Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Pge3FHys36yCTMnr7OFTphwCI-g.asa
File:                     Pge3FHys36yCTMnr7OFTphwCI-g.asa (raw, json)
Hash identifier:          XE66QDXYoXBZ/BEvECA6R7jkyUnI5l3VLBsSGsToEn0=
Subject key identifier:   3E:07:B7:14:7C:AC:DF:AC:82:4C:C9:EB:EC:E1:53:A6:1C:02:23:E8
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       01A08A8D76224FE0933D977D52362CB1EDA8
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Pge3FHys36yCTMnr7OFTphwCI-g.asa
Signing time:             Thu 10 Sep 2026 09:02:01 +0000
ASPA not before:          Thu 10 Sep 2026 09:02:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41572
Providers:                AS: 2116
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:76:22:4f:e0:93:3d:97:7d:52:36:2c:b1:ed:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Sep 10 09:02:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e07b7147cacdfac824cc9ebece153a61c0223e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:0e:61:74:82:71:b0:d6:b8:26:20:44:2d:
                    8e:38:1c:f5:5e:43:bc:64:8d:d4:4d:c1:01:a4:ab:
                    d8:ae:f5:69:94:d7:a7:df:c9:2f:b7:1a:6e:ee:f1:
                    94:82:43:fc:5c:e9:cd:01:df:ee:87:f1:bf:26:c5:
                    0f:24:37:f0:4c:2e:11:3d:61:24:45:b8:3e:42:d8:
                    55:d0:fa:ec:43:b3:b1:c4:e9:42:5c:29:53:ed:65:
                    7f:ee:79:56:0b:48:40:a2:63:8d:cb:20:c7:ca:7b:
                    f4:bc:95:18:0c:5d:5a:a4:29:10:6a:9e:95:71:36:
                    7e:38:8c:b4:89:fe:9e:bd:89:18:d8:a2:db:73:ed:
                    4c:ea:4d:b0:86:22:3e:a1:e2:ca:33:56:64:6d:8b:
                    01:52:e0:78:d9:40:f7:6e:79:24:23:c1:ba:40:01:
                    64:e3:09:cd:e4:a7:9b:8c:36:4d:b2:be:4c:b0:4c:
                    bf:ae:c9:d9:c9:10:f8:ba:36:58:35:53:ba:ed:b2:
                    fa:22:48:7b:9e:d2:38:0e:25:db:b7:bc:6b:f7:7c:
                    af:24:47:67:c2:20:be:f9:9f:a1:24:e7:32:f7:f2:
                    8a:dc:29:7b:96:61:57:37:60:9d:b4:ad:87:43:35:
                    74:0e:f6:25:91:9f:39:ea:e4:2b:7a:28:7f:a2:fc:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:07:B7:14:7C:AC:DF:AC:82:4C:C9:EB:EC:E1:53:A6:1C:02:23:E8
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/Pge3FHys36yCTMnr7OFTphwCI-g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41572

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:9b:8a:6d:e7:1e:7c:94:c3:bf:4b:a5:6f:73:39:df:92:
         90:26:ac:ab:3c:ea:c8:c2:a4:72:9c:bc:9d:e0:8b:ff:b7:c2:
         7c:8d:f7:2b:77:52:c8:7a:30:87:48:a8:72:4d:7c:bd:cd:b8:
         8c:92:42:20:75:6e:67:bf:e2:86:45:97:90:25:47:f5:a6:e6:
         6d:c8:d3:3b:fa:30:d0:a0:9d:14:b3:74:d6:1e:d4:b4:7b:b0:
         99:09:43:6d:e0:80:a8:59:19:c4:31:f3:c7:08:8d:bc:99:40:
         6c:d0:9a:a6:41:0d:57:31:92:30:c8:82:a2:ac:e4:51:fa:48:
         8a:df:b5:08:68:3a:dd:be:3f:74:10:e9:f0:fb:9d:aa:8c:94:
         e1:81:aa:11:cb:75:1e:83:67:f3:62:90:b6:a6:68:4e:de:a5:
         fa:42:61:35:20:a3:fd:15:e5:41:df:ff:6c:5f:15:4f:d8:f3:
         30:ca:39:df:d6:89:40:4b:fb:90:f5:20:ce:b4:8d:15:67:7d:
         5a:fc:cb:22:ac:c7:70:7c:12:6b:93:e8:f2:dd:51:ed:bc:18:
         c0:95:ab:1a:cf:94:12:de:16:50:c6:b2:09:df:a0:96:ef:90:
         e1:b7:a8:76:a4:f9:45:89:f4:3c:7a:d9:90:05:f9:ac:82:a6:
         fc:ad:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:58 2026 by rpki-client