Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/Cy4ORnC1-X4Fx6AyjRk3uSeT37M.asa
File: Cy4ORnC1-X4Fx6AyjRk3uSeT37M.asa (raw, json)
Hash identifier: hj9f3fuIAlpZ0je0ARycQth9i+/lW1QJkv0iiocWNgE=
Subject key identifier: 0B:2E:0E:46:70:B5:F9:7E:05:C7:A0:32:8D:19:37:B9:27:93:DF:B3
Certificate issuer: /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial: 019D1C4F668D8535C19BFF1B174E203651FF
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/Cy4ORnC1-X4Fx6AyjRk3uSeT37M.asa
Signing time: Mon 23 Mar 2026 20:07:38 +0000
ASPA not before: Mon 23 Mar 2026 20:07:38 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200819
Providers: AS: 917
AS: 20473
AS: 21700
AS: 34872
AS: 47272
AS: 52025
AS: 207841
AS: 209735
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:4f:66:8d:85:35:c1:9b:ff:1b:17:4e:20:36:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Validity
Not Before: Mar 23 20:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b2e0e4670b5f97e05c7a0328d1937b92793dfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:b3:35:99:a8:2c:94:e7:c5:0c:90:a9:9f:
fb:eb:e6:9a:78:cf:e3:ca:6e:19:f9:b9:b2:3b:29:
31:46:42:25:79:d4:0d:c6:2a:9e:49:36:b0:6e:38:
4a:e9:e8:5e:73:fb:8d:63:2e:5a:23:30:a9:14:d4:
c6:de:56:5d:7e:e5:da:96:92:fc:48:63:2d:9d:46:
30:51:8b:50:eb:d5:56:c1:b6:fc:bf:52:d9:60:2d:
30:bc:ba:4d:19:26:63:c4:8b:ec:61:98:68:65:fe:
97:7f:e6:80:81:1b:ad:34:80:bd:1a:6a:38:5e:b3:
71:db:1f:d1:34:2e:d5:67:7c:2e:93:b3:34:31:0f:
a9:5a:f1:a8:13:20:46:44:77:08:37:b4:70:26:2f:
b6:47:58:cb:2a:d7:da:45:fd:73:4d:07:e6:11:48:
45:9f:8d:cc:f8:87:36:66:13:ba:1d:ad:fa:1c:fb:
a9:03:4d:b4:64:bb:d7:70:33:ff:a8:ee:ca:32:fe:
48:43:26:57:c4:46:bd:a6:d7:6a:1f:f9:f0:ec:30:
71:db:8f:d5:71:30:bd:ca:2f:e5:8b:38:c6:b5:69:
da:57:62:bb:1b:ae:83:2f:b2:49:91:15:73:13:39:
17:ce:4a:6e:36:4a:20:4c:00:e7:fa:ef:b0:35:65:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:0E:46:70:B5:F9:7E:05:C7:A0:32:8D:19:37:B9:27:93:DF:B3
X509v3 Authority Key Identifier:
keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/Cy4ORnC1-X4Fx6AyjRk3uSeT37M.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200819
Signature Algorithm: sha256WithRSAEncryption
89:78:ff:f0:4c:06:66:1f:6a:f0:e3:c2:6e:67:99:7e:3b:62:
9c:40:18:e5:5d:7d:70:83:24:a2:16:ec:3b:20:2b:2a:f9:0c:
f2:4a:d7:84:71:8e:7f:34:9a:3b:af:2a:56:18:d3:f1:d4:95:
9d:36:d0:8e:9f:7a:f0:e7:5e:66:27:a0:5d:05:1a:50:a7:dd:
0d:18:e3:35:e4:b3:fd:30:b0:ff:6f:10:c7:1f:c8:52:6a:6e:
40:46:c1:9a:28:7f:86:4b:ca:d1:92:7f:fb:3a:d4:fd:8e:89:
80:3c:eb:06:49:8c:f2:68:c6:cf:22:13:16:38:d6:e3:3a:7c:
cf:64:9c:3a:c3:f9:b3:be:b8:f1:e5:bd:48:8c:41:ae:f5:55:
5a:d4:f5:29:a7:e0:40:2f:ad:ef:81:c2:72:42:7e:ea:47:49:
7e:1a:34:8e:8e:51:2d:26:40:86:9c:60:55:49:b4:12:d9:d1:
e9:27:fe:f4:46:28:32:4c:39:5e:01:a4:a1:ac:a7:6f:74:aa:
16:4a:b6:b6:b1:a7:e5:74:d0:8e:03:8d:55:6a:13:3e:35:10:
ca:e7:ba:8b:e2:6b:9c:62:89:ab:89:ed:08:c4:13:07:a7:e5:
ad:b7:95:50:42:5a:35:5d:59:1e:3c:ad:58:4e:e3:d5:20:39:
e3:6a:57:30
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0cT2aNhTXBm/8bF04gNlH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjEwZmIxNjViMjdmOGFhNzYyMTkwOWViODM3OGFiMTZm
YjhkMGEwHhcNMjYwMzIzMjAwNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjJlMGU0NjcwYjVmOTdlMDVjN2EwMzI4ZDE5MzdiOTI3OTNkZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5WzNZmoLJTnxQyQqZ/76+aaeM/j
ym4Z+bmyOykxRkIledQNxiqeSTawbjhK6ehec/uNYy5aIzCpFNTG3lZdfuXalpL8
SGMtnUYwUYtQ69VWwbb8v1LZYC0wvLpNGSZjxIvsYZhoZf6Xf+aAgRutNIC9Gmo4
XrNx2x/RNC7VZ3wuk7M0MQ+pWvGoEyBGRHcIN7RwJi+2R1jLKtfaRf1zTQfmEUhF
n43M+Ic2ZhO6Ha36HPupA020ZLvXcDP/qO7KMv5IQyZXxEa9ptdqH/nw7DBx24/V
cTC9yi/lizjGtWnaV2K7G66DL7JJkRVzEzkXzkpuNkogTADn+u+wNWVzFwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAsuDkZwtfl+BcegMo0ZN7knk9+zMB8GA1UdIwQY
MBaAFL1hD7Flsn+Kp2IZCeuDeKsW+40KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MGFkYzUtNWM1MS00ZjkyLWIwZGMt
ODg5Mjk2OTE2MjAzLzEvQ3k0T1JuQzEtWDRGeDZBeWpSazN1U2VUMzdNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MGFkYzUtNWM1MS00ZjkyLWIwZGMtODg5Mjk2OTE2MjAz
LzEvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMQczANBgkqhkiG
9w0BAQsFAAOCAQEAiXj/8EwGZh9q8OPCbmeZfjtinEAY5V19cIMkohbsOyArKvkM
8krXhHGOfzSaO68qVhjT8dSVnTbQjp968OdeZiegXQUaUKfdDRjjNeSz/TCw/28Q
xx/IUmpuQEbBmih/hkvK0ZJ/+zrU/Y6JgDzrBkmM8mjGzyITFjjW4zp8z2ScOsP5
s7648eW9SIxBrvVVWtT1KafgQC+t74HCckJ+6kdJfho0jo5RLSZAhpxgVUm0EtnR
6Sf+9EYoMkw5XgGkoaynb3SqFkq2trGn5XTQjgONVWoTPjUQyue6i+JrnGKJq4nt
CMQTB6flrbeVUEJaNV1ZHjytWE7j1SA542pXMA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:28 2026 by rpki-client