Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/ES8SbE0J3_8FtlbPXaKZ_ZY94Nk.asa
File:                     ES8SbE0J3_8FtlbPXaKZ_ZY94Nk.asa (raw, json)
Hash identifier:          ZunJv00v4WksS7xStjcAnUE0liTHcb8msRtbigs8sXc=
Subject key identifier:   11:2F:12:6C:4D:09:DF:FF:05:B6:56:CF:5D:A2:99:FD:96:3D:E0:D9
Certificate issuer:       /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial:       01A067748E8D04B5F8854660964AC3173ABA
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/ES8SbE0J3_8FtlbPXaKZ_ZY94Nk.asa
Signing time:             Thu 03 Sep 2026 13:28:06 +0000
ASPA not before:          Thu 03 Sep 2026 13:28:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15688
Providers:                AS: 5619
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:74:8e:8d:04:b5:f8:85:46:60:96:4a:c3:17:3a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
        Validity
            Not Before: Sep  3 13:28:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=112f126c4d09dfff05b656cf5da299fd963de0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a5:ab:32:16:58:54:a9:32:f6:12:35:05:ea:
                    31:f1:9e:a5:8e:ce:28:51:b5:82:fa:90:ac:c2:57:
                    a1:df:53:20:52:68:7c:58:e8:85:0b:1a:46:fa:da:
                    fa:ea:5a:97:b3:98:42:d3:ee:e8:f3:09:5a:1b:54:
                    e9:2f:8d:f8:b1:48:45:db:5e:f0:52:5c:c3:d2:63:
                    f6:c9:0a:b3:73:c7:81:bc:1f:a2:ee:70:dd:a5:6a:
                    09:da:87:92:6e:ca:bc:6c:24:d0:bd:68:7c:1f:7c:
                    ab:c3:97:b9:3f:73:14:d1:ad:31:0b:00:90:65:a0:
                    e0:06:a9:50:de:c6:8b:b4:26:0e:1a:2d:03:05:78:
                    31:4b:5c:50:fe:d8:e6:a7:3a:52:a2:7c:65:55:5c:
                    24:28:84:c0:2d:ea:e5:c9:59:2f:02:12:80:9f:38:
                    dd:ed:76:44:7b:6b:60:70:80:c4:3e:db:96:b9:cd:
                    71:c4:0c:d6:e0:ed:3c:d7:b3:b5:8a:53:25:2c:1e:
                    1e:74:61:ed:b6:17:cd:ec:a5:00:f2:d7:de:36:b3:
                    80:76:25:8d:f7:33:ee:71:8b:69:79:2f:89:4b:a4:
                    2e:4c:cf:9e:66:9a:0a:58:73:d8:99:6c:d6:c2:47:
                    ae:47:4e:82:b5:2c:e6:a5:57:40:25:de:ab:11:62:
                    2a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:12:6C:4D:09:DF:FF:05:B6:56:CF:5D:A2:99:FD:96:3D:E0:D9
            X509v3 Authority Key Identifier:
                keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/ES8SbE0J3_8FtlbPXaKZ_ZY94Nk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15688

    Signature Algorithm: sha256WithRSAEncryption
         c4:3c:ae:92:f7:00:6c:0e:d7:d6:a8:48:eb:38:1b:58:41:4c:
         14:c2:5e:79:38:2c:25:96:b8:6a:c4:48:40:4c:90:b5:21:91:
         c0:8a:28:76:0e:90:41:8d:72:8b:07:5b:29:07:9f:bf:3b:94:
         94:cf:06:a7:49:97:eb:41:a2:02:f7:56:42:01:ef:c1:25:4f:
         0a:41:d9:dc:24:cd:02:98:ca:7e:d2:63:7c:5b:34:2b:62:df:
         0c:70:79:33:5b:ad:3c:fd:63:45:32:2c:ec:54:fa:89:d8:e8:
         68:18:01:36:41:f5:e0:d0:b7:dc:8f:67:d5:c3:6f:b5:40:74:
         74:d0:30:5a:07:5e:f0:5b:b1:65:93:c1:d1:71:38:ac:fb:13:
         26:5f:40:e6:e6:30:a9:76:1d:e8:87:12:a5:82:c8:be:d5:7a:
         22:46:72:53:57:b9:ad:50:ba:8f:cf:a1:2d:fb:30:8b:9d:6f:
         d2:88:ca:96:f4:d8:e9:f1:fd:2a:05:90:08:1a:0a:bf:13:c8:
         d2:23:07:a3:f0:77:d3:a6:e6:bd:4c:40:00:86:7d:38:12:f4:
         b3:15:56:e0:df:4b:b8:3f:65:b5:77:23:55:5d:c8:e1:3c:99:
         7b:93:45:3f:8b:9f:92:c7:b9:30:83:df:27:03:63:00:10:e7:
         25:1c:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:15:36 2026 by rpki-client