Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/y2VASoeCRWsx4fOIQsANoVYUCiU.asa
File: y2VASoeCRWsx4fOIQsANoVYUCiU.asa (raw, json)
Hash identifier: Upx1qMJKLlex8wN0YOjWekxvlRZwatgFmvT15QJfaSQ=
Subject key identifier: CB:65:40:4A:87:82:45:6B:31:E1:F3:88:42:C0:0D:A1:56:14:0A:25
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 01A06CF17D30848EA58276D8D11680C73B6B
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/y2VASoeCRWsx4fOIQsANoVYUCiU.asa
Signing time: Fri 04 Sep 2026 15:02:40 +0000
ASPA not before: Fri 04 Sep 2026 15:02:40 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 48971
Providers: AS: 174
AS: 6939
AS: 13030
AS: 58299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f1:7d:30:84:8e:a5:82:76:d8:d1:16:80:c7:3b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Sep 4 15:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb65404a8782456b31e1f38842c00da156140a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:ea:53:48:37:e3:73:e8:53:66:63:93:3f:
4c:32:7d:81:0a:e7:57:8e:a3:fc:8b:eb:eb:b1:f6:
6a:27:b5:06:e6:64:0e:a2:5b:f8:71:22:d4:84:a6:
bb:5b:71:4e:17:a9:d6:69:4f:6a:d5:66:63:6b:10:
6f:17:f5:6f:fd:f9:85:b8:d6:87:55:10:25:05:75:
c5:c3:7f:c9:75:29:a3:10:50:86:2c:54:f0:e0:13:
80:40:62:20:a4:3d:d4:71:a1:4d:54:46:98:b0:d9:
48:9c:9d:6a:ca:66:c1:32:e0:6a:9f:66:e9:83:0f:
41:c9:e8:7b:1c:d8:3e:51:cc:1c:e9:a3:13:44:14:
4b:d4:e5:06:d4:37:12:6f:86:4f:1f:23:87:d0:80:
41:4f:d6:0e:13:e5:e3:eb:23:1b:41:d9:b6:f7:84:
e6:64:1e:f6:40:09:ff:ed:1d:8b:51:88:80:24:61:
cc:f2:2f:57:fa:88:de:18:2c:bb:83:20:18:c3:e2:
79:b5:e2:8d:c1:a7:39:39:d6:7f:42:53:cc:31:f0:
c2:07:2e:cc:ba:47:16:80:a8:99:58:43:25:a0:99:
07:06:c8:32:18:97:d6:9b:76:38:d7:4f:de:87:11:
84:3d:6b:17:59:47:32:f6:95:a2:94:38:5b:b0:a8:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:65:40:4A:87:82:45:6B:31:E1:F3:88:42:C0:0D:A1:56:14:0A:25
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/y2VASoeCRWsx4fOIQsANoVYUCiU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48971
Signature Algorithm: sha256WithRSAEncryption
10:41:9d:3e:94:79:79:95:0c:ed:b0:a0:77:55:95:44:bf:8f:
7a:3c:a8:5d:46:d9:fe:9e:0a:94:6b:73:70:10:46:0d:7f:91:
75:ac:26:70:b3:ca:68:1c:f8:3f:95:1e:38:dc:64:b7:81:03:
ca:81:99:f7:be:09:19:43:27:dd:bf:21:e2:f6:1a:c3:d9:68:
75:98:1f:19:d6:45:8e:af:98:54:bd:7b:5c:d3:9c:3f:a8:a7:
64:76:ec:fc:14:dc:39:8d:3b:b2:83:5a:d3:25:56:d4:fa:07:
4c:18:06:ed:2b:56:20:ea:99:a8:27:38:6f:e3:42:d3:70:31:
91:39:a6:75:5a:be:f5:1a:f0:7c:c3:a5:e5:b5:39:73:0a:21:
a8:75:5e:9a:55:66:6c:b2:8d:50:9b:65:1b:22:85:ac:eb:f6:
d3:2c:0a:7f:b4:ef:ff:c0:e3:06:13:86:bd:83:71:bb:58:75:
0f:24:cf:d3:b9:1b:84:f9:af:de:9e:2f:ff:74:c0:96:46:33:
81:4f:f9:9f:76:fe:5e:76:cf:5e:31:a1:04:a4:16:31:97:24:
64:23:d5:cc:ac:74:12:42:73:62:57:84:6e:61:40:4e:a8:43:
6d:c4:df:e5:ea:8d:82:b9:66:fa:c8:37:51:8d:b9:b0:97:dd:
ab:03:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:48:22 2026 by rpki-client