Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/CtomyEXTE0DZf-G3hXGEDs_LcTk.asa
File:                     CtomyEXTE0DZf-G3hXGEDs_LcTk.asa (raw, json)
Hash identifier:          lwfxfVhmuj637uva+sVgZNEUVlG0f2LURl7fzEO3oQY=
Subject key identifier:   0A:DA:26:C8:45:D3:13:40:D9:7F:E1:B7:85:71:84:0E:CF:CB:71:39
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A08A8D72AAD1F731EF4C03C898A252B172
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/CtomyEXTE0DZf-G3hXGEDs_LcTk.asa
Signing time:             Thu 10 Sep 2026 09:02:00 +0000
ASPA not before:          Thu 10 Sep 2026 09:02:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            6709
Providers:                AS: 2116
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:72:aa:d1:f7:31:ef:4c:03:c8:98:a2:52:b1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 09:02:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0ada26c845d31340d97fe1b78571840ecfcb7139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:91:62:92:58:80:07:b7:3e:af:18:ce:c8:45:
                    df:99:5a:0c:18:a5:7e:c2:ac:f4:b1:c2:46:8e:c2:
                    2d:e8:97:9d:bc:bd:6a:cb:4c:2c:0f:76:13:12:15:
                    0e:aa:ac:b4:14:db:0f:3f:9f:22:5d:a9:2e:ae:94:
                    9c:d1:86:07:42:bf:7b:70:78:43:9c:5d:e0:3c:21:
                    ec:cf:2f:11:59:70:a9:6a:c9:8e:61:87:95:e6:9b:
                    26:d7:dc:b1:38:0c:4c:13:d3:1a:b7:dc:3f:ed:93:
                    58:b3:cd:ed:64:31:a4:c2:8c:0d:23:86:d1:4f:68:
                    60:59:ca:b0:42:c7:86:4e:08:c6:a2:e8:2c:a2:53:
                    7b:67:68:1c:23:ee:fc:70:35:33:eb:ae:37:ad:83:
                    e9:51:c2:b6:4a:ba:43:6d:72:07:c0:be:d6:ea:dc:
                    30:13:09:8e:db:b4:9b:b9:3b:a2:0d:a9:a3:b5:28:
                    69:83:75:e2:7e:b9:d3:45:84:34:15:f8:f9:e5:4d:
                    c8:af:9c:09:bb:a1:b1:dd:11:b3:93:2a:6f:46:72:
                    6d:e9:ab:ba:f8:37:68:e6:a2:52:59:b5:be:43:f7:
                    37:69:69:12:e6:bf:51:3b:4c:29:40:77:a8:6e:42:
                    f3:d7:bb:64:39:d8:a4:a1:26:50:e2:ff:80:45:00:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DA:26:C8:45:D3:13:40:D9:7F:E1:B7:85:71:84:0E:CF:CB:71:39
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/CtomyEXTE0DZf-G3hXGEDs_LcTk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6709

    Signature Algorithm: sha256WithRSAEncryption
         41:78:6a:d1:55:91:7c:69:32:3f:23:ac:9c:0a:3c:6b:65:5e:
         a4:a3:33:fd:7b:d5:e4:3b:d5:71:70:8d:d4:a7:80:24:6b:eb:
         de:04:fa:2a:23:fd:12:02:aa:8f:fe:ea:62:de:63:53:d6:fc:
         09:95:2a:80:02:b2:fe:65:a9:33:d0:ab:d3:44:7e:25:3f:4f:
         31:4a:5d:53:9b:b6:8f:d3:71:83:93:b8:1e:4a:ef:db:29:85:
         4a:1e:07:f9:c4:07:b8:1e:b0:7a:09:6a:3f:07:fe:3b:8e:bc:
         5b:9f:83:f6:ab:97:ec:e7:a7:e1:56:83:9f:4e:1e:7a:0f:be:
         e8:89:81:0e:45:e1:b9:bf:2a:ff:90:11:c8:88:a5:f4:09:9d:
         78:95:e5:94:dd:d3:8f:b0:b0:b4:5c:b8:f2:d3:67:5a:e3:e5:
         c3:ed:aa:f5:11:87:fc:88:b7:1b:6b:80:45:d3:d3:c3:b0:99:
         43:50:ae:6d:9c:1b:9f:ab:c8:be:04:3b:af:97:16:96:87:c0:
         24:21:e8:69:75:f7:67:2e:a7:ed:c5:90:ff:9c:78:da:95:bb:
         5f:07:02:4c:c0:ca:cd:57:37:17:0f:e4:e5:2f:3e:bd:87:aa:
         fb:af:56:62:76:a9:87:58:da:af:58:d3:a7:cb:3c:b8:c7:9f:
         2e:29:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:05 2026 by rpki-client