Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/twARUM7qtg-_svxxhZ9v2Br7j5k.asa
File:                     twARUM7qtg-_svxxhZ9v2Br7j5k.asa (raw, json)
Hash identifier:          IVeX1qT6cfN9j85T3K9lYgnlguv0xFUnxi2r2ZXPZOY=
Subject key identifier:   B7:00:11:50:CE:EA:B6:0F:BF:B2:FC:71:85:9F:6F:D8:1A:FB:8F:99
Certificate issuer:       /CN=ec10c35dcabfbba70f78a17aa1884b4797e3a4b2
Certificate serial:       01A0DE4C21780F4B9774B70ED7A68F51B5AC
Authority key identifier: EC:10:C3:5D:CA:BF:BB:A7:0F:78:A1:7A:A1:88:4B:47:97:E3:A4:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/twARUM7qtg-_svxxhZ9v2Br7j5k.asa
Signing time:             Sat 26 Sep 2026 15:18:46 +0000
ASPA not before:          Sat 26 Sep 2026 15:18:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34416
Providers:                AS: 39737
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 18:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:4c:21:78:0f:4b:97:74:b7:0e:d7:a6:8f:51:b5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec10c35dcabfbba70f78a17aa1884b4797e3a4b2
        Validity
            Not Before: Sep 26 15:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7001150ceeab60fbfb2fc71859f6fd81afb8f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:39:13:59:fc:b7:95:47:a3:68:69:9e:a6:
                    ca:48:e1:08:64:08:b0:06:ed:3f:b7:bc:f0:a9:e9:
                    3b:ac:f2:d1:b1:87:01:d0:f7:db:e9:02:c0:d1:00:
                    da:0a:ac:87:c9:5f:8a:77:40:19:8d:7c:92:d3:6f:
                    0d:be:d9:fe:1a:06:03:fa:fc:09:98:3a:6a:e3:43:
                    13:80:35:3e:71:86:6d:c8:dd:11:0b:91:88:09:92:
                    c6:79:62:d3:32:9f:98:70:a8:f2:b4:60:de:10:40:
                    ab:b7:79:2f:ef:5b:7e:95:ed:c1:03:aa:97:45:1e:
                    38:9b:59:e9:77:a4:95:33:b7:33:4d:08:fa:83:30:
                    09:24:6f:33:fa:3e:26:16:68:a4:35:46:4b:d6:fe:
                    a7:be:2f:7c:a1:3a:8f:b3:5a:04:f1:24:e6:53:0e:
                    82:12:3b:db:e2:1c:e5:40:78:63:01:34:59:11:17:
                    09:1c:ea:af:56:0e:55:a0:56:45:16:83:51:c8:db:
                    a2:74:d0:fe:bf:a2:4f:4c:9b:72:33:e5:9d:8a:52:
                    09:fd:2d:35:1b:34:e5:a6:3b:7b:97:39:19:7c:1f:
                    f1:57:70:fd:c2:c8:34:6a:35:2a:48:0d:49:0e:7f:
                    7c:5a:2b:fd:9a:98:98:40:28:0f:24:45:c1:9a:e3:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:00:11:50:CE:EA:B6:0F:BF:B2:FC:71:85:9F:6F:D8:1A:FB:8F:99
            X509v3 Authority Key Identifier:
                keyid:EC:10:C3:5D:CA:BF:BB:A7:0F:78:A1:7A:A1:88:4B:47:97:E3:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BDDXcq_u6cPeKF6oYhLR5fjpLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/twARUM7qtg-_svxxhZ9v2Br7j5k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8d84e1-71f4-4518-b00c-6afd1a6d6e20/1/7BDDXcq_u6cPeKF6oYhLR5fjpLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34416

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:5b:d4:a2:5e:f9:1a:20:9f:91:44:45:92:0c:01:ea:26:
         90:cf:30:95:59:5b:00:4f:37:9c:64:1e:c4:e6:97:06:4e:e6:
         d1:19:11:f5:91:10:da:44:6b:42:df:6c:59:a7:8b:05:23:f8:
         df:30:e6:60:7d:99:1d:5f:6d:31:31:b9:be:18:34:9b:ad:a8:
         ec:d9:8f:4a:ba:77:6b:68:45:5a:9f:47:cf:42:b5:db:bf:a6:
         0d:2f:44:78:ea:50:6a:29:a9:5b:97:8f:c7:a0:0d:09:7d:f1:
         34:75:ca:c4:81:bc:c2:54:e3:24:3f:4d:17:69:2c:26:8b:e7:
         91:e9:20:f2:6d:d6:f8:98:35:fc:9e:27:e8:e5:01:e9:4a:87:
         d7:07:8a:db:11:d7:d4:32:4d:55:eb:f8:9e:a5:2f:0d:67:5a:
         bd:26:c4:25:c2:0a:06:ce:b8:21:e2:88:5f:70:73:3f:93:65:
         07:7a:20:6d:52:98:6f:bb:a8:b8:a5:6f:3a:47:ac:2e:19:d2:
         c8:3a:40:72:d6:6b:35:87:03:f0:a9:55:04:a9:89:a5:c8:2d:
         3e:fb:14:66:fc:a5:17:35:87:49:0c:dc:ba:2c:34:ce:ee:98:
         b5:4e:2b:ca:14:09:e4:3a:e4:79:60:ec:8a:33:e6:d1:54:48:
         20:34:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:49:08 2026 by rpki-client