Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/8AC5hr87IvNKc2uj2TEkr-2Z034.asa
File: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (raw, json)
Hash identifier: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=
Subject key identifier: F0:00:B9:86:BF:3B:22:F3:4A:73:6B:A3:D9:31:24:AF:ED:99:D3:7E
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019D06E42A96FAB2FAB095C074E8E53F91E9
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/8AC5hr87IvNKc2uj2TEkr-2Z034.asa
Signing time: Thu 19 Mar 2026 16:18:29 +0000
ASPA not before: Thu 19 Mar 2026 16:18:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 24904
Providers: AS: 174
AS: 6762
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:e4:2a:96:fa:b2:fa:b0:95:c0:74:e8:e5:3f:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Mar 19 16:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f000b986bf3b22f34a736ba3d93124afed99d37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f3:25:e8:ef:9e:20:3c:79:24:f9:ca:a4:15:
37:7b:ee:ea:30:db:3a:bf:25:0a:69:ea:b6:da:30:
b1:24:c8:dd:1a:11:93:5e:1a:86:36:99:a0:0f:64:
55:7d:f2:22:4a:7c:e3:6a:66:b4:c1:ad:08:86:8c:
4e:20:2a:ee:cf:db:62:3b:dc:c7:2b:6c:87:8e:f1:
1d:43:a7:6d:d5:6e:ce:61:09:44:d8:9b:ec:d2:7e:
db:32:37:c8:77:c3:a8:35:43:4f:3c:e6:12:eb:67:
0f:f4:eb:77:b8:4d:be:15:18:23:12:08:e7:13:0b:
4f:95:89:2b:e5:98:3a:5e:d7:81:95:c5:ad:46:0c:
83:a4:45:2b:c4:6a:d7:70:65:3d:e9:84:7b:ec:42:
07:aa:23:62:63:1a:fd:c1:2c:39:9c:26:e2:ea:4c:
77:77:4b:7e:e6:ab:fe:ce:9b:b9:4a:aa:aa:8f:cc:
f6:c8:23:de:5d:ef:6d:a1:1c:d1:ee:d7:76:92:2e:
53:21:ad:42:7e:31:63:92:b0:8b:0d:9e:7e:cd:07:
de:98:44:98:31:91:56:1c:0c:3d:9a:a9:b7:0a:53:
ee:90:f6:c9:e4:b9:ea:e0:3b:cd:79:d2:57:c4:d8:
10:2b:9a:29:2d:6e:b9:06:6f:d6:a0:14:e4:84:bf:
6d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:00:B9:86:BF:3B:22:F3:4A:73:6B:A3:D9:31:24:AF:ED:99:D3:7E
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/8AC5hr87IvNKc2uj2TEkr-2Z034.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24904
Signature Algorithm: sha256WithRSAEncryption
46:c4:45:78:9c:9e:27:6e:7c:96:51:10:3b:1b:d4:fc:11:a2:
85:64:8c:ac:9f:69:70:ca:5a:0f:0c:0a:ad:52:bf:08:16:30:
f8:6a:e1:40:eb:34:1f:b6:9d:39:ff:db:c4:cb:e5:80:9c:95:
1d:4c:1d:b6:dd:9e:30:aa:8c:39:6a:d8:e7:da:eb:70:c9:0d:
8b:4e:0e:1e:bf:1d:d9:ad:1a:e0:00:82:d8:cf:d9:3e:d3:cd:
c9:0b:f0:02:00:43:e1:7d:5b:b3:05:a8:43:cd:39:cb:57:aa:
e5:a1:80:37:e9:5f:21:26:06:1a:a1:a4:a9:76:cd:f3:70:24:
f9:eb:99:2f:b8:93:2d:2a:bd:09:82:c0:8f:9d:f6:15:75:ee:
2f:28:da:f7:a4:84:ad:d6:01:86:e9:39:1d:7f:64:dc:c4:3e:
d7:ae:04:a8:0f:2d:70:ec:9c:d9:c4:dd:a7:89:42:df:9d:ad:
f4:4a:bc:30:9f:43:5f:bc:43:7c:ff:5c:80:40:bc:28:bb:99:
bb:57:18:83:9f:58:bb:d1:d8:fd:0a:e2:7f:bb:7c:cd:ec:ec:
74:e9:5e:dd:4f:0b:61:46:88:14:d5:3d:6c:62:ed:13:2b:61:
23:6a:4b:4e:8b:fe:ac:8f:45:ea:9c:e1:33:49:56:f0:0e:1d:
a0:38:9c:26
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ0G5CqW+rL6sJXAdOjlP5HpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz
NmY4MjcwHhcNMjYwMzE5MTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDAwYjk4NmJmM2IyMmYzNGE3MzZiYTNkOTMxMjRhZmVkOTlkMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vMl6O+eIDx5JPnKpBU3e+7qMNs6
vyUKaeq22jCxJMjdGhGTXhqGNpmgD2RVffIiSnzjama0wa0IhoxOICruz9tiO9zH
K2yHjvEdQ6dt1W7OYQlE2Jvs0n7bMjfId8OoNUNPPOYS62cP9Ot3uE2+FRgjEgjn
EwtPlYkr5Zg6XteBlcWtRgyDpEUrxGrXcGU96YR77EIHqiNiYxr9wSw5nCbi6kx3
d0t+5qv+zpu5Sqqqj8z2yCPeXe9toRzR7td2ki5TIa1CfjFjkrCLDZ5+zQfemESY
MZFWHAw9mqm3ClPukPbJ5Lnq4DvNedJXxNgQK5opLW65Bm/WoBTkhL9t7QIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFPAAuYa/OyLzSnNro9kxJK/tmdN+MB8GA1UdIwQY
MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt
NzdjYTg5Y2Y0MzZhLzEvOEFDNWhyODdJdk5LYzJ1ajJURWtyLTJaMDM0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh
LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmFIMA0GCSqGSIb3
DQEBCwUAA4IBAQBGxEV4nJ4nbnyWURA7G9T8EaKFZIysn2lwyloPDAqtUr8IFjD4
auFA6zQftp05/9vEy+WAnJUdTB223Z4wqow5atjn2utwyQ2LTg4evx3ZrRrgAILY
z9k+083JC/ACAEPhfVuzBahDzTnLV6rloYA36V8hJgYaoaSpds3zcCT565kvuJMt
Kr0JgsCPnfYVde4vKNr3pISt1gGG6Tkdf2TcxD7XrgSoDy1w7JzZxN2niULfna30
Srwwn0NfvEN8/1yAQLwou5m7VxiDn1i70dj9CuJ/u3zN7Ox06V7dTwthRogU1T1s
Yu0TK2EjaktOi/6sj0XqnOEzSVbwDh2gOJwm
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:02 2026 by rpki-client