Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/nNH6sGpCvz3ezBX3sx86BQOdyAA.asa
File: nNH6sGpCvz3ezBX3sx86BQOdyAA.asa (raw, json)
Hash identifier: GLJegFjrYiTvKngtgiheUKQbcRubxcGvaIy2G1YhBWs=
Subject key identifier: 9C:D1:FA:B0:6A:42:BF:3D:DE:CC:15:F7:B3:1F:3A:05:03:9D:C8:00
Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial: 019F1901229523962B05A637A101FA63A343
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/nNH6sGpCvz3ezBX3sx86BQOdyAA.asa
Signing time: Tue 30 Jun 2026 14:48:52 +0000
ASPA not before: Tue 30 Jun 2026 14:48:52 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200886
Providers: AS: 3326
AS: 35297
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:22:95:23:96:2b:05:a6:37:a1:01:fa:63:a3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Validity
Not Before: Jun 30 14:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cd1fab06a42bf3ddecc15f7b31f3a05039dc800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:2c:6d:6d:b8:10:03:f7:e3:2f:79:4b:02:
2c:b7:b2:d3:d2:86:a5:98:d8:05:67:fa:e8:f6:00:
e4:08:02:c3:cb:2e:76:64:45:06:0d:f8:7a:f4:d7:
fd:47:e4:2a:08:f1:c3:79:f2:41:5b:8a:d0:6e:e6:
cf:b2:34:12:67:13:60:63:f5:95:9e:95:4a:50:00:
b7:d6:83:1f:4f:c3:18:b7:ad:ed:65:10:57:58:a9:
88:40:2d:81:fa:27:55:74:ed:6c:a9:d7:83:00:57:
28:b5:31:a0:8b:f9:f1:cf:39:c1:96:63:76:01:b0:
23:b0:57:59:14:c0:2a:df:f0:7c:15:a6:b1:5e:44:
99:61:32:96:d1:ae:b4:b9:03:62:c6:a2:68:94:07:
45:6e:3e:c4:49:7d:93:04:5b:28:52:0e:42:49:3f:
e7:3e:fa:9f:4b:e2:97:e4:4b:ca:37:92:38:ae:a1:
d7:74:ab:6f:62:70:01:e2:e9:65:5a:fc:92:c3:36:
32:f2:5c:14:64:cf:0a:e1:67:cb:7f:3f:55:30:20:
6a:77:83:25:30:40:eb:b8:7e:93:db:cc:73:c4:ef:
b2:fd:1d:3e:fd:41:b1:f4:59:05:a9:5c:23:27:d0:
85:0e:5f:82:c3:28:42:d1:11:a4:92:8d:dc:f2:58:
8c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D1:FA:B0:6A:42:BF:3D:DE:CC:15:F7:B3:1F:3A:05:03:9D:C8:00
X509v3 Authority Key Identifier:
keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/nNH6sGpCvz3ezBX3sx86BQOdyAA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200886
Signature Algorithm: sha256WithRSAEncryption
9f:0d:54:c5:0e:b3:95:92:eb:22:26:71:54:f3:66:23:60:b3:
1c:9b:35:f8:dc:dc:3b:fa:73:22:a3:14:70:9e:cd:aa:47:41:
b4:4c:27:65:3c:05:31:4d:18:23:e0:1d:a5:8f:b0:e1:cd:ee:
be:c8:aa:99:26:68:43:75:4b:f0:93:dd:ed:8d:db:26:c6:69:
8c:69:fa:47:33:3f:b7:62:a7:93:24:2b:2d:28:ff:7b:b7:36:
ca:44:f6:13:f6:4b:40:3a:29:f1:c2:69:77:e7:21:90:de:f9:
fe:d9:65:1f:7a:33:12:4d:1f:07:55:4a:c9:2e:ae:6c:95:77:
5c:44:21:54:9f:c4:f6:bc:6f:43:42:ad:f4:e3:65:a9:8a:dd:
bb:ac:e9:20:e9:1d:f2:44:5c:13:2d:2a:0a:91:48:e3:7d:72:
90:63:12:e2:92:ac:3e:bc:a3:cd:c8:64:f0:8f:23:d5:43:57:
26:e4:09:ef:62:2e:a9:04:a9:ca:b7:f6:a9:1d:a7:af:9c:c3:
c3:ee:8b:bd:b7:23:15:1a:7d:bd:d5:8a:be:c3:ee:e4:17:04:
45:c8:6f:a7:0c:f6:60:a3:b3:fc:6e:1a:67:1d:b8:49:ca:36:
dc:28:6b:ed:d1:c0:23:47:bb:1f:1f:de:f6:64:c6:ba:3c:e0:
ff:1c:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:25 2026 by rpki-client