Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/zOF_OQ5_cexcvcn-Xy9l4x73efY.asa
File: zOF_OQ5_cexcvcn-Xy9l4x73efY.asa (raw, json)
Hash identifier: No7O/rKN65Nv88He0q0MUpGtQzpjCDUVQmGT5pS0peg=
Subject key identifier: CC:E1:7F:39:0E:7F:71:EC:5C:BD:C9:FE:5F:2F:65:E3:1E:F7:79:F6
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 019F89A22B77CCE2DF06D9B05A72557E7A61
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/zOF_OQ5_cexcvcn-Xy9l4x73efY.asa
Signing time: Wed 22 Jul 2026 11:42:14 +0000
ASPA not before: Wed 22 Jul 2026 11:42:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 8396
Providers: AS: 56910
AS: 199081
AS: 213835
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:a2:2b:77:cc:e2:df:06:d9:b0:5a:72:55:7e:7a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Jul 22 11:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cce17f390e7f71ec5cbdc9fe5f2f65e31ef779f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:91:42:1a:ff:ac:a3:62:b3:33:49:11:60:
30:7b:ec:40:df:05:1f:55:40:3c:87:22:ef:89:27:
72:5d:2c:a4:6a:c7:87:f4:38:f7:ca:b2:8b:53:f2:
8d:9d:3b:99:b8:b2:24:c2:e7:56:83:98:89:85:4e:
ac:8f:fe:bb:99:ab:7a:40:82:3b:85:08:2f:75:25:
85:ea:5a:0b:a8:36:4b:a7:f1:26:af:03:ee:f6:29:
09:eb:07:ff:3c:12:70:a7:8e:9a:21:74:07:aa:b6:
5d:9e:38:a1:08:02:05:01:1c:8d:9a:f0:de:76:ec:
7a:3b:54:99:b5:20:74:96:be:b3:21:b6:60:4d:e3:
9b:05:d5:e6:7a:3b:11:10:2a:6f:7e:08:9f:70:56:
fd:98:a9:dc:86:f8:36:06:45:ee:81:2c:75:cd:e8:
5b:3e:be:1b:df:05:0d:dc:4b:a4:de:c2:9b:8e:23:
8f:35:52:6e:3e:df:43:89:ee:33:7f:01:2a:b2:0f:
2f:80:ac:b5:bc:91:89:18:01:60:9e:9a:2b:f7:70:
3c:9a:69:bd:b2:34:72:eb:88:fe:d7:1b:92:10:5f:
2d:8c:5a:01:07:de:d7:fd:ed:a1:fb:3b:48:fd:0e:
40:84:7c:ee:d2:89:40:0f:32:15:ac:de:ee:67:38:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:7F:39:0E:7F:71:EC:5C:BD:C9:FE:5F:2F:65:E3:1E:F7:79:F6
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/zOF_OQ5_cexcvcn-Xy9l4x73efY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8396
Signature Algorithm: sha256WithRSAEncryption
67:9c:73:c9:72:36:5d:f6:03:d0:8c:73:7a:73:68:9b:35:7c:
85:cf:38:7b:d2:4f:3d:be:be:22:96:8a:89:0b:5f:03:81:b8:
a6:5e:a0:d1:87:b9:74:79:1e:5c:bd:66:06:ee:1d:36:20:60:
74:91:60:fb:d9:fc:f9:d7:33:99:09:4b:d4:c9:dc:0f:4c:d4:
83:45:85:c8:c6:c6:f9:dd:b2:74:64:58:2d:72:82:4d:bd:52:
ae:b9:40:a3:36:09:05:8b:c3:4b:80:91:f6:50:48:f9:20:1c:
18:db:2f:df:0a:50:c7:f2:bf:19:7a:dc:2e:09:cb:c0:79:2e:
de:c7:7c:59:38:88:fd:81:84:d1:fd:d5:b4:c7:6b:5c:ac:2f:
4b:a1:f1:9c:46:08:c3:01:7f:70:b0:66:04:5a:f0:ec:d7:75:
d1:98:c3:d7:ae:ff:5e:83:0f:a2:52:e5:58:3d:eb:7d:e6:80:
b1:14:f0:1f:67:d4:91:98:4f:27:bb:7e:7d:81:52:74:9f:bf:
e2:38:dd:65:c9:97:a5:40:f0:3f:69:4a:9c:1e:e6:d8:9e:c5:
f8:e6:26:f9:e2:0b:72:36:60:db:56:1c:48:b8:30:f2:11:0f:
9a:36:e5:76:03:a4:d2:ae:69:63:36:d6:35:ce:75:68:d0:65:
bc:c2:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:07 2026 by rpki-client