Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa
File: XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa (raw, json)
Hash identifier: BUCSZEjdFaY1WzA8rUkzwkz2gqTUrzX9Z/dRqbYJ/Lg=
Subject key identifier: 5D:5F:41:70:7B:9C:F4:D3:64:0A:76:5D:25:B2:47:30:01:57:1E:16
Certificate issuer: /CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Certificate serial: 019F8B038FCD570BB5AA53C46FDBC8464D06
Authority key identifier: 2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa
Signing time: Wed 22 Jul 2026 18:08:14 +0000
ASPA not before: Wed 22 Jul 2026 18:08:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219157
Providers: AS: 199746
AS: 204464
AS: 207841
AS: 215120
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:03:8f:cd:57:0b:b5:aa:53:c4:6f:db:c8:46:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Validity
Not Before: Jul 22 18:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d5f41707b9cf4d3640a765d25b2473001571e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:4e:bc:ea:8d:f0:60:e2:7d:11:1d:94:90:
76:54:96:ca:86:34:1e:b8:47:ee:c6:4b:81:69:34:
01:57:a8:70:55:75:c3:89:2e:80:64:f8:9f:c1:a5:
ca:7e:b3:f6:78:d3:53:91:95:8b:06:af:32:9f:a0:
0c:a0:9d:4e:fb:e0:7e:e2:60:18:9b:40:a2:cd:32:
49:86:63:50:32:7e:22:18:7c:60:2d:22:f0:99:0d:
c8:35:0c:7c:53:b4:3f:de:7f:9f:65:90:3b:ef:9e:
8b:a3:d4:0c:e2:48:97:b5:8e:3b:a7:46:4d:63:64:
64:eb:46:44:4d:e8:51:18:b1:8d:6b:6e:9e:4a:58:
88:60:c2:5a:c5:69:a5:ef:80:4a:4a:70:40:f3:ae:
b9:95:e5:4e:3d:6b:73:53:a5:11:0c:d7:0f:bf:cd:
28:3e:52:22:8b:32:6f:c6:5b:14:33:6e:b7:af:91:
43:a3:4b:40:42:6f:a0:3c:7e:09:6a:87:1f:59:dc:
ac:21:a6:50:4e:05:d2:fb:0c:64:d7:80:76:23:d9:
f6:04:be:41:5b:08:1a:ee:b9:9d:c9:97:9c:9a:f6:
c8:d7:c6:19:7d:50:13:4c:be:61:30:ed:8e:7c:75:
bb:dc:17:3b:01:ee:1a:37:f7:f4:41:ac:1b:25:aa:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:41:70:7B:9C:F4:D3:64:0A:76:5D:25:B2:47:30:01:57:1E:16
X509v3 Authority Key Identifier:
keyid:2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219157
Signature Algorithm: sha256WithRSAEncryption
54:0b:48:85:6b:18:29:43:91:9f:31:85:fe:8c:b8:ef:a6:6a:
51:d0:a8:3b:d4:68:e4:c7:aa:c8:61:78:4f:92:90:a4:4d:36:
8e:e7:48:d6:6b:81:12:a9:90:a5:46:e3:e1:0b:82:2e:e5:f1:
14:c2:63:0a:4d:49:d9:3e:06:3b:bd:ba:7e:16:40:82:e3:2d:
b4:8b:f2:48:2b:9f:53:1b:69:b0:45:56:c2:06:c6:b0:af:bc:
4f:58:6b:7a:6e:c6:2f:2c:44:04:b5:75:00:e4:7b:cf:fb:08:
5f:e1:0e:4d:ee:36:b3:24:4f:40:20:5d:34:7f:5a:94:23:5e:
af:88:6e:51:32:70:8f:8b:30:0f:d9:c7:6a:a8:e9:5f:67:ef:
77:03:b7:de:d1:4e:75:5b:09:c7:14:87:cb:2f:18:ac:8c:d4:
e9:c5:5c:ee:8b:45:1b:14:d7:8b:71:62:88:ae:9b:ee:d6:5c:
68:c8:cd:b2:d1:e9:1c:38:bb:7f:d6:bd:d0:be:a3:b1:15:88:
28:eb:ba:d2:9f:b3:3f:d3:ab:55:d1:0f:8f:1c:c9:30:76:ef:
05:5f:80:e1:ee:64:b5:ef:f2:bc:b7:54:28:00:3d:bb:f5:4d:
12:d4:9e:d8:2a:94:e6:02:99:d8:80:1c:f4:c0:da:5f:9a:f1:
30:f4:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:14 2026 by rpki-client