Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/d9acVyGvY-GRHIzPw-VB2s24I5s.asa
File: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (raw, json)
Hash identifier: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=
Subject key identifier: 77:D6:9C:57:21:AF:63:E1:91:1C:8C:CF:C3:E5:41:DA:CD:B8:23:9B
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019CF66A54CE78BC0A550E8CDD3C67DD5C63
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/d9acVyGvY-GRHIzPw-VB2s24I5s.asa
Signing time: Mon 16 Mar 2026 11:31:29 +0000
ASPA not before: Mon 16 Mar 2026 11:31:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 206394
Providers: AS: 12502
AS: 33843
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:6a:54:ce:78:bc:0a:55:0e:8c:dd:3c:67:dd:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Mar 16 11:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77d69c5721af63e1911c8ccfc3e541dacdb8239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:71:a0:62:1a:3d:96:6a:dd:eb:c3:39:28:
be:6b:c7:bc:f5:e3:f5:1a:fe:ae:cc:fc:e0:84:97:
39:53:89:02:2e:f8:ca:9e:dc:f8:80:3b:35:91:cc:
1c:bc:99:64:fd:b2:f0:12:ac:f2:5f:e3:c9:22:b4:
e8:b5:65:e9:f8:69:aa:e7:9d:1f:10:20:33:89:70:
73:03:73:84:fa:f3:29:87:14:49:97:fb:c0:bf:80:
56:28:b1:4b:7a:5f:68:5c:bd:71:52:86:22:a9:40:
98:9d:ed:68:db:3f:41:41:e7:0a:bf:8b:44:e2:60:
4a:bd:84:c4:3a:41:6a:72:fe:c0:23:3b:5c:15:57:
00:5c:24:b8:59:ac:b3:b9:ec:08:4b:ee:8e:78:9c:
ef:07:4e:a4:db:1e:0e:c2:b6:8e:d3:b7:9a:a1:12:
5a:61:54:60:a0:81:33:7c:e4:6b:8f:e0:0c:c4:e7:
b4:1a:a1:08:9c:2f:23:aa:a4:ec:69:8f:a9:61:ea:
e7:c0:22:e5:a7:2e:f3:e1:c0:60:55:64:60:97:2c:
5f:98:81:78:ec:3e:6d:d5:39:c6:7e:41:c0:e0:4d:
76:4d:0d:82:1d:2f:95:fc:f1:7d:06:29:f6:1f:ae:
3e:12:39:8e:e3:04:6d:6d:69:3d:c6:be:75:06:67:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:9C:57:21:AF:63:E1:91:1C:8C:CF:C3:E5:41:DA:CD:B8:23:9B
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/d9acVyGvY-GRHIzPw-VB2s24I5s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206394
Signature Algorithm: sha256WithRSAEncryption
37:e1:7a:9a:f2:d4:fb:27:b0:9c:dd:cd:d0:d1:17:b7:da:0c:
af:fa:47:40:a5:9a:1c:b6:ae:b0:1b:c2:5e:50:28:b0:39:cf:
7b:8e:5a:b7:07:1b:23:60:9d:90:50:2d:4e:59:6e:2b:92:db:
81:ca:1d:71:f6:59:3a:69:76:08:de:fe:7b:a9:c8:1c:9a:75:
6e:ae:89:d8:43:65:b8:54:aa:ef:c9:8d:d9:44:8b:7e:0e:bf:
85:e1:7a:8e:50:41:33:92:ce:77:4b:a1:15:35:0f:58:62:43:
ad:dc:f8:25:e9:16:d2:c7:f0:93:05:12:35:c4:69:48:40:93:
6a:70:6b:57:d0:8f:8b:5e:22:15:e2:90:9c:31:80:73:4d:e9:
6f:7b:87:bc:b7:e2:53:1d:0b:c6:6a:0c:da:4b:59:8a:5b:77:
54:e3:d4:3a:c3:2b:65:17:4a:4b:a7:fe:7f:af:f6:c8:fc:2c:
c1:c5:7a:95:d8:91:49:ee:e7:99:b2:de:47:b0:2e:29:6d:a9:
7e:8a:c4:9b:c3:38:23:ab:4f:8c:76:e4:95:dc:55:fe:93:b5:
93:ee:46:35:9c:91:96:49:25:42:0a:be:49:00:45:98:72:db:
c5:76:48:0f:e2:a8:7f:6e:02:9e:64:05:7a:3b:a1:7e:6d:de:
a2:55:ee:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:05:36 2026 by rpki-client