Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/AS209710.asa
File:                     AS209710.asa (raw, json)
Hash identifier:          JH9sNxE0aTE2l8MwdFYfIWTiqSKZx7d880LdaycnGE8=
Subject key identifier:   C0:65:D8:44:1F:5E:19:52:0E:3D:1A:79:29:2F:B4:23:5D:FB:9A:14
Certificate issuer:       /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial:       35B89F48CB35EC74A757958DA9F80EED556B4374
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/AS209710.asa
Signing time:             Wed 25 Feb 2026 09:18:11 +0000
ASPA not before:          Wed 25 Feb 2026 09:13:11 +0000
ASPA not after:           Wed 24 Feb 2027 09:18:11 +0000
Customer ASID:            209710
Providers:                AS: 6939
                          AS: 8849
                          AS: 14447
                          AS: 16509
                          AS: 20473
                          AS: 52025
                          AS: 63473
                          AS: 212895
                          AS: 215638
                          AS: 216211
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b8:9f:48:cb:35:ec:74:a7:57:95:8d:a9:f8:0e:ed:55:6b:43:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
        Validity
            Not Before: Feb 25 09:13:11 2026 GMT
            Not After : Feb 24 09:18:11 2027 GMT
        Subject: CN=C065D8441F5E19520E3D1A79292FB4235DFB9A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:05:ca:38:00:8e:fe:2d:2a:59:a6:86:67:
                    f3:e1:78:69:3d:3d:7f:3d:f6:62:29:57:90:bc:0f:
                    bf:12:ed:b2:fa:b6:d3:17:89:a6:9f:e8:39:d1:84:
                    c3:b2:7c:a3:4c:2e:cb:83:0c:49:56:0b:e4:15:68:
                    42:49:9e:db:7c:e2:26:28:91:3e:b7:cb:56:9a:dc:
                    e8:42:22:62:54:2e:11:4d:5b:1b:62:6e:3e:14:5c:
                    60:19:2b:b4:d1:69:07:76:1f:af:b4:72:ad:13:56:
                    4a:5a:4b:5a:0f:72:90:44:13:3a:85:b6:55:c3:03:
                    f3:4b:ad:80:f0:66:38:17:4e:26:17:11:d1:45:f4:
                    21:05:70:10:e2:8f:48:64:e0:eb:30:bf:94:6e:0c:
                    8a:12:b7:6b:da:3e:3e:63:34:2c:f4:1f:80:cb:b3:
                    da:26:9a:49:ba:f8:aa:8d:ef:80:33:88:61:f0:3b:
                    ae:9a:d8:b3:bc:56:ac:54:ab:a0:84:c7:d8:b0:9e:
                    36:58:8a:58:0a:b1:2f:62:d6:70:af:b7:d6:0e:16:
                    87:b6:b0:05:c0:25:99:5b:29:d8:f3:c1:d8:36:c8:
                    ce:5a:ad:ee:3e:55:6d:38:08:a8:31:61:89:77:e6:
                    74:e2:05:53:7e:60:07:73:29:ce:68:7a:47:c0:38:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:65:D8:44:1F:5E:19:52:0E:3D:1A:79:29:2F:B4:23:5D:FB:9A:14
            X509v3 Authority Key Identifier:
                keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/AS209710.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209710

    Signature Algorithm: sha256WithRSAEncryption
         04:65:58:42:72:49:f3:f6:b8:4e:7f:21:91:79:ba:5b:fd:65:
         26:50:3c:79:8c:f1:c8:d2:57:92:8f:bc:2b:10:24:27:ab:78:
         bc:07:d6:d1:9f:cf:07:00:c8:41:66:ae:fe:e3:25:9e:f4:bf:
         0e:57:25:53:c3:76:50:ec:49:4d:49:c4:20:f7:c4:c6:b6:b3:
         5e:bc:b0:40:89:a0:cf:91:e7:a6:2f:19:49:9c:2c:fa:fe:ee:
         92:33:ed:4b:91:61:ba:08:3a:11:64:04:9d:d9:70:ce:3d:c7:
         65:17:6a:e6:2e:75:91:06:d9:1c:8c:39:a5:4b:92:f2:47:8d:
         26:af:fc:74:06:fa:8e:c0:bc:13:14:33:25:78:01:87:c9:77:
         3e:de:58:a6:28:df:43:74:d6:fe:78:c1:ab:a3:e1:98:1d:b9:
         d7:9a:aa:19:82:89:c6:62:eb:a9:c4:89:f2:2c:8d:a7:3f:51:
         2c:8e:33:44:ec:c6:5c:5e:b0:10:9d:e6:4b:b4:3d:3a:98:b8:
         b5:ca:8c:de:5a:35:e5:b4:06:f2:6a:7f:d2:4d:c2:8c:f2:c7:
         b2:b4:ed:61:54:e2:57:46:37:3a:17:e5:b0:21:d1:af:b2:77:
         fa:87:a3:13:20:a8:fa:ec:95:5b:2b:3b:ca:24:f5:38:aa:d8:
         52:d2:ef:5f
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUNbifSMs17HSnV5WNqfgO7VVrQ3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYxNWI2MjY4MDdkMzA5ODgzODFjMzI2NTY2MTdhZTZm
ZDY2MzhiNjAeFw0yNjAyMjUwOTEzMTFaFw0yNzAyMjQwOTE4MTFaMDMxMTAvBgNV
BAMTKEMwNjVEODQ0MUY1RTE5NTIwRTNEMUE3OTI5MkZCNDIzNURGQjlBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MAXKOACO/i0qWaaGZ/PheGk9
PX899mIpV5C8D78S7bL6ttMXiaaf6DnRhMOyfKNMLsuDDElWC+QVaEJJntt84iYo
kT63y1aa3OhCImJULhFNWxtibj4UXGAZK7TRaQd2H6+0cq0TVkpaS1oPcpBEEzqF
tlXDA/NLrYDwZjgXTiYXEdFF9CEFcBDij0hk4Oswv5RuDIoSt2vaPj5jNCz0H4DL
s9ommkm6+KqN74AziGHwO66a2LO8VqxUq6CEx9iwnjZYilgKsS9i1nCvt9YOFoe2
sAXAJZlbKdjzwdg2yM5are4+VW04CKgxYYl35nTiBVN+YAdzKc5oekfAOI13AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUwGXYRB9eGVIOPRp5KS+0I137mhQwHwYDVR0j
BBgwFoAUJhW2JoB9MJiDgcMmVmF65v1mOLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz
ODZjLzEvMjYxNUI2MjY4MDdEMzA5ODgzODFDMzI2NTY2MTdBRTZGRDY2MzhCNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0poVzJKb0I5TUppRGdjTW1WbUY2NXYx
bU9MWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzllY2FjNDEzLTRjZDIt
NDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8xL0FTMjA5NzEwLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzLjANBgkq
hkiG9w0BAQsFAAOCAQEABGVYQnJJ8/a4Tn8hkXm6W/1lJlA8eYzxyNJXko+8KxAk
J6t4vAfW0Z/PBwDIQWau/uMlnvS/DlclU8N2UOxJTUnEIPfExrazXrywQImgz5Hn
pi8ZSZws+v7ukjPtS5Fhugg6EWQEndlwzj3HZRdq5i51kQbZHIw5pUuS8keNJq/8
dAb6jsC8ExQzJXgBh8l3Pt5YpijfQ3TW/njBq6PhmB2515qqGYKJxmLrqcSJ8iyN
pz9RLI4zROzGXF6wEJ3mS7Q9Opi4tcqM3lo15bQG8mp/0k3CjPLHsrTtYVTiV0Y3
OhflsCHRr7J3+oejEyCo+uyVWys7yiT1OKrYUtLvXw==
-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:48 2026 by rpki-client