Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/MhtnbItfLmCzaCDCaCIpwP7CYj0.asa
File:                     MhtnbItfLmCzaCDCaCIpwP7CYj0.asa (raw, json)
Hash identifier:          Z9SK9w4cz65U5hhOIchhgo/LJB/zpmrUHbelZFQj9A8=
Subject key identifier:   32:1B:67:6C:8B:5F:2E:60:B3:68:20:C2:68:22:29:C0:FE:C2:62:3D
Certificate issuer:       /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial:       019F1901550D4E4A1C5A43E3E22032184EA4
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/MhtnbItfLmCzaCDCaCIpwP7CYj0.asa
Signing time:             Tue 30 Jun 2026 14:49:05 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214017
Providers:                AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:55:0d:4e:4a:1c:5a:43:e3:e2:20:32:18:4e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
        Validity
            Not Before: Jun 30 14:49:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=321b676c8b5f2e60b36820c2682229c0fec2623d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:48:22:0c:15:ff:ef:2a:a2:06:25:84:ad:
                    5a:b3:8c:ee:3c:3c:bf:2e:69:3b:29:ee:c7:2c:d5:
                    33:55:03:29:15:94:13:52:0e:43:f9:ed:fc:96:8a:
                    f6:93:a7:a9:f8:dd:38:6b:95:a6:b7:6e:66:0d:98:
                    b7:d3:b5:71:f4:40:52:37:7e:8d:a8:2b:7a:68:4c:
                    63:35:7e:2b:36:e5:41:14:50:9e:91:e3:9f:09:a3:
                    b7:63:ed:97:b9:13:3e:26:c3:6c:d1:23:9d:9b:f7:
                    a8:d3:1f:18:37:16:be:b3:21:ca:7c:25:48:bf:54:
                    96:49:b9:c7:57:fd:e6:2a:1c:e3:3b:91:c7:f7:8f:
                    4b:1f:15:99:97:bc:11:d2:e0:f1:39:b2:82:14:f7:
                    a8:e4:cf:70:fd:37:ac:3a:a3:8a:d9:e2:6a:6e:c4:
                    51:24:a3:9b:54:c4:25:52:48:32:bb:35:19:b8:9a:
                    2d:90:fd:68:ee:96:c7:fb:ea:9b:e4:80:f6:c2:0e:
                    d3:03:78:d4:87:43:9f:94:09:4d:37:e7:32:98:3f:
                    3e:86:e5:b5:b7:86:cb:43:0c:4a:91:a0:3a:1c:ff:
                    08:72:b3:a2:e5:05:8e:7b:10:dc:d6:be:d4:dc:b3:
                    8a:15:a0:82:b7:58:90:b7:b2:05:ad:a6:89:f5:1d:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:67:6C:8B:5F:2E:60:B3:68:20:C2:68:22:29:C0:FE:C2:62:3D
            X509v3 Authority Key Identifier:
                keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/MhtnbItfLmCzaCDCaCIpwP7CYj0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214017

    Signature Algorithm: sha256WithRSAEncryption
         91:39:2f:1a:7e:58:af:4e:1d:4a:a4:67:81:77:cb:7c:71:7a:
         64:ef:df:8f:3a:52:8c:7d:ea:ab:2e:75:f1:3a:38:5b:68:93:
         44:a2:f6:30:91:60:16:25:38:72:e0:ed:1f:4f:a1:77:8b:44:
         b5:3f:30:dc:9f:af:76:a2:b1:86:3a:89:93:1d:91:44:0f:e5:
         d1:24:13:2d:1a:3e:bd:c9:0a:19:76:dd:38:0c:cd:19:93:24:
         3b:40:d8:fa:fd:67:b2:d1:c2:11:d6:b5:5d:8a:70:5c:65:76:
         5d:2c:87:a7:f2:9f:5e:b6:e3:f3:fa:73:1a:84:5e:f1:32:ee:
         7d:da:5d:cc:2f:45:da:77:b5:9c:41:e0:90:88:46:2a:b4:e1:
         ce:b7:ed:95:a9:00:98:40:cf:75:88:af:ac:30:8c:14:2b:a7:
         86:b7:7b:92:40:4f:54:0c:01:4f:23:05:99:2d:71:0f:28:ad:
         8b:2f:4e:88:f7:30:e9:95:c8:a2:f5:8e:63:53:e5:e5:44:64:
         b8:d5:fc:56:a0:d4:b5:e9:0f:2d:67:9c:e0:fc:b0:2b:8b:fa:
         62:50:55:5c:bb:dd:17:36:23:44:11:c6:64:ce:eb:dd:60:3b:
         70:a0:30:70:5c:5e:d0:9e:60:b0:1a:c3:42:45:73:41:cd:a0:
         b1:0d:36:9f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAVUNTkocWkPj4iAyGE6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMWE1MTk3ZDYzMjRlZWVkMjU2YjI2ODYxZTFhMjRhYzg2
MzVkMzcwHhcNMjYwNjMwMTQ0OTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjFiNjc2YzhiNWYyZTYwYjM2ODIwYzI2ODIyMjljMGZlYzI2MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd9IIgwV/+8qogYlhK1as4zuPDy/
Lmk7Ke7HLNUzVQMpFZQTUg5D+e38lor2k6ep+N04a5Wmt25mDZi307Vx9EBSN36N
qCt6aExjNX4rNuVBFFCekeOfCaO3Y+2XuRM+JsNs0SOdm/eo0x8YNxa+syHKfCVI
v1SWSbnHV/3mKhzjO5HH949LHxWZl7wR0uDxObKCFPeo5M9w/TesOqOK2eJqbsRR
JKObVMQlUkgyuzUZuJotkP1o7pbH++qb5ID2wg7TA3jUh0OflAlNN+cymD8+huW1
t4bLQwxKkaA6HP8IcrOi5QWOexDc1r7U3LOKFaCCt1iQt7IFraaJ9R1w4wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDIbZ2yLXy5gs2ggwmgiKcD+wmI9MB8GA1UdIwQY
MBaAFI8aUZfWMk7u0layaGHhokrIY103MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAt
YTRkZTlkZmY1ZWQyLzEvTWh0bmJJdGZMbUN6YUNEQ2FDSXB3UDdDWWowLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9mMTVlNGQtODBjMy00Y2EwLTg3OTAtYTRkZTlkZmY1ZWQy
LzEvanhwUmw5WXlUdTdTVnJKb1llR2lTc2hqWFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNEATANBgkqhkiG
9w0BAQsFAAOCAQEAkTkvGn5Yr04dSqRngXfLfHF6ZO/fjzpSjH3qqy518To4W2iT
RKL2MJFgFiU4cuDtH0+hd4tEtT8w3J+vdqKxhjqJkx2RRA/l0SQTLRo+vckKGXbd
OAzNGZMkO0DY+v1nstHCEda1XYpwXGV2XSyHp/KfXrbj8/pzGoRe8TLufdpdzC9F
2ne1nEHgkIhGKrThzrftlakAmEDPdYivrDCMFCunhrd7kkBPVAwBTyMFmS1xDyit
iy9OiPcw6ZXIovWOY1Pl5URkuNX8VqDUtekPLWec4PywK4v6YlBVXLvdFzYjRBHG
ZM7r3WA7cKAwcFxe0J5gsBrDQkVzQc2gsQ02nw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:18 2026 by rpki-client