Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa
File: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (raw, json)
Hash identifier: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=
Subject key identifier: D5:1F:0D:BF:A6:F0:1C:60:F0:A3:69:8E:B4:F3:85:FF:7B:59:35:23
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019D019845B36A4A0AB5DB6B8D5402F58D4A
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa
Signing time: Wed 18 Mar 2026 15:37:29 +0000
ASPA not before: Wed 18 Mar 2026 15:37:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200040
Providers: AS: 9121
AS: 12735
AS: 15924
AS: 34984
AS: 206119
AS: 208821
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:98:45:b3:6a:4a:0a:b5:db:6b:8d:54:02:f5:8d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Mar 18 15:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d51f0dbfa6f01c60f0a3698eb4f385ff7b593523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:27:85:5e:f6:7f:4c:fa:f8:68:1a:6b:15:
b4:02:71:b8:cb:e6:95:2b:54:a5:14:eb:eb:db:cf:
30:c1:50:64:a9:b6:fa:24:ae:d7:7e:80:a0:5f:e5:
d7:f4:5a:23:0d:cf:4c:a4:3b:6e:87:65:02:9b:8e:
e3:fa:34:83:e0:a7:18:1e:7f:4b:71:6d:54:d7:47:
75:b9:f3:ce:35:d8:6f:1b:81:c3:38:a4:13:93:c5:
8c:e9:33:96:c1:7f:24:4f:84:a4:de:5f:bc:eb:d4:
3b:8a:b9:e9:9b:cd:61:63:29:ff:f1:1a:49:a3:fb:
8c:41:27:a6:70:59:d5:b4:14:94:22:e0:e6:31:6f:
fa:aa:94:44:15:a5:c6:04:93:de:53:25:d2:0e:23:
2a:05:7b:c1:6b:0f:94:c6:d0:16:77:4c:79:ce:7a:
45:58:f0:a7:49:22:54:3b:92:8a:49:73:a0:88:fb:
05:82:d2:7b:ae:55:25:0b:50:0a:1a:f5:ab:4e:91:
e0:97:cc:b9:10:14:18:01:53:7b:5c:15:35:9b:1c:
a6:c6:2b:da:73:d7:69:af:95:6e:ec:33:25:5a:2d:
c0:78:21:df:89:f9:23:8b:7c:a9:4b:54:d3:63:b0:
f8:bc:dc:15:a2:25:8d:43:36:21:5b:69:d4:22:52:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1F:0D:BF:A6:F0:1C:60:F0:A3:69:8E:B4:F3:85:FF:7B:59:35:23
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200040
Signature Algorithm: sha256WithRSAEncryption
8f:ed:c1:71:47:80:a6:1d:b5:37:70:2a:77:9d:d5:a2:b6:36:
37:67:bd:ec:c8:a3:14:40:36:49:70:f4:26:2e:d6:1f:80:bf:
70:9f:7f:bc:c4:e4:3d:23:67:45:b9:d8:c8:ac:d9:f3:be:4b:
36:18:e8:65:5b:6c:49:61:73:0a:84:38:b2:fa:5a:3e:e5:8e:
4a:73:6a:6c:ff:23:ca:01:5a:e9:06:7c:56:4d:70:7f:97:87:
3f:94:e0:85:8b:8d:89:a9:cb:65:3e:7a:11:f1:81:db:c0:38:
0e:70:56:69:e8:63:fe:4b:5e:49:44:b1:f8:6c:a7:6a:6a:7f:
a5:e8:6f:14:88:d8:10:63:db:3c:0e:3c:49:44:8d:1d:85:1f:
0c:86:e6:24:63:b3:88:33:ad:2a:8b:c8:f6:a6:e4:bd:fe:bd:
f5:14:fd:9f:e8:18:45:5d:cf:fc:5a:27:76:eb:7c:60:8f:dc:
85:3e:5c:e8:11:f4:2c:c4:63:ee:74:c8:1d:28:97:7c:55:ac:
7f:ee:00:fd:9f:95:a7:5a:b2:3f:a2:6f:a5:d8:3c:dd:94:f3:
10:6d:b5:7b:5c:ef:76:3f:4e:06:54:d4:73:cc:c0:a2:d6:ad:
ca:0a:09:b2:ab:db:d1:8a:1b:af:29:c6:cd:0d:03:ec:ee:f8:
d2:99:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:05:34 2026 by rpki-client