Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/GHERZqz049rvjNTnBfQO3YvbOyk.asa
File: GHERZqz049rvjNTnBfQO3YvbOyk.asa (raw, json)
Hash identifier: KCArC3c+jaUI8BAVlQiNYZY3QjPqtZfUkf0IF/lrrUk=
Subject key identifier: 18:71:11:66:AC:F4:E3:DA:EF:8C:D4:E7:05:F4:0E:DD:8B:DB:3B:29
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019F59CC8688094334365649C9EB789F77D3
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/GHERZqz049rvjNTnBfQO3YvbOyk.asa
Signing time: Mon 13 Jul 2026 04:46:43 +0000
ASPA not before: Mon 13 Jul 2026 04:46:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208233
Providers: AS: 3225
AS: 21050
AS: 42781
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:cc:86:88:09:43:34:36:56:49:c9:eb:78:9f:77:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Jul 13 04:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18711166acf4e3daef8cd4e705f40edd8bdb3b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:e9:77:43:61:1d:5f:dc:6c:2a:a9:d4:16:
d6:3e:ad:81:c7:a2:9f:70:0c:9e:0e:bc:82:00:c6:
d5:a7:2f:ba:8a:6c:cb:fc:bc:b2:75:d7:ee:7d:a9:
e6:7e:ae:0a:a8:8f:b9:13:1c:be:aa:84:2b:fa:74:
2f:12:88:a3:c7:ff:d5:f4:6f:77:5d:41:62:3a:f9:
93:14:c3:2c:98:f2:1f:5b:d7:74:63:3c:69:eb:51:
6d:61:cd:b8:81:65:a1:aa:da:ea:4a:4a:8b:90:07:
f7:04:4e:a9:a3:fc:cb:e5:81:56:92:1b:5c:8e:4a:
04:bf:c3:f8:a7:b1:2e:92:62:d9:6a:96:c5:98:33:
dc:6d:d5:61:f9:3e:e9:0c:04:b7:32:12:f3:1b:ca:
fd:9e:62:cb:ca:db:85:f6:3c:43:13:17:78:1f:d1:
a4:41:8b:58:cb:2a:b7:71:d0:7a:fd:ce:4a:83:fc:
aa:f6:82:9b:f3:d7:24:a0:58:b3:d5:06:b9:f3:9a:
98:74:43:fb:8e:57:bf:c2:7e:46:9c:29:2a:75:65:
5c:a6:d3:f2:73:23:21:f4:17:b1:13:98:0c:5f:69:
e5:ac:fa:85:ca:8e:af:d1:a4:ab:7e:09:1b:07:db:
74:3e:88:91:26:1b:b7:15:08:ec:e8:b8:80:3a:d5:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:71:11:66:AC:F4:E3:DA:EF:8C:D4:E7:05:F4:0E:DD:8B:DB:3B:29
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/GHERZqz049rvjNTnBfQO3YvbOyk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208233
Signature Algorithm: sha256WithRSAEncryption
a2:54:f7:fd:0d:99:0a:de:e9:1a:11:eb:21:f4:36:d9:ba:42:
0d:ec:e9:6d:ef:a8:3c:82:82:8a:26:36:5e:c9:89:d0:72:94:
ac:f8:97:b6:f8:ba:d2:a1:ee:63:68:66:53:46:d9:90:1d:1a:
88:d5:c3:1c:d7:bb:37:74:0c:70:fd:04:e4:0a:97:3c:6d:69:
b6:da:e0:3c:a4:50:05:5f:da:96:1a:8e:ee:ce:5a:a8:4c:28:
98:cf:ee:83:21:ae:b2:18:cb:cf:a4:7c:0a:52:fe:8a:48:17:
2c:db:98:1c:19:31:a3:0f:36:fa:74:5c:16:69:c3:04:d3:9b:
c9:0b:df:bd:a9:cc:37:eb:ca:f8:9c:2c:b8:4f:f6:83:a3:0c:
82:1b:32:f4:6a:23:25:af:c4:25:5a:76:d9:0e:3e:f6:d5:b3:
f9:5d:b3:71:ec:57:6b:cf:ea:ee:eb:1b:1e:d8:7a:6f:1f:f6:
37:c1:9d:ed:67:16:8a:7c:5f:e0:bf:ac:e4:b2:f8:a9:ab:e4:
69:d1:54:e1:c9:54:ed:0c:42:4d:e4:da:64:4d:4c:b3:40:6a:
c9:4d:35:f8:31:ab:00:7c:52:fd:3a:6c:e9:71:3b:75:bd:f9:
14:fb:d7:74:c8:66:6d:33:24:37:85:d8:b0:d0:f5:7f:7d:fb:
d6:86:e0:48
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ9ZzIaICUM0NlZJyet4n3fTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjU3NmIyMzZlM2VlNWQxZjk5OTljM2RiYjdjMTZjNDUx
ZjllMWYwHhcNMjYwNzEzMDQ0NjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODcxMTE2NmFjZjRlM2RhZWY4Y2Q0ZTcwNWY0MGVkZDhiZGIzYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7bpd0NhHV/cbCqp1BbWPq2Bx6Kf
cAyeDryCAMbVpy+6imzL/Lyyddfufanmfq4KqI+5Exy+qoQr+nQvEoijx//V9G93
XUFiOvmTFMMsmPIfW9d0Yzxp61FtYc24gWWhqtrqSkqLkAf3BE6po/zL5YFWkhtc
jkoEv8P4p7EukmLZapbFmDPcbdVh+T7pDAS3MhLzG8r9nmLLytuF9jxDExd4H9Gk
QYtYyyq3cdB6/c5Kg/yq9oKb89ckoFiz1Qa585qYdEP7jle/wn5GnCkqdWVcptPy
cyMh9BexE5gMX2nlrPqFyo6v0aSrfgkbB9t0PoiRJhu3FQjs6LiAOtVgZQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBhxEWas9OPa74zU5wX0Dt2L2zspMB8GA1UdIwQY
MBaAFMj1drI24+5dH5mZw9u3wWxFH54fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNTA5ZTgtZDQ1Ni00YTQzLWFlNGMt
ODkyZTdlM2NjZWNmLzEvR0hFUlpxejA0OXJ2ak5UbkJmUU8zWXZiT3lrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNTA5ZTgtZDQ1Ni00YTQzLWFlNGMtODkyZTdlM2NjZWNm
LzEveVBWMnNqYmo3bDBmbVpuRDI3ZkJiRVVmbmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtaTANBgkqhkiG
9w0BAQsFAAOCAQEAolT3/Q2ZCt7pGhHrIfQ22bpCDezpbe+oPIKCiiY2XsmJ0HKU
rPiXtvi60qHuY2hmU0bZkB0aiNXDHNe7N3QMcP0E5AqXPG1pttrgPKRQBV/alhqO
7s5aqEwomM/ugyGushjLz6R8ClL+ikgXLNuYHBkxow82+nRcFmnDBNObyQvfvanM
N+vK+JwsuE/2g6MMghsy9GojJa/EJVp22Q4+9tWz+V2zcexXa8/q7usbHth6bx/2
N8Gd7WcWinxf4L+s5LL4qavkadFU4clU7QxCTeTaZE1Ms0BqyU01+DGrAHxS/Tps
6XE7db35FPvXdMhmbTMkN4XYsND1f3371obgSA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:20 2026 by rpki-client