Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/1Lh2E2RwdrHAwExZdpwukpyyz_s.asa
File: 1Lh2E2RwdrHAwExZdpwukpyyz_s.asa (raw, json)
Hash identifier: i2CjRT7HKfMIyq159VAZliX+NQj6RztxlIZJjX4sLJ8=
Subject key identifier: D4:B8:76:13:64:70:76:B1:C0:C0:4C:59:76:9C:2E:92:9C:B2:CF:FB
Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Certificate serial: 01A1B73C5CD636674A3E98896DC496BFD9C6
Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/1Lh2E2RwdrHAwExZdpwukpyyz_s.asa
Signing time: Sat 07 Nov 2026 18:19:08 +0000
ASPA not before: Sat 07 Nov 2026 18:19:08 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201988
Providers: AS: 44486
AS: 49581
AS: 209693
AS: 215730
AS: 401152
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b7:3c:5c:d6:36:67:4a:3e:98:89:6d:c4:96:bf:d9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521
Validity
Not Before: Nov 7 18:19:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4b87613647076b1c0c04c59769c2e929cb2cffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:19:d7:6c:3d:6f:de:90:b7:33:af:a7:0e:
a3:84:47:f9:5c:50:e1:28:e3:64:00:91:29:1b:bc:
ab:90:98:20:a5:1d:35:7b:4b:0b:4b:7c:cd:54:51:
7d:01:b7:eb:7b:36:48:2c:1d:fd:1b:63:a1:92:0e:
88:eb:23:89:fd:d1:3f:55:2a:5a:5e:67:88:a9:74:
38:06:79:61:4b:4f:7c:58:bd:d5:f2:0a:21:30:4d:
28:59:6e:60:53:9d:d5:f0:60:8a:3d:3d:d7:12:58:
4c:30:08:75:29:4c:d9:84:46:af:bc:1a:58:cd:a6:
83:03:69:67:3b:9a:24:6a:d1:5a:27:34:b1:f0:a4:
cb:2d:12:69:1e:fb:7b:aa:dc:9a:9f:64:d4:37:aa:
be:5c:31:69:c8:e6:f7:ec:76:a2:da:8a:8d:48:a4:
4a:e8:fd:e3:35:6b:f1:e9:2c:e4:2d:50:f9:9d:55:
c1:ea:26:82:43:28:f3:56:bc:93:75:42:89:60:91:
c1:65:e7:23:e9:7b:4d:20:df:d9:2c:8b:3f:2a:4f:
1c:7f:83:e1:7e:15:6e:41:b4:e5:f4:4f:f1:17:ae:
7d:c6:1d:64:8b:c9:f5:54:7b:b2:5e:a7:87:3f:fe:
a8:27:f4:0a:0b:3f:b7:27:50:89:e3:22:a8:8c:4d:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B8:76:13:64:70:76:B1:C0:C0:4C:59:76:9C:2E:92:9C:B2:CF:FB
X509v3 Authority Key Identifier:
keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/1Lh2E2RwdrHAwExZdpwukpyyz_s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201988
Signature Algorithm: sha256WithRSAEncryption
74:85:2c:10:6c:81:8d:82:68:72:e4:5d:74:72:5d:d5:0f:3c:
e3:28:cb:7b:dc:1e:27:5e:94:a3:3a:a8:42:94:aa:d8:95:29:
67:be:c7:86:9d:89:80:b7:7b:46:e9:b5:3f:6c:4b:b6:cc:61:
9a:84:73:28:e4:1a:b6:7c:96:80:c1:37:8d:c7:10:8e:b4:da:
a7:36:46:0a:a6:f4:26:58:f2:f2:6d:9c:c0:4a:96:18:90:e9:
1f:12:40:92:3e:40:c5:26:28:cd:55:ca:4a:f6:07:94:2d:f5:
22:64:ad:8b:e8:0e:fb:c6:fd:3e:ba:9a:6c:b4:95:ce:82:51:
a8:8c:75:e2:d5:f8:a2:96:a4:1e:e5:1f:2f:21:cd:2d:26:3c:
42:56:6f:1c:7e:1f:8c:7f:b6:28:61:72:82:9b:4f:7f:f9:7c:
70:8c:b3:f6:e1:87:d8:ea:06:6d:08:01:10:d5:58:40:b9:2c:
e1:5c:4d:f1:9e:38:ad:eb:d6:61:43:00:ef:6b:76:52:10:3d:
09:47:60:54:10:62:d3:41:b9:86:3b:2a:7d:85:ae:04:ed:6f:
ed:39:5b:e1:52:62:2e:12:06:db:04:a1:3b:42:8e:9b:22:2a:
8c:df:ae:3a:b5:92:06:9f:c2:2d:0e:e6:3b:ae:de:f9:07:b0:
d8:69:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:27 2026 by rpki-client