Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/3I8r6nk9FMKnPoUmEICiYZh5jzo.asa
File: 3I8r6nk9FMKnPoUmEICiYZh5jzo.asa (raw, json)
Hash identifier: D3onkOruVozUvicrMaDrSqAZyE2pIZAYfxt5MIWUe1k=
Subject key identifier: DC:8F:2B:EA:79:3D:14:C2:A7:3E:85:26:10:80:A2:61:98:79:8F:3A
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A1DA6DD62BBDC8D513D82A091C3BBDCA8A
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/3I8r6nk9FMKnPoUmEICiYZh5jzo.asa
Signing time: Sat 14 Nov 2026 14:19:53 +0000
ASPA not before: Sat 14 Nov 2026 14:19:53 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219172
Providers: AS: 16276
AS: 23470
AS: 24875
AS: 44620
AS: 51722
AS: 210814
AS: 211421
AS: 212027
AS: 215120
AS: 216394
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:6d:d6:2b:bd:c8:d5:13:d8:2a:09:1c:3b:bd:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Nov 14 14:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc8f2bea793d14c2a73e85261080a26198798f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:d8:28:05:5e:0c:d7:21:e1:36:47:f3:71:
06:25:9b:b7:6a:7f:ad:c2:b9:7e:f3:f7:5a:71:59:
8f:a3:34:33:26:59:e7:ee:f0:47:ed:68:69:1d:f4:
d9:7d:50:72:c2:3c:63:9f:38:f1:0e:55:9d:98:7b:
d0:a0:ce:83:7c:76:ed:c6:58:76:4c:37:f8:b9:c4:
d0:56:ca:90:04:58:14:1c:97:81:df:15:50:1b:c4:
13:75:90:5e:ba:f5:53:94:c7:01:53:73:03:8e:b6:
1e:31:d9:54:d4:a9:d8:d5:f5:ae:81:3c:6a:77:2f:
0d:fd:47:ff:31:5f:3e:da:4c:85:13:fa:a1:87:79:
24:a2:9d:2b:04:15:06:3f:16:e9:7b:b5:2b:2f:ae:
ea:90:28:e9:9e:ef:9d:ef:54:d0:80:dd:6d:54:d1:
fb:dc:44:3f:57:1f:44:28:a3:ad:b5:35:6e:e4:ef:
9a:de:f5:a0:03:ee:21:81:5e:7d:42:3a:0f:08:bd:
94:e0:e4:8a:78:a4:3a:62:2e:b4:f4:5c:39:7c:64:
fb:e5:6d:e6:a1:43:29:4c:60:f1:47:4c:b8:54:a8:
cd:05:ec:fb:69:33:56:31:bd:5c:3c:1e:ea:ac:fa:
17:9c:78:83:d0:d5:c9:8f:ac:bb:40:f9:9b:d3:60:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8F:2B:EA:79:3D:14:C2:A7:3E:85:26:10:80:A2:61:98:79:8F:3A
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/3I8r6nk9FMKnPoUmEICiYZh5jzo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219172
Signature Algorithm: sha256WithRSAEncryption
90:b8:46:b9:74:6f:e5:1f:df:9d:12:78:68:12:38:62:54:41:
f9:2f:d5:68:34:d9:95:7f:50:70:01:f3:b9:21:56:cf:21:1b:
86:87:0a:f9:1d:88:d3:23:7d:74:1b:66:9a:e0:f1:81:52:bf:
dc:1e:9b:20:b1:38:43:fd:f0:3b:d4:7c:3b:fd:fd:cd:1b:e5:
2c:6f:fe:3f:26:cf:f3:49:30:24:84:d6:21:cc:43:4a:1c:02:
c2:38:f4:81:3b:60:04:7c:52:c4:10:4e:5e:d5:f7:72:29:6e:
54:38:83:e6:1e:67:a2:46:fc:b0:73:2b:c8:ae:d5:02:12:9c:
81:e9:75:ff:99:9c:b8:87:c0:3e:8b:20:56:b1:e2:46:45:20:
2f:24:f9:8f:72:a1:dd:26:78:b9:63:75:6d:5b:a6:9d:9b:60:
49:dc:be:f5:19:dc:00:ff:bd:3a:54:01:3a:50:1e:bc:e6:65:
c7:d3:89:bb:5d:8d:8e:b6:3d:e7:2d:68:ca:79:32:40:1b:89:
6d:12:da:2e:c2:f6:56:6c:40:67:1f:b5:02:31:84:c2:27:47:
3b:11:9b:8a:c2:f6:c2:d8:09:24:47:63:99:8e:60:78:ed:4e:
22:cb:98:4b:de:03:9c:7c:07:a0:37:2e:75:48:ec:27:76:e6:
80:c9:e4:c2
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaHabdYrvcjVE9gqCRw7vcqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy
ZjAzMjAwHhcNMjYxMTE0MTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzhmMmJlYTc5M2QxNGMyYTczZTg1MjYxMDgwYTI2MTk4Nzk4ZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIHYKAVeDNch4TZH83EGJZu3an+t
wrl+8/dacVmPozQzJlnn7vBH7WhpHfTZfVBywjxjnzjxDlWdmHvQoM6DfHbtxlh2
TDf4ucTQVsqQBFgUHJeB3xVQG8QTdZBeuvVTlMcBU3MDjrYeMdlU1KnY1fWugTxq
dy8N/Uf/MV8+2kyFE/qhh3kkop0rBBUGPxbpe7UrL67qkCjpnu+d71TQgN1tVNH7
3EQ/Vx9EKKOttTVu5O+a3vWgA+4hgV59QjoPCL2U4OSKeKQ6Yi609Fw5fGT75W3m
oUMpTGDxR0y4VKjNBez7aTNWMb1cPB7qrPoXnHiD0NXJj6y7QPmb02AW7QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNyPK+p5PRTCpz6FJhCAomGYeY86MB8GA1UdIwQY
MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt
NjRkMWIyZDU2ZTk1LzEvM0k4cjZuazlGTUtuUG9VbUVJQ2lZWmg1anpvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1
LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNYJDANBgkqhkiG
9w0BAQsFAAOCAQEAkLhGuXRv5R/fnRJ4aBI4YlRB+S/VaDTZlX9QcAHzuSFWzyEb
hocK+R2I0yN9dBtmmuDxgVK/3B6bILE4Q/3wO9R8O/39zRvlLG/+PybP80kwJITW
IcxDShwCwjj0gTtgBHxSxBBOXtX3ciluVDiD5h5nokb8sHMryK7VAhKcgel1/5mc
uIfAPosgVrHiRkUgLyT5j3Kh3SZ4uWN1bVumnZtgSdy+9RncAP+9OlQBOlAevOZl
x9OJu12NjrY95y1oynkyQBuJbRLaLsL2VmxAZx+1AjGEwidHOxGbisL2wtgJJEdj
mY5geO1OIsuYS94DnHwHoDcudUjsJ3bmgMnkwg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:00:00 2026 by rpki-client