Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/AS209710.asa
File:                     AS209710.asa (raw, json)
Hash identifier:          muQbAMV2MskzXwsyDwDRgajJFW164cbKvAPlkgnuhRo=
Subject key identifier:   5F:86:2F:6B:43:DD:CB:D5:C7:8F:5E:18:7A:2C:6B:EF:BE:85:E9:87
Certificate issuer:       /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial:       13F82EA951D5AB44351815C1B3D486A33991C239
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/AS209710.asa
Signing time:             Sat 25 Apr 2026 14:09:42 +0000
ASPA not before:          Sat 25 Apr 2026 14:04:42 +0000
ASPA not after:           Sat 24 Apr 2027 14:09:42 +0000
Customer ASID:            209710
Providers:                AS: 6939
                          AS: 8849
                          AS: 14447
                          AS: 16509
                          AS: 20473
                          AS: 52025
                          AS: 63473
                          AS: 137409
                          AS: 212895
                          AS: 215638
                          AS: 216211
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 10:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f8:2e:a9:51:d5:ab:44:35:18:15:c1:b3:d4:86:a3:39:91:c2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
        Validity
            Not Before: Apr 25 14:04:42 2026 GMT
            Not After : Apr 24 14:09:42 2027 GMT
        Subject: CN=5F862F6B43DDCBD5C78F5E187A2C6BEFBE85E987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:b5:24:54:cc:4d:42:09:97:c6:a7:a6:43:
                    57:3d:f9:e8:f4:82:02:51:6f:47:45:d1:fc:8f:ee:
                    9c:58:3c:6a:54:7c:b4:d2:c9:d3:ba:a3:ea:86:60:
                    38:4c:bd:5a:3f:62:a9:c6:58:21:78:b2:fc:f7:25:
                    bf:27:89:5c:1e:21:c5:13:91:ed:c2:11:83:ed:d8:
                    0e:24:87:37:9d:54:77:4f:e6:20:53:9c:9e:cf:87:
                    db:f9:eb:f3:ef:a1:20:ed:ed:c8:b4:cc:63:aa:f7:
                    41:29:90:b6:f2:73:65:ad:a0:f5:48:53:0c:cd:d1:
                    b6:32:64:4a:3b:ce:da:36:fd:b0:7a:8f:94:4d:b9:
                    29:af:a4:08:97:13:7b:39:21:c0:c1:ae:66:e7:98:
                    92:6d:12:6a:01:10:d4:cb:bb:19:6f:db:37:af:f0:
                    ea:19:15:98:72:a7:a3:c6:be:b2:2e:b9:9a:d8:7d:
                    4c:23:e3:0b:8a:fa:ab:cf:55:28:0c:93:d5:37:83:
                    94:89:66:b2:04:88:24:b7:00:e2:b3:6f:84:c5:6b:
                    00:29:d3:e2:33:89:68:94:23:bd:b4:da:27:46:95:
                    cf:5f:ac:a8:55:aa:45:cb:f4:5e:dc:72:ad:e5:7b:
                    27:e0:c7:af:15:59:b9:51:66:91:e6:ca:19:e4:db:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:86:2F:6B:43:DD:CB:D5:C7:8F:5E:18:7A:2C:6B:EF:BE:85:E9:87
            X509v3 Authority Key Identifier:
                keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/AS209710.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209710

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:41:f4:4f:c9:9f:af:3a:2a:7d:c7:47:59:af:25:fd:cc:
         2e:5c:62:77:af:00:c8:ad:f0:a7:49:de:0d:ec:9c:83:85:5c:
         a3:79:55:af:54:4d:0e:b9:36:61:84:03:59:d7:ed:45:13:d9:
         a4:f3:60:65:5f:32:a9:8d:98:96:e4:10:c3:0d:d2:e4:b1:d7:
         0e:e6:6a:64:ed:e6:6c:09:aa:6b:5a:20:61:bb:4f:69:fa:05:
         06:ee:96:78:07:cc:20:17:8a:aa:9b:c5:73:c9:7d:51:04:6b:
         0e:4a:4d:64:5e:19:e8:d8:15:a2:15:ee:65:81:4c:87:14:4c:
         6c:3f:ef:66:07:1f:47:e2:17:22:02:2d:d5:f3:b2:38:25:17:
         fe:d5:1e:5d:af:f9:67:e7:ae:fa:dd:c1:e3:85:5a:06:1f:15:
         96:e5:e1:9c:c7:96:72:eb:2a:05:a6:d3:a5:3f:83:80:59:b5:
         fd:b1:e5:d0:5a:a3:3d:85:c7:54:b4:32:65:a0:e8:7d:2a:45:
         f6:c1:0d:f4:cc:fb:02:9e:3d:65:8c:62:30:ff:b1:66:30:bd:
         b5:72:fd:1d:fc:3e:de:04:4c:7e:ec:12:af:fd:1e:23:64:c7:
         0c:3f:9e:13:45:d2:07:76:b3:9c:c9:85:45:c4:b1:ca:bb:59:
         0c:6d:b5:5e
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUE/guqVHVq0Q1GBXBs9SGozmRwjkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYxNWI2MjY4MDdkMzA5ODgzODFjMzI2NTY2MTdhZTZm
ZDY2MzhiNjAeFw0yNjA0MjUxNDA0NDJaFw0yNzA0MjQxNDA5NDJaMDMxMTAvBgNV
BAMTKDVGODYyRjZCNDNERENCRDVDNzhGNUUxODdBMkM2QkVGQkU4NUU5ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xrUkVMxNQgmXxqemQ1c9+ej0
ggJRb0dF0fyP7pxYPGpUfLTSydO6o+qGYDhMvVo/YqnGWCF4svz3Jb8niVweIcUT
ke3CEYPt2A4khzedVHdP5iBTnJ7Ph9v56/PvoSDt7ci0zGOq90EpkLbyc2WtoPVI
UwzN0bYyZEo7zto2/bB6j5RNuSmvpAiXE3s5IcDBrmbnmJJtEmoBENTLuxlv2zev
8OoZFZhyp6PGvrIuuZrYfUwj4wuK+qvPVSgMk9U3g5SJZrIEiCS3AOKzb4TFawAp
0+IziWiUI7202idGlc9frKhVqkXL9F7ccq3leyfgx68VWblRZpHmyhnk2yQjAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUX4Yva0Pdy9XHj14Yeixr776F6YcwHwYDVR0j
BBgwFoAUJhW2JoB9MJiDgcMmVmF65v1mOLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz
ODZjLzEvMjYxNUI2MjY4MDdEMzA5ODgzODFDMzI2NTY2MTdBRTZGRDY2MzhCNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0poVzJKb0I5TUppRGdjTW1WbUY2NXYx
bU9MWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzllY2FjNDEzLTRjZDIt
NDcyYy1iMDFlLTc0NDU4Y2VhMzg2Yy8xL0FTMjA5NzEwLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzLjANBgkq
hkiG9w0BAQsFAAOCAQEAQB1B9E/Jn686Kn3HR1mvJf3MLlxid68AyK3wp0neDeyc
g4Vco3lVr1RNDrk2YYQDWdftRRPZpPNgZV8yqY2YluQQww3S5LHXDuZqZO3mbAmq
a1ogYbtPafoFBu6WeAfMIBeKqpvFc8l9UQRrDkpNZF4Z6NgVohXuZYFMhxRMbD/v
ZgcfR+IXIgIt1fOyOCUX/tUeXa/5Z+eu+t3B44VaBh8VluXhnMeWcusqBabTpT+D
gFm1/bHl0FqjPYXHVLQyZaDofSpF9sEN9Mz7Ap49ZYxiMP+xZjC9tXL9Hfw+3gRM
fuwSr/0eI2THDD+eE0XSB3aznMmFRcSxyrtZDG21Xg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:13:53 2026 by rpki-client