Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/gTHdBZc2eflWqrCp3nQE8ztvzAo.asa
File: gTHdBZc2eflWqrCp3nQE8ztvzAo.asa (raw, json)
Hash identifier: oQhkHMVJEFmdZLPh6Ty3pNL8Nfw1d0mwKKX008hSzi4=
Subject key identifier: 81:31:DD:05:97:36:79:F9:56:AA:B0:A9:DE:74:04:F3:3B:6F:CC:0A
Certificate issuer: /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial: 019F36AEF6FBB1E3B4953366102455BB9344
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/gTHdBZc2eflWqrCp3nQE8ztvzAo.asa
Signing time: Mon 06 Jul 2026 09:07:43 +0000
ASPA not before: Mon 06 Jul 2026 09:07:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 20986
Providers: AS: 174
AS: 5511
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:ae:f6:fb:b1:e3:b4:95:33:66:10:24:55:bb:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
Validity
Not Before: Jul 6 09:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8131dd05973679f956aab0a9de7404f33b6fcc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:d8:f5:76:48:56:7c:41:20:cd:80:25:cf:
0d:e7:df:d2:3d:3b:70:b3:e7:8d:14:01:5d:5f:71:
3b:a6:dc:c2:86:58:9f:1c:9a:61:13:0b:59:95:48:
2e:2f:2e:a1:92:64:96:6b:b2:ae:21:5b:12:92:f6:
47:41:a7:0f:5a:e3:79:59:07:36:96:1f:33:66:c7:
61:ad:d9:f9:d0:ea:80:a5:df:be:59:cb:06:3e:ee:
36:68:1f:19:bb:1c:44:dc:de:43:d1:3c:4e:7f:01:
ad:88:1e:a7:d2:e0:2b:2d:62:e2:53:9b:08:9d:68:
23:2d:13:6b:59:0f:1a:3e:e2:e7:7e:6b:34:e4:c1:
68:a0:85:24:ba:4d:dd:ac:5c:f2:f3:47:74:9a:b5:
1f:05:5e:1a:15:14:e0:00:f3:7c:18:2c:d1:bc:9e:
be:aa:78:45:c6:58:de:ea:3a:15:a2:35:a4:c7:7e:
6f:52:7d:97:9a:d5:2f:ac:e7:fd:0b:60:ff:75:71:
79:16:50:80:49:56:34:aa:6b:0b:30:c2:6f:1a:f3:
6f:e5:f8:ab:14:de:f5:35:30:52:d0:a1:4b:a3:ee:
24:24:b3:34:93:06:f7:ab:9e:29:0c:61:b5:d7:f4:
24:71:4d:e0:f2:ce:c4:15:8c:b9:66:de:f6:51:88:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:DD:05:97:36:79:F9:56:AA:B0:A9:DE:74:04:F3:3B:6F:CC:0A
X509v3 Authority Key Identifier:
keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/gTHdBZc2eflWqrCp3nQE8ztvzAo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20986
Signature Algorithm: sha256WithRSAEncryption
30:20:17:6f:d6:29:61:98:b2:ae:1e:4c:4a:1f:5a:aa:43:81:
aa:1c:75:f1:ad:9f:36:3d:95:31:13:db:3d:ab:30:e0:9d:2e:
eb:16:a2:b8:43:63:b4:46:d8:36:c6:57:b9:e9:15:21:12:4a:
f2:2f:09:cd:57:4d:b4:02:8b:37:7f:7e:83:b4:60:6a:af:f6:
ac:0a:54:83:85:45:9f:ba:98:9d:3e:61:05:f0:4b:47:9a:e9:
62:cc:d8:30:90:c3:f2:4c:87:90:e0:d4:84:6b:c3:d7:70:35:
66:a5:b9:ce:2d:7c:23:61:21:19:d9:44:54:9d:c2:17:d0:1a:
6a:74:eb:ee:40:64:8d:02:87:c5:0c:f1:b9:8b:7b:f3:b2:b8:
d1:11:88:5c:5e:b3:f8:18:87:eb:0d:48:ca:09:3d:70:f3:53:
b7:d9:9f:6a:a6:91:94:bb:e9:c6:50:29:26:e2:d8:6b:4f:4f:
48:4a:1b:bb:aa:66:8a:ce:64:00:d2:f2:62:af:00:e3:dd:08:
66:1d:71:e1:69:1f:f7:62:5e:9c:e4:5a:e4:58:02:d7:fe:65:
de:28:65:51:51:58:e8:3c:70:cf:2e:1c:67:8e:b7:92:32:82:
e6:96:5b:8d:a7:83:39:21:e7:f7:18:7c:97:57:a1:96:66:4e:
97:e8:09:c7
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ82rvb7seO0lTNmECRVu5NEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjg2NmUzMjMzODJjYWVhOTYxZTdkMjQyM2U1M2NhYjUw
OTkxMzEwHhcNMjYwNzA2MDkwNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTMxZGQwNTk3MzY3OWY5NTZhYWIwYTlkZTc0MDRmMzNiNmZjYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu97Y9XZIVnxBIM2AJc8N59/SPTtw
s+eNFAFdX3E7ptzChlifHJphEwtZlUguLy6hkmSWa7KuIVsSkvZHQacPWuN5WQc2
lh8zZsdhrdn50OqApd++WcsGPu42aB8ZuxxE3N5D0TxOfwGtiB6n0uArLWLiU5sI
nWgjLRNrWQ8aPuLnfms05MFooIUkuk3drFzy80d0mrUfBV4aFRTgAPN8GCzRvJ6+
qnhFxlje6joVojWkx35vUn2XmtUvrOf9C2D/dXF5FlCASVY0qmsLMMJvGvNv5fir
FN71NTBS0KFLo+4kJLM0kwb3q54pDGG11/QkcU3g8s7EFYy5Zt72UYjlUwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFIEx3QWXNnn5Vqqwqd50BPM7b8wKMB8GA1UdIwQY
MBaAFGG4ZuMjOCyuqWHn0kI+U8q1CZExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEt
ZDkyZTY4ZGZmZmU0LzEvZ1RIZEJaYzJlZmxXcXJDcDNuUUU4enR2ekFvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80ZWY0YTktNmQ5Ni00OTg5LTljODEtZDkyZTY4ZGZmZmU0
LzEvWWJobTR5TTRMSzZwWWVmU1FqNVR5clVKa1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlH6MA0GCSqGSIb3
DQEBCwUAA4IBAQAwIBdv1ilhmLKuHkxKH1qqQ4GqHHXxrZ82PZUxE9s9qzDgnS7r
FqK4Q2O0Rtg2xle56RUhEkryLwnNV020Aos3f36DtGBqr/asClSDhUWfupidPmEF
8EtHmulizNgwkMPyTIeQ4NSEa8PXcDVmpbnOLXwjYSEZ2URUncIX0BpqdOvuQGSN
AofFDPG5i3vzsrjREYhcXrP4GIfrDUjKCT1w81O32Z9qppGUu+nGUCkm4thrT09I
Shu7qmaKzmQA0vJirwDj3QhmHXHhaR/3Yl6c5FrkWALX/mXeKGVRUVjoPHDPLhxn
jreSMoLmlluNp4M5Ief3GHyXV6GWZk6X6AnH
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:18 2026 by rpki-client