Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/olENn8z2oeymVvFBKGCcsropB2k.asa
File: olENn8z2oeymVvFBKGCcsropB2k.asa (raw, json)
Hash identifier: 81kkkwFsEXTUKeM4iGPd3FMZGZAWb498rELa9H4bn8U=
Subject key identifier: A2:51:0D:9F:CC:F6:A1:EC:A6:56:F1:41:28:60:9C:B2:BA:29:07:69
Certificate issuer: /CN=c440a86d94ba7440f4ecfa6abccd7d3667de16ef
Certificate serial: 01A0CF85A72B9F63523ACC25333E69931C6E
Authority key identifier: C4:40:A8:6D:94:BA:74:40:F4:EC:FA:6A:BC:CD:7D:36:67:DE:16:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xECobZS6dED07PpqvM19NmfeFu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/olENn8z2oeymVvFBKGCcsropB2k.asa
Signing time: Wed 23 Sep 2026 18:27:17 +0000
ASPA not before: Wed 23 Sep 2026 18:27:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 218703
Providers: AS: 36231
AS: 210667
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xECobZS6dED07PpqvM19NmfeFu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:85:a7:2b:9f:63:52:3a:cc:25:33:3e:69:93:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c440a86d94ba7440f4ecfa6abccd7d3667de16ef
Validity
Not Before: Sep 23 18:27:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2510d9fccf6a1eca656f14128609cb2ba290769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:0a:2b:9d:35:0d:ae:ad:53:82:df:ff:8d:
e2:81:84:74:1c:98:40:5d:8e:12:50:83:7a:61:dc:
f9:49:03:67:db:27:9e:22:c0:32:75:f6:98:64:60:
bd:78:9d:72:f8:13:6f:a6:82:74:1f:e8:99:89:88:
a2:41:e2:c2:34:e4:c1:e6:62:f8:37:ba:aa:f4:6b:
aa:3b:1c:62:85:8a:e4:51:96:0c:b3:c5:e8:bf:9b:
fe:2f:a6:58:30:8d:f5:43:59:6c:ec:66:85:64:a9:
29:4f:95:9a:7a:b0:ac:d2:96:3a:ff:d6:8e:fd:af:
14:b2:f3:ac:2b:d4:a7:38:a2:1b:b5:4c:61:39:00:
d4:74:9d:6e:46:93:76:ea:ab:b4:50:52:a0:13:80:
42:c8:5d:9c:33:3a:40:74:27:ae:d4:cc:cc:97:9b:
9c:3d:fb:6e:c7:a6:8d:3b:d4:ad:e0:ee:52:ad:a1:
62:c1:60:8f:59:3f:92:54:f2:40:b4:45:c4:01:ea:
c0:64:0e:5b:e1:e4:19:22:97:a9:0a:3a:17:82:6a:
2d:e0:6e:7a:05:93:f7:24:8c:20:97:5a:dd:a9:bf:
54:db:ec:d9:d9:46:63:52:59:c1:3a:9b:c5:1c:4b:
29:9a:9c:44:6d:6f:4e:bc:5f:40:31:3a:4f:78:54:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:0D:9F:CC:F6:A1:EC:A6:56:F1:41:28:60:9C:B2:BA:29:07:69
X509v3 Authority Key Identifier:
keyid:C4:40:A8:6D:94:BA:74:40:F4:EC:FA:6A:BC:CD:7D:36:67:DE:16:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xECobZS6dED07PpqvM19NmfeFu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/olENn8z2oeymVvFBKGCcsropB2k.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1613aa-b7e6-482b-9395-e6c0f1b29a8f/1/xECobZS6dED07PpqvM19NmfeFu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218703
