Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa
File:                     1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (raw, json)
Hash identifier:          L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=
Subject key identifier:   F8:B5:01:B9:E5:41:A9:DC:22:14:B2:B5:82:C0:75:02:71:9B:88:F4
Certificate issuer:       /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial:       019EF51F62CA98D03562AF1F69953A9EB486
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa
Signing time:             Tue 23 Jun 2026 15:35:35 +0000
ASPA not before:          Tue 23 Jun 2026 15:35:35 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12462
Providers:                AS: 8903
                          AS: 12541
                          AS: 202766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f5:1f:62:ca:98:d0:35:62:af:1f:69:95:3a:9e:b4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
        Validity
            Not Before: Jun 23 15:35:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8b501b9e541a9dc2214b2b582c07502719b88f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:c7:df:08:72:e4:55:60:f3:64:2a:8e:a1:
                    0f:af:fa:ac:73:a1:6b:13:16:4d:94:79:1c:0a:50:
                    1d:d3:a1:5e:18:fe:5f:7f:7e:7c:af:35:2d:0a:11:
                    09:d3:ac:ca:f6:7c:40:62:be:ab:8c:d5:57:b7:16:
                    a5:44:3d:3b:8d:0d:d3:47:f4:78:f7:33:40:69:23:
                    46:60:c4:59:60:1b:f1:5b:ce:48:47:18:60:9b:60:
                    95:15:ac:ae:b8:00:bd:37:25:e9:0b:7d:b7:6b:4a:
                    28:37:a3:1b:45:99:4a:12:dd:52:9a:37:03:2f:be:
                    34:30:9a:2a:b3:66:29:55:78:a2:e6:3e:47:21:4e:
                    d8:d8:11:85:84:7b:b7:14:06:2d:37:31:e3:1d:e7:
                    01:dd:fd:bc:0c:66:9d:54:44:c3:f7:9b:80:41:30:
                    02:94:69:6e:81:cc:22:6d:f8:cc:56:07:71:71:2f:
                    86:01:5b:0b:52:2d:43:8a:fc:87:99:fb:7e:7c:25:
                    bd:81:de:7e:45:2a:fd:94:21:22:c7:00:a4:e0:20:
                    1c:27:ca:6a:84:eb:f4:12:1d:78:dc:46:28:5b:bc:
                    90:19:3d:dd:72:e1:b1:54:b5:1e:ec:61:de:7f:5d:
                    f1:4e:2d:46:8e:71:79:55:73:80:9e:59:54:62:53:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B5:01:B9:E5:41:A9:DC:22:14:B2:B5:82:C0:75:02:71:9B:88:F4
            X509v3 Authority Key Identifier:
                keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12462

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:25:05:0f:7b:db:2d:3f:1b:ba:7e:99:eb:6b:18:dd:f9:
         9d:ff:83:c1:da:f2:7e:af:90:5c:5e:d2:c0:53:be:4e:b6:5b:
         56:07:b2:9b:74:49:5c:12:8e:bd:4b:5e:dc:90:04:34:27:68:
         85:dc:e8:e8:da:f3:68:72:45:b8:01:97:cb:12:ee:7a:b1:8a:
         b0:9f:b9:1c:86:88:3a:53:a6:98:9a:0e:db:92:75:a7:6f:da:
         81:14:15:48:ad:83:ab:dc:39:20:be:7c:0e:73:0f:03:5f:f7:
         c5:79:ea:e2:81:be:6e:d2:f7:f5:26:fe:b7:82:96:b4:57:1a:
         0c:cb:d8:cb:9f:10:69:80:04:9d:b1:4d:a1:a4:70:86:7e:7c:
         e6:bc:2f:5d:74:27:1e:ec:34:5b:9a:65:ed:17:1a:9a:0c:06:
         37:41:61:7e:e6:4c:2d:81:02:82:00:d7:70:34:f9:93:45:5a:
         62:fc:8e:3b:92:ef:bc:f1:e0:fc:17:03:5b:90:f1:fb:60:71:
         c2:e7:7f:23:18:ce:27:c0:17:6a:df:30:cb:a0:41:1c:8e:93:
         fb:98:e2:76:d4:ff:4a:4d:1b:5e:85:ed:d0:8f:be:ac:ee:24:
         6a:26:bf:0a:12:47:52:01:0b:35:ac:6c:f5:79:7f:8c:16:6d:
         c4:03:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:16 2026 by rpki-client