Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/ok5r6MoKYHzJuyej6dFp-gTIp3M.asa
File: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (raw, json)
Hash identifier: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=
Subject key identifier: A2:4E:6B:E8:CA:0A:60:7C:C9:BB:27:A3:E9:D1:69:FA:04:C8:A7:73
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 019CFB333904CCCD1A597813354815660F7D
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/ok5r6MoKYHzJuyej6dFp-gTIp3M.asa
Signing time: Tue 17 Mar 2026 09:49:24 +0000
ASPA not before: Tue 17 Mar 2026 09:49:24 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205031
Providers: AS: 6830
AS: 8953
AS: 9050
AS: 12302
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:33:39:04:cc:cd:1a:59:78:13:35:48:15:66:0f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Mar 17 09:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a24e6be8ca0a607cc9bb27a3e9d169fa04c8a773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:39:3c:4b:8e:c9:61:5f:dd:a5:6a:a4:d1:
5f:a6:8c:3f:4a:b3:06:0a:e1:dd:35:1c:d3:38:1a:
3c:fb:ab:eb:19:fc:06:00:1e:db:bc:b9:4d:aa:b2:
e7:c6:0a:00:99:f2:87:fc:b4:67:d4:bb:99:1d:54:
24:e1:e1:fe:19:e9:ad:75:11:bf:03:f2:5b:90:dc:
d4:05:34:d6:bc:83:28:0b:c0:b7:ea:70:0c:20:9a:
1e:92:22:f0:54:42:0e:ee:ac:47:4e:dc:d4:7b:75:
9c:ff:d2:ad:08:8b:9f:3a:3f:03:f0:56:de:81:cc:
f6:5e:cb:86:8b:52:ff:d3:7d:a4:d9:73:1e:f6:ec:
5a:96:a0:e3:30:0e:0b:c7:24:74:96:49:ec:aa:39:
6d:b1:14:35:1d:d1:e6:d2:60:8b:83:88:54:fb:e9:
71:8c:42:ee:4c:ce:9e:cb:b3:c1:f9:f3:0f:72:44:
3b:53:0c:31:20:4a:ab:38:af:4e:24:fd:93:70:77:
be:aa:d9:6e:49:91:b4:90:50:1b:34:38:d2:d7:e2:
17:00:69:9f:39:c4:71:2e:86:8d:24:b2:15:9a:92:
3a:96:91:6c:fd:9a:d4:da:cd:00:c1:d2:fb:7b:9d:
f6:ee:a9:e1:2c:30:48:17:81:f8:87:66:56:de:11:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:6B:E8:CA:0A:60:7C:C9:BB:27:A3:E9:D1:69:FA:04:C8:A7:73
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/ok5r6MoKYHzJuyej6dFp-gTIp3M.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205031
Signature Algorithm: sha256WithRSAEncryption
2b:40:a6:07:73:f7:84:44:bf:cf:26:4e:eb:ce:0e:6b:41:13:
d5:8e:3a:b9:b0:27:c0:89:70:3f:f6:98:2e:2c:31:8c:73:3a:
9c:8b:d5:1a:83:bf:67:e8:5c:10:23:45:9f:91:c7:30:ea:06:
16:a4:36:68:98:85:19:53:ab:cb:0f:a0:a9:57:4c:09:94:0f:
ed:aa:48:be:09:32:af:49:ca:53:b3:9d:36:67:2f:a6:a2:a4:
a4:a3:69:2c:33:d8:e9:3f:5b:21:dc:5e:56:e5:c0:e8:67:72:
0c:d9:ea:5f:b2:02:38:27:f6:3c:3b:73:c9:ea:82:a3:22:74:
7d:6a:a8:36:13:a0:8e:9b:8d:12:e6:62:78:07:1d:86:d5:58:
fd:85:95:57:f1:37:41:92:f0:d4:53:b5:e7:06:1e:72:fc:f9:
55:dd:cd:a6:53:80:06:4a:38:0b:1f:f4:5e:ff:ed:24:06:2b:
29:cd:e1:4b:14:51:c3:48:e4:e0:4b:45:3c:50:7a:35:df:06:
4a:c9:9a:e3:b8:2f:fe:5c:29:93:d7:12:b1:9f:fd:86:f1:ef:
56:2f:1d:7c:04:fe:f0:90:13:28:7a:9b:7d:27:4c:d9:84:ee:
a9:0c:9b:07:26:b9:c6:e9:85:9f:78:24:37:da:78:21:c2:8c:
e5:00:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:49 2026 by rpki-client