Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/QKGqa5eFo_oefy2Fr910iRpsrO4.asa
File: QKGqa5eFo_oefy2Fr910iRpsrO4.asa (raw, json)
Hash identifier: 2SH0Sp2vvwFpjaphIT/+Ub3omKUkgbjxDQhKCOfnuyg=
Subject key identifier: 40:A1:AA:6B:97:85:A3:FA:1E:7F:2D:85:AF:DD:74:89:1A:6C:AC:EE
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019F47452CB94846E39202145F96ED7231D6
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/QKGqa5eFo_oefy2Fr910iRpsrO4.asa
Signing time: Thu 09 Jul 2026 14:25:43 +0000
ASPA not before: Thu 09 Jul 2026 14:25:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202649
Providers: AS: 6206
AS: 55285
AS: 393905
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:45:2c:b9:48:46:e3:92:02:14:5f:96:ed:72:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Jul 9 14:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40a1aa6b9785a3fa1e7f2d85afdd74891a6cacee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:16:d2:44:06:ef:25:cb:09:81:87:94:4d:
c2:a1:82:27:59:19:be:d3:a1:d5:a6:b5:e8:c6:44:
ba:fe:ac:cf:35:5f:db:e7:99:f9:d9:de:a6:1e:18:
fd:73:23:62:bb:77:16:38:a6:58:e1:e2:49:10:cd:
dc:7c:92:f5:1b:80:e7:2b:1c:82:bb:26:34:4d:bb:
b3:88:1e:40:30:6c:e4:1c:f5:be:cd:35:6f:6d:19:
b1:7d:7c:44:77:c0:95:c7:84:66:74:45:c8:bf:82:
a1:8c:37:af:e5:95:4e:cd:9e:8a:95:1c:a5:8e:b1:
27:46:8e:c2:0c:a4:b7:d2:ef:83:90:af:87:60:17:
f7:2b:26:7a:db:b8:8a:3a:df:25:70:31:72:4a:e6:
f7:be:af:d0:09:a3:c2:88:03:2a:0b:22:b7:5c:3b:
86:13:cf:ea:a9:06:bc:29:9c:ad:9b:41:f2:28:73:
94:9d:2f:61:d6:c2:06:b7:1d:31:1c:22:0c:9f:2f:
2a:77:8f:30:3e:0a:77:d5:9e:a0:45:32:74:72:3c:
99:07:30:14:2c:cf:a3:fd:80:8a:32:f6:e0:42:90:
8e:56:7e:ee:53:a8:79:73:51:13:23:80:65:a8:ff:
f9:23:8f:e8:4f:4f:87:70:e6:09:24:73:0f:fa:5d:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:AA:6B:97:85:A3:FA:1E:7F:2D:85:AF:DD:74:89:1A:6C:AC:EE
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/QKGqa5eFo_oefy2Fr910iRpsrO4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202649
Signature Algorithm: sha256WithRSAEncryption
8e:ff:18:c6:23:67:14:ee:64:a4:47:b6:8e:fe:ca:ee:f9:19:
e4:2e:df:47:99:77:de:dc:6e:33:31:89:6e:61:5f:10:4d:ac:
f2:3b:c0:b4:80:4b:63:ab:37:a7:dd:bf:74:24:46:57:0c:63:
14:10:e6:92:9a:fe:12:90:63:2a:2e:7d:21:56:0f:ae:c5:88:
42:6b:d3:8b:24:0d:0a:4c:01:48:2a:ce:e5:84:95:87:62:da:
18:49:7f:c3:95:6d:e9:89:47:f8:68:5a:53:04:cb:c0:0c:bf:
7f:e8:9b:f4:b5:80:50:3d:95:dc:77:d9:81:75:5a:dc:89:6b:
4d:5a:6f:83:f4:52:b1:57:82:b2:5c:67:fb:a7:a0:bf:c2:2f:
f1:71:13:56:43:95:0f:4a:e9:33:f1:75:f4:67:34:87:9a:c0:
c4:b6:6a:9b:e4:75:e5:63:ac:52:e5:b8:51:11:61:80:2d:ef:
f0:15:91:f3:80:ad:9a:da:37:ef:e5:7e:c0:ec:5c:ae:de:3a:
a9:60:af:63:d6:3a:d1:b6:e5:9c:82:7d:5d:8f:bd:bf:89:ef:
c3:90:66:c7:df:ca:e7:64:ec:dd:49:d4:9a:99:57:b8:c8:fd:
70:d5:d1:bf:f7:29:4d:10:2b:17:a9:a6:d3:20:44:31:46:91:
8e:10:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:25 2026 by rpki-client