Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/w9_9phOVfcIB0arXvZjOg3oe-Gk.asa
File: w9_9phOVfcIB0arXvZjOg3oe-Gk.asa (raw, json)
Hash identifier: rpPL3WEh5ip5RqGHVPKSVlccVtUT14qZLk2GgYWP78M=
Subject key identifier: C3:DF:FD:A6:13:95:7D:C2:01:D1:AA:D7:BD:98:CE:83:7A:1E:F8:69
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019D04B11E0B8F2D7BA73E06F01C117C58CD
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/w9_9phOVfcIB0arXvZjOg3oe-Gk.asa
Signing time: Thu 19 Mar 2026 06:03:29 +0000
ASPA not before: Thu 19 Mar 2026 06:03:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205941
Providers: AS: 6204
AS: 6939
AS: 20473
AS: 23507
AS: 44324
AS: 53356
AS: 57050
AS: 60602
AS: 60900
AS: 62553
AS: 200132
AS: 207252
AS: 208453
AS: 210464
AS: 212271
AS: 212635
AS: 212895
AS: 213413
AS: 213449
AS: 214480
AS: 214757
AS: 214762
AS: 214809
AS: 215362
AS: 215828
AS: 400587
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:b1:1e:0b:8f:2d:7b:a7:3e:06:f0:1c:11:7c:58:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Mar 19 06:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3dffda613957dc201d1aad7bd98ce837a1ef869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:c7:d6:de:61:e5:3c:e1:9a:95:e5:3a:fb:
f8:60:13:77:86:11:49:69:96:98:60:42:af:30:71:
5a:39:88:5d:b9:b9:7b:c3:5c:1e:d2:0a:48:88:2f:
e5:76:b1:91:4f:84:f9:d8:d7:98:8d:53:23:39:4f:
e0:e6:85:96:ad:aa:4c:db:1c:81:64:39:23:ed:d8:
4c:65:ed:92:fa:ae:6f:ee:6f:bf:06:20:90:83:85:
0d:2b:79:fe:f4:b4:ae:c2:27:c7:f5:6e:e1:cd:7b:
88:18:11:cc:25:e1:76:08:3d:50:fb:2f:54:95:11:
2c:68:9a:b3:1e:e5:21:d2:88:33:23:f7:6b:ee:8c:
9d:27:e4:f2:01:c2:67:52:d1:f6:28:e0:e6:e5:bc:
72:af:2d:7b:2d:4a:78:28:35:8e:0b:52:10:e1:93:
b7:65:ca:5d:a4:08:12:01:1e:42:e8:6d:2c:e7:70:
21:fa:bc:9c:42:c9:2d:00:a3:67:b8:99:af:46:6a:
ee:b4:4b:78:ae:e9:56:d7:7e:c9:24:07:b3:f8:df:
a6:32:16:3c:54:f2:d3:31:78:9f:58:90:41:fb:1e:
5b:03:f7:11:45:f7:81:5e:f9:12:83:85:18:c3:55:
34:ef:02:79:7c:15:db:f4:74:e5:4c:eb:01:93:46:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:FD:A6:13:95:7D:C2:01:D1:AA:D7:BD:98:CE:83:7A:1E:F8:69
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/w9_9phOVfcIB0arXvZjOg3oe-Gk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205941
Signature Algorithm: sha256WithRSAEncryption
a2:0e:6a:a3:74:79:7a:72:69:0e:b5:7f:40:53:0e:69:1f:dd:
57:04:fe:fe:b6:ee:38:12:57:59:e9:4b:f0:40:81:31:87:4d:
61:b3:d7:6f:c8:19:a4:68:44:ce:1f:d7:fb:38:4c:b8:f9:24:
22:ff:59:ad:13:50:f9:46:de:ae:5f:3f:34:a2:6a:fb:8f:5d:
ad:e9:eb:82:4c:98:0e:da:96:86:9b:f3:fd:b1:d6:5e:13:21:
3f:08:fe:14:b4:71:31:be:8a:18:7d:cc:46:b0:97:73:47:8f:
a1:f1:1d:38:35:e4:fa:18:17:6b:a2:83:13:fa:8a:a5:e2:08:
74:e6:e1:6b:4e:90:b4:25:f6:54:48:40:79:ea:1d:d3:78:26:
a2:5d:71:f4:8e:1d:f5:00:8f:49:00:36:48:67:fb:b0:02:1f:
00:68:15:8d:68:cb:14:e7:44:4a:52:7b:98:a0:cc:af:05:c9:
e8:6a:51:be:e0:ca:19:60:0a:89:20:e4:bb:47:71:51:bb:76:
72:26:43:b6:db:08:d0:a0:9d:92:f0:e0:bb:23:8e:72:b4:a6:
22:1b:0e:9c:43:39:a0:8f:88:99:8a:0b:35:7b:7e:57:73:0c:
9e:a3:0c:fa:a9:24:bc:00:75:73:d7:64:ec:bb:f0:ff:0d:23:
67:99:ad:d5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0EsR4Ljy17pz4G8BwRfFjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz
MjlhMDcwHhcNMjYwMzE5MDYwMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2RmZmRhNjEzOTU3ZGMyMDFkMWFhZDdiZDk4Y2U4MzdhMWVmODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqljH1t5h5TzhmpXlOvv4YBN3hhFJ
aZaYYEKvMHFaOYhdubl7w1we0gpIiC/ldrGRT4T52NeYjVMjOU/g5oWWrapM2xyB
ZDkj7dhMZe2S+q5v7m+/BiCQg4UNK3n+9LSuwifH9W7hzXuIGBHMJeF2CD1Q+y9U
lREsaJqzHuUh0ogzI/dr7oydJ+TyAcJnUtH2KODm5bxyry17LUp4KDWOC1IQ4ZO3
ZcpdpAgSAR5C6G0s53Ah+rycQsktAKNnuJmvRmrutEt4rulW137JJAez+N+mMhY8
VPLTMXifWJBB+x5bA/cRRfeBXvkSg4UYw1U07wJ5fBXb9HTlTOsBk0bxjwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMPf/aYTlX3CAdGq172YzoN6HvhpMB8GA1UdIwQY
MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt
ZTU5MmM3ZDM1ZmYyLzEvdzlfOXBoT1ZmY0lCMGFyWHZaak9nM29lLUdrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy
LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdTANBgkqhkiG
9w0BAQsFAAOCAQEAog5qo3R5enJpDrV/QFMOaR/dVwT+/rbuOBJXWelL8ECBMYdN
YbPXb8gZpGhEzh/X+zhMuPkkIv9ZrRNQ+Uberl8/NKJq+49drenrgkyYDtqWhpvz
/bHWXhMhPwj+FLRxMb6KGH3MRrCXc0ePofEdODXk+hgXa6KDE/qKpeIIdObha06Q
tCX2VEhAeeod03gmol1x9I4d9QCPSQA2SGf7sAIfAGgVjWjLFOdESlJ7mKDMrwXJ
6GpRvuDKGWAKiSDku0dxUbt2ciZDttsI0KCdkvDguyOOcrSmIhsOnEM5oI+ImYoL
NXt+V3MMnqMM+qkkvAB1c9dk7Lvw/w0jZ5mt1Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:38 2026 by rpki-client