Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/GPFcG47nIYBiH_vSd-Zet9HInTY.asa
File: GPFcG47nIYBiH_vSd-Zet9HInTY.asa (raw, json)
Hash identifier: HNMbYsk9UfUyN+47iHB5pyXq6stkZEZHOhwEC4uh0DQ=
Subject key identifier: 18:F1:5C:1B:8E:E7:21:80:62:1F:FB:D2:77:E6:5E:B7:D1:C8:9D:36
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019F59F879B8101F4742AB0F11A48220EADC
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/GPFcG47nIYBiH_vSd-Zet9HInTY.asa
Signing time: Mon 13 Jul 2026 05:34:44 +0000
ASPA not before: Mon 13 Jul 2026 05:34:44 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200325
Providers: AS: 174
AS: 3491
AS: 4229
AS: 7195
AS: 8849
AS: 9009
AS: 12186
AS: 18450
AS: 20326
AS: 20473
AS: 21859
AS: 36236
AS: 40994
AS: 49544
AS: 51095
AS: 56630
AS: 60068
AS: 61317
AS: 62563
AS: 63023
AS: 136557
AS: 137409
AS: 199524
AS: 213683
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:f8:79:b8:10:1f:47:42:ab:0f:11:a4:82:20:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jul 13 05:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18f15c1b8ee72180621ffbd277e65eb7d1c89d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:b2:98:b9:9c:46:27:5d:c6:c7:7f:b5:9d:
e4:37:4a:49:53:aa:34:5a:e5:d8:7b:92:6c:46:9e:
fd:70:cd:b7:d7:80:32:f7:d5:35:08:4a:b1:20:be:
d1:ac:8f:57:7c:d6:7c:45:e4:06:77:37:b7:d9:5c:
8b:b5:8c:ef:22:de:01:5d:0f:ea:96:f5:86:fd:86:
28:cc:a2:40:86:f7:c5:69:5a:8c:be:47:d2:95:65:
d6:20:21:60:c3:1e:b6:ef:14:5d:0a:62:00:0c:27:
ef:2a:15:36:69:19:f4:94:55:df:86:3d:1e:4b:9b:
dd:ce:7b:95:31:f5:4f:38:24:c4:d2:a6:85:e9:31:
ab:a3:16:0a:c2:ac:d5:80:34:2b:0a:e1:3c:22:84:
1c:18:62:9a:38:7a:0f:b5:0b:30:a8:3a:0f:0b:b8:
33:d0:16:c7:54:df:b1:91:dd:ed:2a:cf:33:79:ea:
45:ab:66:9b:f0:a7:bb:38:42:99:bd:96:8f:14:cf:
f3:b3:cc:36:ac:b3:77:6c:3e:00:d5:90:ae:60:56:
97:4e:b4:fa:f9:47:cb:fe:ca:d6:b0:5f:fb:c5:38:
4e:76:b3:20:62:bd:32:a9:1d:e5:b9:20:da:0a:c5:
5d:91:57:c5:21:84:0f:0d:ec:f3:b2:ab:0a:53:89:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:5C:1B:8E:E7:21:80:62:1F:FB:D2:77:E6:5E:B7:D1:C8:9D:36
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/GPFcG47nIYBiH_vSd-Zet9HInTY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200325
Signature Algorithm: sha256WithRSAEncryption
04:a3:13:e1:4a:8f:c6:53:31:87:82:06:17:31:53:b0:46:b8:
1a:18:1b:9c:7b:76:24:32:f0:e2:2b:12:05:01:2c:7c:a9:0a:
79:45:89:0d:29:81:78:66:a4:88:be:ec:c1:3e:ef:8a:76:ac:
34:25:b0:a5:a0:fd:12:2e:75:7c:71:ee:a4:be:c5:1b:c5:99:
3b:72:52:65:01:3f:fd:e8:40:f9:7a:42:3f:82:d6:1e:08:85:
4a:9a:0e:42:e8:aa:ab:82:95:39:81:73:c0:e4:18:80:bb:9f:
c8:be:4e:4a:48:ed:2c:b4:cb:0d:8a:2f:c1:64:aa:5a:18:a9:
93:9a:a0:09:e5:90:f5:b6:dc:50:30:fe:6e:a9:02:ab:2d:2d:
1a:4e:e0:99:f0:e7:9c:37:9d:6d:4b:3e:5d:cf:e9:d2:b8:7b:
ea:41:e2:c4:47:b0:29:23:79:b0:dd:37:df:f9:ae:6a:19:c5:
eb:e2:99:c0:67:17:53:2c:23:cf:51:87:17:cd:56:6c:6d:7a:
c9:3e:67:46:33:a5:54:91:57:66:b2:26:d0:6e:04:1f:48:84:
2d:d4:e7:c0:47:e6:d5:96:d2:cb:ac:5d:a2:85:b3:e5:16:51:
d3:3a:90:7b:d8:7b:31:54:f1:c6:4f:95:7e:91:42:4b:7d:b0:
0f:7e:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:57:49 2026 by rpki-client