Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/2c947d-49a9-4796-8592-883c099a440e/1/FyO7Kla3_Uj9nJRiMsOufFaAXvw.asa
File:                     FyO7Kla3_Uj9nJRiMsOufFaAXvw.asa (raw, json)
Hash identifier:          trIYveSY0YqmWgR3uFHNLLJ/w+XenDK9w1vN03aNeMM=
Subject key identifier:   17:23:BB:2A:56:B7:FD:48:FD:9C:94:62:32:C3:AE:7C:56:80:5E:FC
Certificate issuer:       /CN=c3181b1ba72d1fd770c4b3756c8af314ffb96c2f
Certificate serial:       01A182574485E8598CFCA4E403F93BE1BE15
Authority key identifier: C3:18:1B:1B:A7:2D:1F:D7:70:C4:B3:75:6C:8A:F3:14:FF:B9:6C:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgbG6ctH9dwxLN1bIrzFP-5bC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c947d-49a9-4796-8592-883c099a440e/1/FyO7Kla3_Uj9nJRiMsOufFaAXvw.asa
Signing time:             Wed 28 Oct 2026 11:48:39 +0000
ASPA not before:          Wed 28 Oct 2026 11:48:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            34822
Providers:                AS: 2116
                          AS: 50304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2c947d-49a9-4796-8592-883c099a440e/1/wxgbG6ctH9dwxLN1bIrzFP-5bC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2c947d-49a9-4796-8592-883c099a440e/1/wxgbG6ctH9dwxLN1bIrzFP-5bC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgbG6ctH9dwxLN1bIrzFP-5bC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:57:44:85:e8:59:8c:fc:a4:e4:03:f9:3b:e1:be:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181b1ba72d1fd770c4b3756c8af314ffb96c2f
        Validity
            Not Before: Oct 28 11:48:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1723bb2a56b7fd48fd9c946232c3ae7c56805efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:be:71:ee:43:fd:d0:18:a4:ed:30:41:65:
                    ae:58:ef:1c:8f:ad:56:61:0a:a2:f6:b5:df:a1:ef:
                    6f:0e:85:5d:a9:78:30:9a:5d:8d:07:99:96:b5:02:
                    6b:a3:b3:f9:ed:35:18:d3:c8:af:3e:cc:e4:86:4e:
                    7e:38:86:75:83:f0:9d:43:af:1e:f5:03:22:49:1a:
                    26:a4:5f:d3:e7:c1:d1:bc:b1:7f:83:98:7d:e7:f6:
                    37:4e:c3:6d:e0:3f:22:a5:6a:15:11:ba:1e:80:03:
                    27:02:3d:f1:b0:91:86:5f:03:e5:be:e8:17:b2:50:
                    73:5b:7b:43:fa:75:74:0a:c4:75:20:bb:03:d1:f2:
                    cd:85:59:5c:64:7e:e6:ad:fd:65:77:a4:7e:0c:5a:
                    2f:6a:73:b0:f1:84:c5:b0:5d:f1:da:7d:8c:3a:84:
                    bc:d9:7b:db:97:6e:71:aa:db:d6:12:28:07:c3:ab:
                    cb:11:7f:5a:df:9c:a1:b6:7c:fe:66:1a:67:ea:77:
                    d0:01:d7:42:96:4d:ea:cb:5c:f8:b3:4d:e6:17:25:
                    61:ea:aa:79:f2:d5:9a:80:8b:4f:49:c6:ca:62:c8:
                    c0:34:43:ac:52:54:a8:a1:0e:fc:8d:89:38:45:ce:
                    a9:17:66:be:c3:85:08:82:19:83:6a:b7:d5:e6:29:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:BB:2A:56:B7:FD:48:FD:9C:94:62:32:C3:AE:7C:56:80:5E:FC
            X509v3 Authority Key Identifier:
                keyid:C3:18:1B:1B:A7:2D:1F:D7:70:C4:B3:75:6C:8A:F3:14:FF:B9:6C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgbG6ctH9dwxLN1bIrzFP-5bC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c947d-49a9-4796-8592-883c099a440e/1/FyO7Kla3_Uj9nJRiMsOufFaAXvw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c947d-49a9-4796-8592-883c099a440e/1/wxgbG6ctH9dwxLN1bIrzFP-5bC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  34822

    Signature Algorithm: sha256WithRSAEncryption
         7f:fd:72:74:21:cf:15:6c:d2:28:97:9b:a9:4d:b9:17:1b:19:
         82:85:8c:d5:a8:d4:93:af:27:5c:b3:e3:5f:10:87:d5:b1:ee:
         56:b2:84:e9:ad:56:c2:5d:df:06:95:15:96:88:1d:70:50:70:
         3c:e6:2b:36:0a:1e:15:e3:9c:eb:78:21:71:d0:37:20:0e:b7:
         28:4b:e5:58:88:6f:dc:76:5f:2c:9b:69:06:bd:93:ff:83:aa:
         ed:ae:0d:3d:3a:e8:ce:74:17:c3:c6:08:8a:51:94:06:8d:a8:
         1b:1a:f3:c8:32:90:4a:09:97:a2:95:fc:7b:e2:98:1d:01:69:
         2e:69:85:5a:91:24:81:0b:0e:fa:ff:a4:a9:3e:be:60:4a:13:
         09:e8:7f:6f:56:6a:c6:c6:41:c7:7e:aa:66:08:f2:c8:2d:d0:
         93:75:9a:7d:c4:ad:38:51:0a:f5:cb:98:cd:84:f4:ca:3b:84:
         ef:69:b8:69:00:74:4b:36:9f:26:75:e8:96:5d:3f:e6:d2:e3:
         eb:17:70:a2:ce:99:b8:bb:7d:04:03:ce:ac:88:38:98:c0:22:
         cd:62:fe:e8:ad:79:67:96:08:2f:61:50:1f:ef:d6:6d:13:ba:
         42:e6:d1:3b:ba:c6:00:d4:b6:52:44:b6:ef:4a:94:25:d6:2c:
         e9:7c:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:51:49 2026 by rpki-client