Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/F8jBuG5_4_CgtoojOds8y0UfXhM.asa
File: F8jBuG5_4_CgtoojOds8y0UfXhM.asa (raw, json)
Hash identifier: llQPaP2k3MsfWOzuGis02Z7WE9ESVQM+t5ATJGXlDKo=
Subject key identifier: 17:C8:C1:B8:6E:7F:E3:F0:A0:B6:8A:23:39:DB:3C:CB:45:1F:5E:13
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 019DF01DAA67BEDDA9EB177EEFD8D9F7CF91
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/F8jBuG5_4_CgtoojOds8y0UfXhM.asa
Signing time: Sun 03 May 2026 23:12:49 +0000
ASPA not before: Sun 03 May 2026 23:12:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208487
Providers: AS: 8772
AS: 11967
AS: 24381
AS: 29632
AS: 35708
AS: 41051
AS: 152565
AS: 199829
AS: 201541
AS: 207841
AS: 209533
AS: 209735
AS: 210464
AS: 211358
AS: 211509
AS: 212895
AS: 213449
AS: 214022
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:1d:aa:67:be:dd:a9:eb:17:7e:ef:d8:d9:f7:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: May 3 23:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17c8c1b86e7fe3f0a0b68a2339db3ccb451f5e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:1b:04:82:63:04:d6:c3:4d:25:14:60:4a:
60:d0:54:08:f6:10:cf:85:2d:4e:53:fd:ef:cd:8c:
dc:2c:56:3a:73:3c:74:f6:e9:95:29:93:bb:33:04:
3e:f6:80:16:26:01:0b:dd:f5:3d:3c:b8:f5:fa:7c:
57:e2:53:c4:bd:c6:bf:4f:c5:56:d8:81:b5:e9:e9:
c4:be:a7:98:1d:5b:a8:b7:f6:ad:02:a9:b4:96:7d:
2b:a1:89:fb:54:27:95:f4:72:20:75:86:62:ee:ca:
94:d1:9b:8a:f4:b4:49:47:68:c5:e1:d1:15:f8:6b:
aa:6c:d0:38:bf:8a:66:bc:c0:b4:b2:5a:69:91:c4:
af:ac:43:e7:c2:cb:d9:43:27:6b:59:b7:5e:b9:b9:
3c:21:ce:56:d0:89:ea:96:86:c5:20:6a:36:59:ea:
7d:88:2f:cd:c0:ff:cf:1e:6a:e9:45:e8:d4:d2:c3:
77:82:d3:10:5e:29:04:55:74:cb:81:66:4f:a1:6a:
04:3d:eb:c6:62:52:4e:5a:44:9f:a5:97:de:0b:60:
12:0c:b6:d5:51:5a:2f:03:56:1c:16:d6:5c:50:04:
33:ae:33:f6:ef:d1:0f:7d:17:db:91:c3:75:7d:03:
73:82:d1:3f:80:01:71:aa:26:7b:31:7e:66:7c:aa:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:C1:B8:6E:7F:E3:F0:A0:B6:8A:23:39:DB:3C:CB:45:1F:5E:13
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/F8jBuG5_4_CgtoojOds8y0UfXhM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208487
Signature Algorithm: sha256WithRSAEncryption
89:ee:fa:24:31:87:d4:94:ed:45:97:4c:43:00:bb:dd:d4:33:
cb:83:16:f5:89:16:64:cf:16:b3:38:3e:4f:45:c1:e0:e5:3e:
53:cb:20:8b:38:6f:fb:f0:6d:83:72:33:56:6d:25:09:52:17:
36:8f:b7:4e:06:c7:40:1a:3d:2c:c3:84:5a:36:da:83:17:37:
81:b1:29:d8:73:e8:3e:7e:15:7e:6a:72:b3:f1:6e:c1:38:81:
0e:93:29:45:d4:71:87:cb:3c:a8:38:86:d3:ec:bf:37:f7:d9:
f7:25:8a:02:c5:e1:37:3d:61:8d:7c:63:b1:bb:13:9f:da:a1:
4c:bd:b7:a0:38:61:d1:0b:e5:28:c6:68:71:a2:1e:49:0e:12:
12:49:9e:57:30:0c:99:63:b8:e6:2a:fb:9c:e8:69:7d:b8:89:
23:bf:42:a6:0e:f8:83:07:cb:69:e6:22:a5:c0:b5:fc:1c:02:
67:80:9f:15:f9:9e:b5:70:13:c2:39:ea:ea:02:98:29:eb:a2:
3e:08:c7:a1:35:f5:0f:29:5f:f5:69:26:ce:6b:94:59:3a:29:
5c:01:7e:ed:97:4c:e2:3e:92:80:3a:b1:bd:24:67:df:e3:b4:
0e:fe:ee:b5:4c:69:d7:42:ee:52:bb:fc:9a:ca:46:e7:91:d7:
2c:f2:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:20 2026 by rpki-client