Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/NpoFl8aCEfIX1DekH8Hxr-GsW5I.asa
File: NpoFl8aCEfIX1DekH8Hxr-GsW5I.asa (raw, json)
Hash identifier: OTPlU6M/sI8rHqRDdKs1ngPrkO32rdeRFwTy9zgaXQE=
Subject key identifier: 36:9A:05:97:C6:82:11:F2:17:D4:37:A4:1F:C1:F1:AF:E1:AC:5B:92
Certificate issuer: /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial: 019DFF77035DE2A1CDD24A0238FA0ED1C13F
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/NpoFl8aCEfIX1DekH8Hxr-GsW5I.asa
Signing time: Wed 06 May 2026 22:44:42 +0000
ASPA not before: Wed 06 May 2026 22:44:42 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 216438
Providers: AS: 6517
AS: 199524
AS: 209533
AS: 212895
AS: 215114
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:77:03:5d:e2:a1:cd:d2:4a:02:38:fa:0e:d1:c1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Validity
Not Before: May 6 22:44:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=369a0597c68211f217d437a41fc1f1afe1ac5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:eb:c8:81:35:da:05:2d:5f:cb:f3:f5:0e:
e4:54:c1:4b:a8:2d:a2:83:0e:80:b4:66:4f:f1:0e:
6f:30:1f:26:c8:22:c6:09:a3:98:b5:c0:10:93:92:
f9:05:e6:9e:68:ef:5c:0a:5f:9b:62:a4:06:d1:f3:
ae:a8:98:9e:5f:bf:71:3e:09:12:6a:2f:21:53:7b:
7b:ff:f6:24:af:c3:74:8c:20:f0:56:40:30:17:a4:
e7:02:26:7e:a6:98:ff:4e:32:4e:f1:47:37:1f:44:
19:c4:00:dd:96:f8:ac:38:27:16:8b:b6:37:c0:15:
14:16:d4:b9:9a:17:13:a8:49:9e:40:48:2c:72:80:
a4:7a:f2:fb:c8:30:ac:14:93:34:24:95:d0:fd:ee:
b8:11:1a:c8:21:ec:e1:f8:05:6c:dc:50:9a:47:1a:
02:b5:b7:61:1b:d5:b6:08:b8:92:8e:02:b4:4d:60:
76:92:5e:8a:10:74:35:21:50:29:d5:ea:c1:d4:c8:
1d:f7:54:25:bb:fc:37:68:1e:57:37:fe:1a:3c:be:
e0:12:d6:84:86:34:c6:0d:ca:c3:ee:f2:5e:cb:d1:
07:07:01:b5:04:d2:fe:46:a1:47:ef:fb:3e:ee:d3:
0d:16:cb:8f:42:12:e5:2c:1a:57:16:04:e1:03:18:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9A:05:97:C6:82:11:F2:17:D4:37:A4:1F:C1:F1:AF:E1:AC:5B:92
X509v3 Authority Key Identifier:
keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/NpoFl8aCEfIX1DekH8Hxr-GsW5I.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216438
Signature Algorithm: sha256WithRSAEncryption
2c:8d:7d:22:d9:41:8e:6d:d0:f4:74:11:10:e8:47:d8:6c:79:
cb:ed:6c:1f:c4:ab:6f:ca:b2:f4:59:1a:70:50:5f:8a:bb:03:
85:cd:b9:5b:09:5a:37:f6:3a:6a:24:24:3d:ab:46:08:05:28:
af:69:19:d5:6f:ea:38:63:a3:b1:ec:a4:c0:94:c9:98:66:71:
50:e8:b0:ab:67:1e:0f:96:46:02:cf:d0:a0:23:1a:4e:6c:2a:
ef:00:cd:a8:0f:59:3c:b6:4c:07:3d:ba:08:ce:55:95:18:39:
a0:48:b5:29:c3:e7:36:9e:9e:fd:98:ee:d7:b2:2b:e8:51:e0:
37:ec:9a:2d:5f:61:07:e8:f8:d4:85:9b:6b:ba:d1:28:79:e9:
d7:bd:ac:b6:37:29:72:b4:44:27:1c:b7:96:12:5a:4a:8b:5f:
71:62:a2:fc:11:76:f6:4a:e2:7c:c2:93:50:e6:95:2e:40:fe:
fd:40:1f:b7:e2:bb:d2:7e:cd:b9:24:e1:7e:dd:53:90:8d:42:
80:86:64:fc:0e:e2:27:2f:02:df:32:70:28:1d:15:65:e8:b8:
fb:bf:cc:92:45:54:96:15:09:ef:86:12:70:0e:fc:2a:a8:50:
24:31:53:31:db:21:10:47:56:d3:e6:60:7a:e5:c6:50:bf:00:
3a:d6:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:27 2026 by rpki-client