Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/0CV2CgZdkDgFEaSWQttpAjPrLnQ.asa
File: 0CV2CgZdkDgFEaSWQttpAjPrLnQ.asa (raw, json)
Hash identifier: 5B/cG9WFC5Dp/KeCcEnHIm8JElPEiHwNBSkNYqyo5vI=
Subject key identifier: D0:25:76:0A:06:5D:90:38:05:11:A4:96:42:DB:69:02:33:EB:2E:74
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019F190109FD89C0D0557E8B7F5C0B1BA705
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/0CV2CgZdkDgFEaSWQttpAjPrLnQ.asa
Signing time: Tue 30 Jun 2026 14:48:46 +0000
ASPA not before: Tue 30 Jun 2026 14:48:46 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 61421
Providers: AS: 6939
AS: 8283
AS: 45009
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:09:fd:89:c0:d0:55:7e:8b:7f:5c:0b:1b:a7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jun 30 14:48:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d025760a065d90380511a49642db690233eb2e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:c4:71:d3:98:ae:f1:d5:47:18:10:e9:e8:
c2:c5:87:91:b5:58:a1:dd:57:7c:2d:ff:cf:8c:92:
af:a3:29:39:80:c5:22:58:0a:fd:24:10:cf:e4:cc:
b1:4d:f8:70:d0:8a:ee:5d:14:7d:c8:77:d4:62:c8:
2c:99:75:f2:4d:7a:f4:2d:a5:85:ef:93:ff:50:04:
9b:87:53:bf:e0:37:a1:cd:28:a4:1c:81:fe:33:92:
ba:33:f6:1e:d6:bd:b5:b8:3d:fa:02:53:a4:35:00:
a7:8a:6f:c1:b1:08:5f:2b:b7:7d:87:91:7d:68:96:
a7:24:f0:fe:3e:4d:ce:8b:41:76:0e:97:a6:dd:f1:
80:5b:9f:ed:c9:65:4a:97:88:1c:00:8a:34:48:a7:
10:d6:dd:9d:21:fa:0d:2d:6b:e1:d8:cc:b7:7d:ce:
0c:bc:b5:8f:95:8e:70:3e:ee:4e:79:ee:ce:06:5e:
0a:35:9c:ec:cc:da:a1:09:52:72:b9:0a:d9:a0:f7:
fa:06:07:82:c4:e0:a4:ef:12:c0:33:c8:46:61:96:
30:56:b1:9d:68:58:e6:5c:41:21:36:f5:36:c1:44:
54:b1:5d:ac:79:85:ea:80:27:e3:f0:ec:f7:c2:a7:
f6:6f:60:fa:62:fb:ab:ea:c7:54:2d:22:2f:ca:96:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:76:0A:06:5D:90:38:05:11:A4:96:42:DB:69:02:33:EB:2E:74
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/0CV2CgZdkDgFEaSWQttpAjPrLnQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61421
Signature Algorithm: sha256WithRSAEncryption
07:16:51:d8:c4:ec:97:a2:5d:30:96:16:dd:87:2c:89:0d:69:
a6:fe:39:e6:c6:32:f8:fd:fb:12:d8:1a:d7:71:b1:57:f3:d5:
a1:c8:cb:82:fd:73:76:48:09:21:68:d2:2b:84:25:e2:b8:98:
c7:29:b4:9a:24:33:ee:e5:ab:3b:c8:a7:de:37:b4:3d:c7:a5:
b0:eb:0c:59:b5:80:31:78:d6:94:41:26:6f:06:5f:17:c2:6f:
2f:c4:0c:00:4d:fa:71:92:59:68:68:e6:2f:74:a1:14:f0:33:
de:ea:e5:b8:47:c9:db:15:10:35:3b:d6:46:e2:c8:7c:67:5c:
93:e4:37:e2:1f:39:ae:a2:8e:74:2a:76:db:a0:b5:e1:24:88:
9a:62:3a:18:57:6b:e9:bf:54:3d:dd:5c:2e:31:e4:30:c7:29:
e7:32:bf:e8:41:4e:03:63:16:79:02:cc:44:0f:f7:53:a1:8d:
68:8f:6e:ba:fd:b9:62:2e:74:3f:43:9b:bd:c8:1e:3c:ff:34:
02:6f:78:43:c9:50:3b:9c:2c:c0:b9:4e:7d:7e:9a:e6:04:88:
ac:79:ff:bb:b0:36:7e:d3:8e:af:c6:62:e8:c3:67:31:a7:5e:
3d:47:d7:da:34:70:46:f3:68:ca:66:02:06:2a:31:71:69:16:
57:e1:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:58:17 2026 by rpki-client