Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/O4B_-Tpkvi-Vzod09Q2QLPcHoqI.asa
File:                     O4B_-Tpkvi-Vzod09Q2QLPcHoqI.asa (raw, json)
Hash identifier:          B7ori9YQuZcWPkCjw+CIP639dSEN0EcORNjOlG348oE=
Subject key identifier:   3B:80:7F:F9:3A:64:BE:2F:95:CE:87:74:F5:0D:90:2C:F7:07:A2:A2
Certificate issuer:       /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial:       01A0328628D6C76C8FC9F63F591A78AC0FB2
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/O4B_-Tpkvi-Vzod09Q2QLPcHoqI.asa
Signing time:             Mon 24 Aug 2026 06:47:28 +0000
ASPA not before:          Mon 24 Aug 2026 06:47:28 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34428
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 3356
                          AS: 6461
                          AS: 6762
                          AS: 6939
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:32:86:28:d6:c7:6c:8f:c9:f6:3f:59:1a:78:ac:0f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
        Validity
            Not Before: Aug 24 06:47:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b807ff93a64be2f95ce8774f50d902cf707a2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:27:fc:77:5c:00:e3:0d:2d:0a:d2:09:cd:
                    a1:50:80:fc:2d:c5:ba:88:a0:6a:73:af:69:39:51:
                    ad:bc:5b:32:a0:2b:9c:9d:0a:d6:9e:e1:e5:c3:a2:
                    db:d8:9d:42:92:fc:7b:28:37:1c:1a:04:17:5a:2a:
                    54:a3:c0:d2:49:ac:c8:a2:57:84:14:f5:72:1c:1c:
                    e7:c7:e5:a9:cc:90:68:b4:76:31:5f:e1:62:a1:5b:
                    37:6b:f6:74:cc:ec:da:7a:ce:d7:78:6d:aa:15:15:
                    34:6b:54:04:1e:77:29:86:3b:bb:ac:9a:15:d9:8a:
                    e1:d2:2c:a8:67:66:ef:b6:de:dc:de:7a:a0:fd:92:
                    4c:6a:0b:67:44:e4:17:d6:82:b8:04:50:3b:ce:2b:
                    ed:da:89:a1:9f:c8:f1:49:8c:92:ba:05:bf:c0:a8:
                    46:38:fc:9a:0e:5f:8a:5f:53:09:f2:c0:7f:64:6d:
                    22:25:84:2e:9e:7f:ea:d3:72:70:ec:83:70:8e:f6:
                    e5:44:90:2e:3a:08:0e:76:42:a6:98:9f:49:fc:95:
                    7b:fa:7f:88:19:22:00:7b:70:ce:1d:08:25:1a:72:
                    41:43:2a:7f:2d:4d:e8:47:c8:dd:1c:94:64:29:fb:
                    fa:9c:d2:ed:43:1e:c1:14:20:fb:a6:d2:4d:10:51:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:7F:F9:3A:64:BE:2F:95:CE:87:74:F5:0D:90:2C:F7:07:A2:A2
            X509v3 Authority Key Identifier:
                keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/O4B_-Tpkvi-Vzod09Q2QLPcHoqI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34428

    Signature Algorithm: sha256WithRSAEncryption
         07:46:9f:6d:79:9b:6b:01:55:51:c6:79:c4:1e:86:b0:78:24:
         f1:14:92:01:9f:2d:6f:2e:86:fc:38:96:25:10:c8:27:c7:f1:
         54:cd:a4:9d:0f:0d:91:72:b5:3b:bd:e3:fa:18:35:58:66:bb:
         09:78:de:22:85:a8:ea:68:3b:d6:d9:c3:d2:d5:7c:61:89:e9:
         71:81:35:55:a5:f0:7d:64:38:f0:da:27:4a:27:d6:9c:37:ad:
         88:45:de:b2:b4:12:bc:e5:37:d5:ae:4e:9b:cb:47:68:15:e7:
         ff:7a:c4:70:8d:5a:d1:5a:d2:ea:f2:01:bf:1d:eb:e9:0a:6b:
         c3:3f:da:86:30:e7:d9:88:35:2d:a5:7e:3a:12:6c:f0:c2:5f:
         07:18:e5:2f:3d:13:79:20:57:59:96:4a:0b:5a:1f:75:84:14:
         21:97:5a:44:64:2b:0a:5b:60:62:ce:d7:3a:22:db:3d:21:f4:
         f6:ae:ba:4b:31:a6:6f:86:28:a6:cc:e4:e9:49:da:f8:b2:75:
         56:52:a5:d3:77:ff:2b:da:bb:ed:41:fe:e5:f5:71:fa:ad:fc:
         fd:f7:69:a5:b5:8b:d2:fb:c8:18:3f:5c:9c:f0:79:ce:6e:75:
         ae:d4:37:79:8b:ec:cb:87:84:ae:9e:14:a3:5e:b8:68:5c:60:
         1c:44:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:52:28 2026 by rpki-client