Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/NPAD-gb2IfapgC0KE3e5nGx0FmE.asa
File: NPAD-gb2IfapgC0KE3e5nGx0FmE.asa (raw, json)
Hash identifier: u4JmMFyDnGkhdxY46b0rOlB0YK04oVW/aUsWGPkt2LA=
Subject key identifier: 34:F0:03:FA:06:F6:21:F6:A9:80:2D:0A:13:77:B9:9C:6C:74:16:61
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 01A07B8616CFE00A243F71A397E0504C20E4
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/NPAD-gb2IfapgC0KE3e5nGx0FmE.asa
Signing time: Mon 07 Sep 2026 10:59:40 +0000
ASPA not before: Mon 07 Sep 2026 10:59:40 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214673
Providers: AS: 3223
AS: 49981
AS: 60068
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:86:16:cf:e0:0a:24:3f:71:a3:97:e0:50:4c:20:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Sep 7 10:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34f003fa06f621f6a9802d0a1377b99c6c741661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:1d:50:db:56:1a:5d:5a:bc:fe:ee:7b:1a:
f4:bc:3e:9a:32:1e:ee:73:5e:8c:ae:bf:ee:52:1c:
b5:d3:3d:5a:5a:f1:f0:f5:84:7d:4e:78:31:0a:79:
59:56:a1:9a:4a:62:8b:bf:a3:aa:19:d9:9a:94:64:
c5:1b:ae:eb:0c:94:1c:8a:35:87:02:46:8a:f9:ff:
35:fb:8e:0f:9c:db:d4:8a:07:25:ff:16:64:47:6a:
e6:9f:37:e5:d3:6a:41:43:cd:44:36:8a:9a:0c:78:
98:8f:2b:31:a2:49:a3:da:30:29:99:1f:86:e6:04:
61:a7:99:a4:3d:4a:94:82:d6:ef:ae:52:03:2f:58:
d9:33:5c:2a:b4:37:48:3b:d9:c7:93:66:5a:bd:a5:
55:0f:d6:c2:9b:2b:f7:fc:5f:42:a7:6a:4d:ac:bf:
22:8c:87:25:9c:f1:84:95:cc:d5:8c:63:f7:78:42:
09:04:fe:12:e2:cc:4f:9f:1e:1f:f3:a2:35:bd:e2:
6e:a5:e6:d6:46:05:64:5b:ce:9a:0a:f6:f0:ba:53:
9d:64:1f:86:28:27:99:a9:7e:8a:4c:1c:38:7e:86:
3e:da:f7:ba:63:ed:50:1c:c4:e6:7a:a7:af:be:7d:
73:45:05:54:8c:b1:74:dc:ef:83:88:f3:30:79:21:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F0:03:FA:06:F6:21:F6:A9:80:2D:0A:13:77:B9:9C:6C:74:16:61
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/NPAD-gb2IfapgC0KE3e5nGx0FmE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214673
Signature Algorithm: sha256WithRSAEncryption
60:13:d3:0a:15:eb:6d:1c:9d:de:5f:69:d0:ba:15:2d:a0:e0:
bb:85:9a:48:b8:6e:4c:93:0b:ca:75:07:44:e3:ac:94:c3:e0:
5b:18:5f:09:d6:8a:a6:8f:e7:a2:66:df:3f:5b:e1:5a:c4:19:
4c:a4:ae:6d:35:f1:87:4f:14:58:55:eb:c6:cb:6d:f4:a4:ed:
bf:ba:10:14:16:c9:d2:50:f5:56:28:53:15:f9:55:f4:a5:87:
d6:d9:91:90:eb:f3:83:c1:c5:92:2a:84:ac:91:ff:ee:97:b6:
7c:9a:ef:39:2d:2c:de:e8:53:28:dd:02:4a:2e:54:a9:47:08:
1a:87:bf:bb:ba:37:51:05:39:15:07:54:15:12:91:66:c2:02:
6a:e3:20:be:a6:50:80:da:78:7f:51:83:15:7e:3b:b5:73:3b:
bc:10:7b:e2:82:a7:14:bd:30:b8:23:ff:dd:1b:80:6f:47:53:
06:a2:0d:ac:a9:2b:14:ff:e6:38:db:67:16:89:3a:e3:9d:81:
bb:01:d9:67:b3:56:42:d4:fe:ae:f0:4d:e1:d0:19:a4:81:ca:
9a:97:da:cc:38:ca:af:54:f5:26:8a:85:bb:35:71:3e:fe:1d:
60:b2:f7:26:df:8f:91:9b:87:e7:46:6d:d9:c3:17:39:17:3b:
4a:35:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:29:12 2026 by rpki-client