Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/oHsAIsY3K_cptDSyVkp0H0HXWxg.asa
File: oHsAIsY3K_cptDSyVkp0H0HXWxg.asa (raw, json)
Hash identifier: O1iswhvBCi8e0ADs7zbMpKEtTvdXvwFLXzFqvApLrkw=
Subject key identifier: A0:7B:00:22:C6:37:2B:F7:29:B4:34:B2:56:4A:74:1F:41:D7:5B:18
Certificate issuer: /CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Certificate serial: 019F2368D06CD35BAAC666E2DF2B1427D01E
Authority key identifier: 36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/oHsAIsY3K_cptDSyVkp0H0HXWxg.asa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ASPA not before: Thu 02 Jul 2026 15:18:19 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 41931
Providers: AS: 2906
AS: 6507
AS: 6939
AS: 13335
AS: 16276
AS: 16509
AS: 20940
AS: 21395
AS: 24748
AS: 29535
AS: 32590
AS: 32934
AS: 42927
AS: 48850
AS: 57789
AS: 198984
AS: 201054
AS: 203677
AS: 393338
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d0:6c:d3:5b:aa:c6:66:e2:df:2b:14:27:d0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a07b0022c6372bf729b434b2564a741f41d75b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:f0:20:33:91:1b:21:d6:ff:e5:52:b1:a7:
90:d0:00:89:46:7e:94:59:30:cd:b4:71:0b:cb:36:
3b:58:c5:75:f2:40:1f:ce:7e:68:21:2d:6c:73:b1:
97:79:a5:5e:87:44:b3:51:56:84:f6:39:e9:06:e6:
25:f1:97:be:fb:ee:23:b7:e7:a8:1c:d5:02:1c:aa:
12:7e:46:d8:ba:b0:0d:80:69:4b:c7:43:98:2e:44:
eb:3c:17:66:78:47:99:0b:b5:40:59:15:38:68:d0:
b1:5e:93:74:8f:a0:ad:7c:a6:39:65:82:ef:6f:36:
68:a2:08:69:ab:d0:6d:6b:54:c3:65:54:23:c6:0f:
95:18:92:1f:fc:ea:ee:89:a9:9b:5f:85:97:97:a0:
cf:75:99:95:f3:23:bf:9e:9c:2e:f3:20:51:b1:91:
17:36:43:42:9b:c7:a9:31:5d:9e:1d:fa:d2:ec:92:
3e:2f:80:cc:23:13:64:ed:36:cb:c0:43:61:95:1a:
8f:ce:8b:03:ab:7b:29:6e:8f:3f:85:fd:06:10:d9:
a0:4c:4d:e9:72:b2:ad:95:b0:fd:90:9c:7c:d1:59:
a0:cc:28:51:5a:08:49:fc:82:78:e8:b5:94:38:6f:
be:1f:dc:c9:35:64:19:40:66:6b:47:3d:50:05:a8:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:00:22:C6:37:2B:F7:29:B4:34:B2:56:4A:74:1F:41:D7:5B:18
X509v3 Authority Key Identifier:
keyid:36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/oHsAIsY3K_cptDSyVkp0H0HXWxg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41931
Signature Algorithm: sha256WithRSAEncryption
89:9a:55:bf:8d:fc:bc:a3:e1:da:b8:f0:6a:cb:24:9b:b4:85:
b1:4a:cf:66:dd:6f:e7:6c:89:7d:a6:5c:57:45:e6:96:7b:e5:
fd:01:b0:7d:ec:dc:ad:1e:82:73:95:41:6f:40:4a:7d:bb:6b:
33:6f:b3:2a:32:e6:da:a9:da:98:d8:5d:1c:c9:5f:b0:31:c3:
c2:0a:85:48:b0:cb:0c:ea:fb:bc:ed:bb:47:b3:39:bd:83:06:
ab:a7:5d:f1:17:18:18:56:2c:91:12:27:7d:94:e0:ee:b0:77:
59:e8:26:f8:97:cd:2a:18:a0:42:1f:b6:6a:4e:ee:5b:b3:ad:
31:cb:81:f2:47:30:8d:2d:6c:8c:84:7d:ae:5e:82:fe:ee:fd:
4c:0f:26:1f:98:de:3d:f0:fc:e6:67:25:ca:73:45:8a:d7:81:
f2:22:3a:54:ba:ae:79:bf:ba:6e:64:48:8d:cb:e3:97:04:1a:
e6:f3:a2:df:d5:57:24:2f:e0:14:37:72:f9:50:29:d7:86:b6:
80:f0:4a:f1:27:06:f4:fa:19:55:14:cc:2d:0a:36:e4:74:75:
80:ec:c8:b7:fb:1a:33:ad:c7:d4:83:4a:a3:e2:d2:51:c0:dd:
f3:6b:07:f6:43:30:3f:97:65:23:b2:c4:ab:4e:bc:f2:1d:c1:
e1:cf:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:24 2026 by rpki-client