Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/l4dSZXl8dhmZMC6S5Tn_0a5uKMw.asa
File: l4dSZXl8dhmZMC6S5Tn_0a5uKMw.asa (raw, json)
Hash identifier: LGg4oCMfH/vcblyxp8BRS8a3iyoB8BazHkO/Mi3w7Wg=
Subject key identifier: 97:87:52:65:79:7C:76:19:99:30:2E:92:E5:39:FF:D1:AE:6E:28:CC
Certificate issuer: /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial: 01A0C826966922BC8994C842832439D054CA
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/l4dSZXl8dhmZMC6S5Tn_0a5uKMw.asa
Signing time: Tue 22 Sep 2026 08:06:07 +0000
ASPA not before: Tue 22 Sep 2026 08:06:07 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 2121
Providers: AS: 3333
AS: 47697
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:26:96:69:22:bc:89:94:c8:42:83:24:39:d0:54:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Validity
Not Before: Sep 22 08:06:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97875265797c761999302e92e539ffd1ae6e28cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:4e:b9:a9:d5:9c:16:ee:08:90:5b:d0:8c:
62:6e:b7:f4:6e:40:43:96:fb:2e:8d:d8:ea:e3:38:
29:06:32:40:9f:5e:5f:84:b6:28:7a:e2:21:c3:18:
77:ae:66:f4:74:e6:d5:d5:a6:e6:de:a9:55:d6:28:
36:18:6f:01:55:5a:81:bd:de:f6:cc:31:9a:85:07:
b9:f5:1d:2e:ec:6b:71:d7:53:32:61:d5:5b:e4:d4:
16:48:90:af:23:16:40:ab:15:0b:da:33:69:2d:f0:
34:15:6c:77:9d:85:c1:41:80:af:33:9f:8c:28:c6:
5f:27:6e:67:51:83:a9:5e:d2:2f:09:40:36:6f:6c:
71:45:5c:7c:9e:c8:e6:09:f4:9f:a5:f8:49:01:32:
06:09:2f:9d:13:2b:df:b4:0e:ad:17:9a:46:be:ef:
3e:ad:73:fd:af:64:cc:80:af:c5:dd:25:fa:1e:24:
a0:7f:a5:ce:b9:e9:35:f9:f7:20:88:15:60:4f:99:
59:e6:18:7f:c9:5f:d4:ea:83:ef:e9:74:22:3a:f3:
fb:69:29:c5:86:e5:23:c2:3e:ee:be:c8:31:bb:37:
38:af:a0:d1:df:1a:c4:1e:00:b6:de:8d:f4:31:a4:
a7:09:22:da:f4:6f:f7:63:54:2c:e5:e8:4c:0f:09:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:52:65:79:7C:76:19:99:30:2E:92:E5:39:FF:D1:AE:6E:28:CC
X509v3 Authority Key Identifier:
keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/l4dSZXl8dhmZMC6S5Tn_0a5uKMw.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2121
Signature Algorithm: sha256WithRSAEncryption
17:40:79:9c:24:3d:04:99:21:88:b2:b2:7a:fa:70:6d:3f:c2:
85:10:75:26:5a:0d:19:67:d9:32:6d:5a:0e:a6:80:f5:be:5f:
b2:22:20:dd:50:11:34:b4:d6:5c:dc:c8:9f:13:fe:f5:c9:04:
82:63:90:c4:ad:74:1d:04:ea:5c:9c:3c:c2:3f:d3:8b:e5:79:
9f:ec:99:81:6f:ec:b2:8b:03:66:5e:b6:57:0b:3f:b6:bf:b4:
e7:63:3a:eb:20:91:fb:fa:8e:44:a2:30:23:1f:0c:35:86:03:
28:eb:af:a3:5f:8e:7b:7d:7a:05:e4:0e:74:f7:35:bf:70:b7:
dc:e9:ec:b9:03:ac:9c:77:ca:33:a8:3a:5f:48:2a:38:66:c1:
06:e6:d0:65:ec:d3:d7:9a:e1:0f:28:3d:fc:44:fa:a3:86:2e:
46:65:fa:ef:03:89:6f:18:6b:34:e1:6e:6a:78:68:68:a3:86:
7d:5d:73:54:52:ab:70:28:de:89:5c:63:4e:32:7d:b7:6c:ea:
dc:21:c8:ac:7e:99:c1:49:22:38:6c:c6:0e:d9:82:b7:8e:4b:
c8:43:d1:3d:9f:56:98:d8:d5:d5:be:b5:db:d8:24:ef:4f:de:
e9:e3:98:b9:38:be:ac:5f:ce:0d:9b:bd:f4:96:8c:0c:a2:aa:
92:96:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:17:25 2026 by rpki-client