Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/qG1R037Knd5MvbNFCJv26VjfHMc.asa
File:                     qG1R037Knd5MvbNFCJv26VjfHMc.asa (raw, json)
Hash identifier:          ggm43wc4WpHzsdXtGjkUYvpGTm14QO0NmsLkAeIqZjM=
Subject key identifier:   A8:6D:51:D3:7E:CA:9D:DE:4C:BD:B3:45:08:9B:F6:E9:58:DF:1C:C7
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       01A14F02A04694E25BE7E00E93DF84154CE0
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/qG1R037Knd5MvbNFCJv26VjfHMc.asa
Signing time:             Sun 18 Oct 2026 12:35:34 +0000
ASPA not before:          Sun 18 Oct 2026 12:35:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209978
Providers:                AS: 34872
                          AS: 35661
                          AS: 213905
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:02:a0:46:94:e2:5b:e7:e0:0e:93:df:84:15:4c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Oct 18 12:35:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a86d51d37eca9dde4cbdb345089bf6e958df1cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:5b:ec:33:35:fb:2a:e6:73:36:66:24:df:
                    68:d3:a2:b3:c0:c5:31:70:da:2a:5f:ab:53:b5:f7:
                    d5:82:bb:70:9d:10:60:5c:c8:78:08:d8:53:ad:02:
                    ae:f0:32:3f:76:1a:b9:6a:90:2b:d4:e8:73:f8:dd:
                    69:66:fe:ac:1a:cc:b5:16:10:09:41:76:62:39:8b:
                    8c:dc:4f:0d:12:20:bd:48:21:9a:86:f2:88:8e:04:
                    6e:7d:3b:17:e9:e3:54:56:6d:d6:8e:0a:d9:2b:a6:
                    dc:2c:d1:0c:76:a2:44:73:0d:44:53:17:0c:35:d7:
                    aa:6e:3a:8f:3e:9e:26:e6:bd:27:d6:c1:d2:e5:47:
                    14:26:8d:11:1b:7e:4c:13:e2:e8:68:c7:53:9e:a4:
                    1b:6d:d1:ca:9d:0d:83:9f:40:e5:b5:a3:c3:8e:96:
                    2a:ea:b3:78:3d:d6:5d:e4:3a:cb:ca:d1:52:ea:2b:
                    93:05:70:a2:17:c8:7c:89:3a:bd:95:1f:2d:34:9e:
                    cf:b6:a7:20:13:c9:c2:d0:29:85:9c:46:1d:ea:ee:
                    fa:c8:27:3f:9b:5e:0e:70:b9:5c:da:bd:f9:22:00:
                    e3:e2:49:ff:91:ba:b8:03:41:03:31:f6:83:f3:eb:
                    63:6a:40:7d:36:d5:20:7c:be:9e:39:9d:58:0f:3d:
                    f4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6D:51:D3:7E:CA:9D:DE:4C:BD:B3:45:08:9B:F6:E9:58:DF:1C:C7
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/qG1R037Knd5MvbNFCJv26VjfHMc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209978

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:9e:95:ff:6b:ba:96:3a:8b:61:58:3e:2a:94:26:93:f2:
         69:0a:01:b5:9d:85:0d:0e:53:85:f7:3d:5c:3a:bc:3e:fb:7e:
         de:2b:51:70:5c:48:a8:f2:17:fe:93:09:dc:30:a9:99:d3:87:
         42:34:af:7f:f9:8c:31:63:dc:72:58:5c:68:6f:58:79:4e:d2:
         71:60:64:08:f6:78:cd:71:a0:06:46:c1:da:27:ce:16:6d:56:
         fb:b5:69:d9:2f:c4:7d:c6:f9:3e:99:46:90:4c:e0:e8:b5:f8:
         23:91:35:84:ea:67:3e:41:81:79:39:5a:74:5e:1e:63:eb:36:
         cd:2a:ef:e3:27:44:49:bd:cb:b3:9d:ae:2f:98:30:7e:a4:37:
         e8:b1:ee:97:f2:b8:d2:89:9e:c8:9d:b2:e8:47:d2:b5:01:48:
         81:19:9b:ef:9a:16:8d:f6:fd:8e:59:d4:de:02:49:d4:7b:6d:
         2c:8a:9b:7f:59:9f:8a:c7:81:b0:de:35:89:a5:fd:fc:d5:ba:
         5c:f1:fe:cb:70:44:ef:74:4e:9f:12:c1:8c:f1:9d:85:fb:73:
         f1:83:df:57:59:1c:e9:c5:c5:2a:48:8d:63:21:2e:32:99:87:
         18:b3:3e:7f:de:01:cd:81:e2:d1:ee:9b:da:0a:b7:bd:4a:67:
         08:60:0f:d7
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaFPAqBGlOJb5+AOk9+EFUzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDhlNTg2NzU3NWJhZGZiNDE3MDY5YzZkOTAxYTA5MWQ4
NGJmMzEwHhcNMjYxMDE4MTIzNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODZkNTFkMzdlY2E5ZGRlNGNiZGIzNDUwODliZjZlOTU4ZGYxY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/lb7DM1+yrmczZmJN9o06KzwMUx
cNoqX6tTtffVgrtwnRBgXMh4CNhTrQKu8DI/dhq5apAr1Ohz+N1pZv6sGsy1FhAJ
QXZiOYuM3E8NEiC9SCGahvKIjgRufTsX6eNUVm3WjgrZK6bcLNEMdqJEcw1EUxcM
NdeqbjqPPp4m5r0n1sHS5UcUJo0RG35ME+LoaMdTnqQbbdHKnQ2Dn0DltaPDjpYq
6rN4PdZd5DrLytFS6iuTBXCiF8h8iTq9lR8tNJ7PtqcgE8nC0CmFnEYd6u76yCc/
m14OcLlc2r35IgDj4kn/kbq4A0EDMfaD8+tjakB9NtUgfL6eOZ1YDz30cQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKhtUdN+yp3eTL2zRQib9ulY3xzHMB8GA1UdIwQY
MBaAFH7Y5YZ1dbrftBcGnG2QGgkdhL8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODct
NmRlOTM1NWVkYjNhLzEvcUcxUjAzN0tuZDVNdmJORkNKdjI2VmpmSE1jLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82ZGU2MTgtNjczMC00ZDI5LWJkODctNmRlOTM1NWVkYjNh
LzEvZnRqbGhuVjF1dC0wRndhY2JaQWFDUjJFdnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0OjANBgkqhkiG
9w0BAQsFAAOCAQEAlNOelf9rupY6i2FYPiqUJpPyaQoBtZ2FDQ5Thfc9XDq8Pvt+
3itRcFxIqPIX/pMJ3DCpmdOHQjSvf/mMMWPcclhcaG9YeU7ScWBkCPZ4zXGgBkbB
2ifOFm1W+7Vp2S/Efcb5PplGkEzg6LX4I5E1hOpnPkGBeTladF4eY+s2zSrv4ydE
Sb3Ls52uL5gwfqQ36LHul/K40omeyJ2y6EfStQFIgRmb75oWjfb9jlnU3gJJ1Htt
LIqbf1mfiseBsN41iaX9/NW6XPH+y3BE73ROnxLBjPGdhftz8YPfV1kc6cXFKkiN
YyEuMpmHGLM+f94BzYHi0e6b2gq3vUpnCGAP1w==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:17 2026 by rpki-client