Signature Algorithm: sha256WithRSAEncryption
c1:09:ff:60:5a:1f:04:83:e1:2d:10:75:c9:c9:2b:3d:9f:c7:
82:17:cb:a6:79:1a:f9:45:f4:77:39:b3:39:2e:13:ab:16:c0:
8b:d5:2f:79:26:cb:21:b7:8b:00:cd:3d:3c:df:cf:88:18:d9:
b5:8e:e5:c4:6b:6b:33:84:25:07:01:41:c4:77:bf:5f:85:4f:
8c:16:b3:a2:59:e3:bd:41:6f:ed:95:cc:6e:28:df:5f:39:7a:
3c:26:a0:43:17:69:b8:a3:61:9e:5f:67:9c:fd:fb:eb:81:90:
8b:75:c4:7d:75:d0:cd:66:4f:f2:9a:b3:cf:8c:11:b7:d9:c6:
bb:93:98:ba:50:34:01:85:5e:d5:80:b3:0d:4f:23:80:61:17:
25:96:8f:ac:c1:18:fd:43:0b:02:f1:43:d6:f2:8e:ad:14:a6:
68:d6:4d:79:9f:5b:06:2d:a9:da:af:7c:94:d8:38:ec:41:e7:
77:97:20:91:77:22:86:d1:a2:e0:81:d8:ba:2c:74:3f:1e:53:
be:36:99:ea:20:87:55:ab:5b:c5:7d:1d:ef:7a:f6:e7:74:8c:
7b:5d:20:a4:a6:32:62:58:2f:0b:17:a1:1b:a5:80:d1:44:7a:
d3:d4:d8:5b:a1:59:2e:e9:f3:8a:a4:07:f7:c5:e4:c6:d3:97:
13:34:95:d4
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDPhacrn2NSOswlMz5pkxxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDBhODZkOTRiYTc0NDBmNGVjZmE2YWJjY2Q3ZDM2Njdk
ZTE2ZWYwHhcNMjYwOTIzMTgyNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjUxMGQ5ZmNjZjZhMWVjYTY1NmYxNDEyODYwOWNiMmJhMjkwNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7wKK501Da6tU4Lf/43igYR0HJhA
XY4SUIN6Ydz5SQNn2yeeIsAydfaYZGC9eJ1y+BNvpoJ0H+iZiYiiQeLCNOTB5mL4
N7qq9GuqOxxihYrkUZYMs8Xov5v+L6ZYMI31Q1ls7GaFZKkpT5WaerCs0pY6/9aO
/a8UsvOsK9SnOKIbtUxhOQDUdJ1uRpN26qu0UFKgE4BCyF2cMzpAdCeu1MzMl5uc
Pftux6aNO9St4O5SraFiwWCPWT+SVPJAtEXEAerAZA5b4eQZIpepCjoXgmot4G56
BZP3JIwgl1rdqb9U2+zZ2UZjUlnBOpvFHEspmpxEbW9OvF9AMTpPeFQsfwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKJRDZ/M9qHsplbxQShgnLK6KQdpMB8GA1UdIwQY
MBaAFMRAqG2UunRA9Oz6arzNfTZn3hbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVDb2JaUzZkRUQwN1BwcXZNMTlObWZlRnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xNjEzYWEtYjdlNi00ODJiLTkzOTUt
ZTZjMGYxYjI5YThmLzEvb2xFTm44ejJvZXltVnZGQktHQ2Nzcm9wQjJrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xNjEzYWEtYjdlNi00ODJiLTkzOTUtZTZjMGYxYjI5YThm
LzEveEVDb2JaUzZkRUQwN1BwcXZNMTlObWZlRnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNWTzANBgkqhkiG
9w0BAQsFAAOCAQEAwQn/YFofBIPhLRB1yckrPZ/HghfLpnka+UX0dzmzOS4TqxbA
i9UveSbLIbeLAM09PN/PiBjZtY7lxGtrM4QlBwFBxHe/X4VPjBazolnjvUFv7ZXM
bijfXzl6PCagQxdpuKNhnl9nnP3764GQi3XEfXXQzWZP8pqzz4wRt9nGu5OYulA0
AYVe1YCzDU8jgGEXJZaPrMEY/UMLAvFD1vKOrRSmaNZNeZ9bBi2p2q98lNg47EHn
d5cgkXcihtGi4IHYuix0Px5TvjaZ6iCHVatbxX0d73r253SMe10gpKYyYlgvCxeh
G6WA0UR609TYW6FZLunziqQH98XkxtOXEzSV1A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:50:17 2026 by rpki-client