8a:9d:fa:40:6b:95:5d:ed:9f:cf:99:
         64:d1:74:94:3c:2a:f7:f6:c5:09:6e:90:83:eb:9b:30:c8:c6:
         e7:30:2f:86:c5:40:16:09:8e:b0:05:18:31:85:6f:7b:f9:f0:
         2a:c1:42:74:55:2d:c3:f9:2a:8e:3d:ea:28:15:d0:88:7a:a1:
         a5:3d:82:63:80:01:bd:7c:34:a3:0c:df:6f:55:8f:ea:13:bd:
         fd:15:67:07:65:48:46:10:a9:65:12:20:90:f9:b4:02:cf:28:
         34:be:e7:c5:b7:a3:f8:9d:2a:e0:f0:dd:0a:9f:82:8d:39:e5:
         65:dd:d1:30:68:4d:3b:f9:72:f5:59:70:41:10:04:4c:47:af:
         7c:12:80:7c:18:20:56:73:06:ae:28:39:0d:45:0d:2b:d8:18:
         75:d0:17:bf:3d:51:9f:96:a6:04:80:5e:74:28:ae:ee:b2:ce:
         5f:cc:79:36:ae:55:a5:05:b9:2a:90:7a:c7:95:3c:d5:31:76:
         0e:ae:97:1a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ93nNM7Gt87C0TRfFbV2nXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDhlNTg2NzU3NWJhZGZiNDE3MDY5YzZkOTAxYTA5MWQ4
NGJmMzEwHhcNMjYwNzE4MjM0MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODc3ZWQxMmRhZDUyNWUyYjhmMjk0YmJmMTkxZWU3MTk1MWU4NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQgdbWs/JL+iNULkTVDEJvv1Qhkh
V0OWsiPgDI34XFbe/ETMLyrcxwfMGTTmb5l7q/8us0qdWkdDSO2Thg+VvPdjQZly
Ppp5u1vudiEPBkAvVGgzLGMWjPKf08x8WskVlPdOQfpqZLtpej0l8D3lqMnqGcK9
JX4H/mQqysHd3OmxFJjBfocTo6Fg2Iv7d7Z2zb3aPwIxviLYVq0yG84jw0jw9VGq
OKNVG/pT2zZq1vVRLNag0a+T/O2uQ9/CBBtqscVmbQzd/E97J7zYIeevFhOhtcfR
/ZY787fWJDQfJBslVR/6UEmw3bA+hpgNDQHWO4L7HZWzPs7TUBX9iL5vgwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHh37RLa1SXiuPKUu/GR7nGVHoXLMB8GA1UdIwQY
MBaAFH7Y5YZ1dbrftBcGnG2QGgkdhL8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODct
NmRlOTM1NWVkYjNhLzEvZUhmdEV0clZKZUs0OHBTNzhaSHVjWlVlaGNzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODctNmRlOTM1NWVkYjNh
LzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0OjANBgkqhkiG
9w0BAQsFAAOCAQEANHcHrc3D6auRrj59+7PxcBsHVoZpzmIBfhoc46kMcemU+O9C
/exnlDsU2d/LFNHYhdU9GTobam0TDv3vC4qd+kBrlV3tn8+ZZNF0lDwq9/bFCW6Q
g+ubMMjG5zAvhsVAFgmOsAUYMYVve/nwKsFCdFUtw/kqjj3qKBXQiHqhpT2CY4AB
vXw0owzfb1WP6hO9/RVnB2VIRhCpZRIgkPm0As8oNL7nxbej+J0q4PDdCp+CjTnl
Zd3RMGhNO/ly9VlwQRAETEevfBKAfBggVnMGrig5DUUNK9gYddAXvz1Rn5amBIBe
dCiu7rLOX8x5Nq5VpQW5KpB6x5U81TF2Dq6XGg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:51 2026 by rpki-client