Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/ODq8nX_2vRnGGPSNT2UMMp67uAM.asa
File: ODq8nX_2vRnGGPSNT2UMMp67uAM.asa (raw, json)
Hash identifier: P2zPft5y9bv+9gdr4EaUE2G+yhigi1GRzCeBYa+bZOQ=
Subject key identifier: 38:3A:BC:9D:7F:F6:BD:19:C6:18:F4:8D:4F:65:0C:32:9E:BB:B8:03
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 01A154B658970E9A6EBB1102E8DD8AFB437D
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/ODq8nX_2vRnGGPSNT2UMMp67uAM.asa
Signing time: Mon 19 Oct 2026 15:09:58 +0000
ASPA not before: Mon 19 Oct 2026 15:09:58 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 50629
Providers: AS: 174
AS: 1299
AS: 2914
AS: 3257
AS: 3320
AS: 3356
AS: 5511
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:b6:58:97:0e:9a:6e:bb:11:02:e8:dd:8a:fb:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Oct 19 15:09:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=383abc9d7ff6bd19c618f48d4f650c329ebbb803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:a5:3d:00:f6:ce:cb:fa:c6:c5:0a:ae:ae:
cd:dd:bd:d8:8f:30:90:dc:2a:be:2d:f7:54:39:ef:
88:9d:2c:ac:f9:e8:93:90:8f:39:11:3b:97:87:c8:
2d:0b:d3:23:08:d8:3b:95:18:ab:61:08:7e:dd:d1:
ac:79:b7:08:4a:fb:4f:2a:e4:20:83:64:3f:02:35:
04:22:08:f7:cd:b1:d7:7e:79:78:fa:55:cc:29:d0:
1a:9b:71:1c:78:d8:26:af:33:21:05:6a:6a:08:56:
e3:e2:99:85:ff:58:16:b2:63:23:80:0f:a6:3d:05:
c9:0e:1a:88:f6:1e:dc:11:0e:96:6b:2e:07:d8:f5:
d6:e8:dc:ab:60:ed:6b:fa:af:a5:9d:1c:67:75:66:
d2:00:35:80:01:82:d6:55:1a:d9:8d:84:c8:46:a8:
f0:f0:de:bd:b8:78:26:e4:43:2c:6c:29:43:46:28:
d2:64:1e:2f:d4:a3:35:d6:8b:14:ca:23:9a:41:bd:
84:34:d9:87:b8:ee:4d:2f:cb:c1:a1:27:79:4f:77:
60:93:bc:81:35:ae:7c:1c:1e:21:32:6c:5d:66:5d:
db:7a:d9:48:6f:87:17:cb:b9:79:9e:9b:cb:f8:97:
80:ad:01:39:71:ea:0f:a7:18:ed:95:71:a0:c9:48:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:BC:9D:7F:F6:BD:19:C6:18:F4:8D:4F:65:0C:32:9E:BB:B8:03
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/ODq8nX_2vRnGGPSNT2UMMp67uAM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50629
Signature Algorithm: sha256WithRSAEncryption
c3:8a:72:b7:e6:73:28:31:78:08:f0:70:0b:4d:d3:bb:e5:1e:
4e:37:67:8e:b1:5c:89:83:9c:a2:42:bc:74:1c:96:d1:c8:2a:
d6:56:66:6f:8f:cc:bf:a6:49:6b:63:51:08:31:71:9c:19:cb:
f5:38:a7:13:3b:74:12:5c:d5:7d:65:29:7b:14:f0:13:b4:39:
16:6d:43:50:13:8b:bf:ca:3a:a2:9f:2e:c5:e6:4e:70:13:da:
8d:81:9b:6c:8b:1a:b6:29:44:5d:8b:6f:07:4e:da:a2:df:3b:
c4:ff:03:38:77:6f:8f:12:75:4a:94:65:d2:30:2e:7f:7f:c0:
af:f6:b5:81:78:15:1b:15:71:fb:9e:69:c6:fa:cc:dc:a9:90:
2f:ba:a0:31:06:e0:77:f2:f3:3a:4e:96:46:42:c6:91:85:5a:
51:80:cb:e5:cb:4b:27:ef:56:1f:ad:b2:c7:9f:8b:38:ba:1f:
12:35:74:f9:3f:0c:09:4b:ef:ac:f0:df:88:dc:91:1b:31:af:
e4:07:53:64:c7:ae:e4:71:91:69:58:41:c4:1b:b6:ec:0f:63:
1a:63:5a:ec:62:1c:fc:29:a5:59:e7:b3:47:7f:8b:66:b8:2e:
84:6b:59:33:eb:8c:4f:8a:cf:28:b7:c6:11:26:cd:5b:2a:a5:
01:79:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:41:58 2026 by rpki-client