Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ZTIUMpbCNPnYBD7k3nj1sQB_XOk.asa
File: ZTIUMpbCNPnYBD7k3nj1sQB_XOk.asa (raw, json)
Hash identifier: 0oocPWz99WNT9kZost7wmNAl0YljvpI9UsdUFWKlstg=
Subject key identifier: 65:32:14:32:96:C2:34:F9:D8:04:3E:E4:DE:78:F5:B1:00:7F:5C:E9
Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Certificate serial: 019F190151F85DFEB477BADA7E7C5212F19F
Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ZTIUMpbCNPnYBD7k3nj1sQB_XOk.asa
Signing time: Tue 30 Jun 2026 14:49:04 +0000
ASPA not before: Tue 30 Jun 2026 14:49:04 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 25145
Providers: AS: 3223
AS: 6762
AS: 6939
AS: 9002
AS: 9121
AS: 34984
AS: 39582
AS: 47123
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:51:f8:5d:fe:b4:77:ba:da:7e:7c:52:12:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c
Validity
Not Before: Jun 30 14:49:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6532143296c234f9d8043ee4de78f5b1007f5ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:5e:ac:df:14:05:eb:25:96:ab:e7:00:ad:
f8:f5:9a:97:8a:5a:c6:28:df:17:ef:29:67:44:16:
b8:d3:08:a3:2a:22:4b:52:b7:62:e6:ff:44:28:2d:
2a:3b:f6:41:a2:31:c5:15:a5:9a:9d:f0:c5:5e:51:
86:58:03:f8:d4:6b:4d:c3:8b:d3:79:cc:59:62:2e:
cf:db:9e:1e:69:dc:62:f1:93:3e:68:89:dc:a7:f5:
36:9c:f9:7e:4b:6e:8b:96:d4:31:cf:db:3f:ca:23:
d5:28:64:89:c7:8f:dc:34:92:fb:79:5e:0e:5d:8a:
31:02:31:54:b7:48:12:22:5c:5d:6d:8f:0c:00:7a:
33:28:6b:95:11:53:a5:0c:38:bc:4e:b5:31:38:72:
93:cc:5a:9b:d6:b2:bb:5d:d9:9d:37:c6:c4:c1:af:
8e:42:39:1c:09:84:c2:f5:5c:74:56:3b:cc:06:0c:
59:c0:e3:5b:3a:7d:6a:58:b6:8d:26:b4:a7:33:ed:
ab:a9:39:d2:bb:86:b5:29:58:3e:2d:ea:6a:e4:d6:
e3:5c:ba:e2:54:84:17:ac:6d:bb:9d:14:5d:5c:42:
37:5f:ec:ff:0a:2c:08:a3:06:ef:62:b3:61:77:a5:
26:ec:2f:a9:ba:f4:54:8f:46:1f:00:90:fa:cf:37:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:14:32:96:C2:34:F9:D8:04:3E:E4:DE:78:F5:B1:00:7F:5C:E9
X509v3 Authority Key Identifier:
keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ZTIUMpbCNPnYBD7k3nj1sQB_XOk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25145
Signature Algorithm: sha256WithRSAEncryption
62:bd:93:90:6f:e5:f8:73:d3:3d:8b:a3:d0:bf:d3:6c:e4:03:
80:54:00:9e:ce:03:fc:c7:59:1d:ae:de:82:bc:46:fa:d0:f3:
14:56:ae:18:a2:26:8d:76:a5:0a:b6:91:9a:82:6c:60:5c:65:
6e:b5:e1:fa:44:7e:6a:5b:b8:82:ce:09:49:19:a2:78:90:64:
6b:f6:64:db:bc:66:db:7a:77:06:05:f1:cf:c1:2f:5a:98:07:
89:74:1e:e0:d6:fe:a5:a7:63:80:3e:9f:92:01:21:a4:44:7c:
d5:d9:82:20:6c:98:ac:b2:9d:c6:47:2c:c0:c7:d8:59:24:f2:
cc:7a:a5:2e:b4:a9:b2:87:cc:f1:8c:c2:31:58:06:44:d9:90:
ac:8f:e0:e8:60:6e:63:b1:02:3d:50:f5:76:c7:a4:09:0c:43:
03:40:be:16:5a:bc:d3:9d:8d:56:af:22:a9:fe:4c:28:60:d9:
49:45:63:9c:45:e3:4c:9c:8f:1b:23:39:b1:d4:44:07:69:75:
78:8a:d5:df:79:a1:00:ad:3b:19:30:82:30:d7:54:4e:9b:bf:
f0:04:5f:09:5b:a6:11:0a:22:2d:03:35:e0:0b:ac:1c:c7:e4:
1e:65:ee:4d:01:14:77:fe:20:a8:65:4b:9d:cd:24:96:ac:06:
00:9a:84:5f
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ8ZAVH4Xf60d7rafnxSEvGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz
Yzg4NWMwHhcNMjYwNjMwMTQ0OTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTMyMTQzMjk2YzIzNGY5ZDgwNDNlZTRkZTc4ZjViMTAwN2Y1Y2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxFerN8UBesllqvnAK349ZqXilrG
KN8X7ylnRBa40wijKiJLUrdi5v9EKC0qO/ZBojHFFaWanfDFXlGGWAP41GtNw4vT
ecxZYi7P254eadxi8ZM+aIncp/U2nPl+S26LltQxz9s/yiPVKGSJx4/cNJL7eV4O
XYoxAjFUt0gSIlxdbY8MAHozKGuVEVOlDDi8TrUxOHKTzFqb1rK7XdmdN8bEwa+O
QjkcCYTC9Vx0VjvMBgxZwONbOn1qWLaNJrSnM+2rqTnSu4a1KVg+Lepq5NbjXLri
VIQXrG27nRRdXEI3X+z/CiwIowbvYrNhd6Um7C+puvRUj0YfAJD6zzfEmQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFGUyFDKWwjT52AQ+5N549bEAf1zpMB8GA1UdIwQY
MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt
ZDcxMmQ0NzM4MDQ2LzEvWlRJVU1wYkNOUG5ZQkQ3azNuajFzUUJfWE9rLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2
LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmI5MA0GCSqGSIb3
DQEBCwUAA4IBAQBivZOQb+X4c9M9i6PQv9Ns5AOAVACezgP8x1kdrt6CvEb60PMU
Vq4YoiaNdqUKtpGagmxgXGVuteH6RH5qW7iCzglJGaJ4kGRr9mTbvGbbencGBfHP
wS9amAeJdB7g1v6lp2OAPp+SASGkRHzV2YIgbJissp3GRyzAx9hZJPLMeqUutKmy
h8zxjMIxWAZE2ZCsj+DoYG5jsQI9UPV2x6QJDEMDQL4WWrzTnY1WryKp/kwoYNlJ
RWOcReNMnI8bIzmx1EQHaXV4itXfeaEArTsZMIIw11ROm7/wBF8JW6YRCiItAzXg
C6wcx+QeZe5NARR3/iCoZUudzSSWrAYAmoRf
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:01 2026 by rpki-client