Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/9ZDcnSAXCCTAiLQvuYv_ovjLcLM.asa
File: 9ZDcnSAXCCTAiLQvuYv_ovjLcLM.asa (raw, json)
Hash identifier: knmR/uu+sixMgJUWyUdxpL/g/5MBZ8SeapJSPjVWp10=
Subject key identifier: F5:90:DC:9D:20:17:08:24:C0:88:B4:2F:B9:8B:FF:A2:F8:CB:70:B3
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019CF75EC81AE811BAEABF843348CE527C2C
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/9ZDcnSAXCCTAiLQvuYv_ovjLcLM.asa
Signing time: Mon 16 Mar 2026 15:58:29 +0000
ASPA not before: Mon 16 Mar 2026 15:58:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211358
Providers: AS: 6204
AS: 6517
AS: 6939
AS: 8772
AS: 11967
AS: 16276
AS: 29632
AS: 33387
AS: 34927
AS: 41051
AS: 52025
AS: 152565
AS: 207841
AS: 209533
AS: 209735
AS: 211288
AS: 212895
AS: 215638
AS: 215828
AS: 216324
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:5e:c8:1a:e8:11:ba:ea:bf:84:33:48:ce:52:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Mar 16 15:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f590dc9d20170824c088b42fb98bffa2f8cb70b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:63:0e:08:e7:7f:91:f8:4f:70:74:7b:c6:
6f:a9:7f:7b:3f:89:15:22:3c:12:ee:93:c9:02:df:
8c:53:68:35:f2:81:61:f8:b6:24:49:a1:7b:ff:92:
02:40:d5:54:c7:e7:d8:f2:75:00:01:8e:6b:dd:1e:
31:98:71:8c:2a:2b:12:5f:8c:eb:dd:27:4d:0b:9f:
df:fb:ba:e2:f4:29:1d:0d:6b:e3:c4:34:a9:30:12:
52:5c:cb:df:02:34:6f:33:73:da:a0:cf:65:01:40:
cd:08:b6:fe:b8:1c:46:ab:e4:28:33:5f:d0:eb:9d:
2d:21:96:cc:d6:e8:56:f0:c7:9e:d2:9c:c9:17:66:
da:03:3d:22:7b:c9:0a:a6:69:81:7e:82:59:c5:53:
69:d8:8f:c9:87:ae:1b:5f:d7:8b:cf:95:6a:4f:82:
37:39:b9:ad:92:e0:be:c9:ee:e5:3b:d3:6c:c6:35:
8b:69:37:8d:1f:48:bd:c9:57:d6:06:be:85:a4:67:
64:b4:2a:d1:d7:8e:f6:c5:df:b2:7d:bf:0e:0b:76:
fd:a2:3f:16:aa:29:e2:76:7e:dd:8c:5a:1a:78:f7:
00:43:b4:b5:fc:04:c9:9f:84:68:8a:30:33:26:61:
8b:5d:7d:95:62:bf:ec:57:bb:a6:73:b9:dc:45:94:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:90:DC:9D:20:17:08:24:C0:88:B4:2F:B9:8B:FF:A2:F8:CB:70:B3
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/9ZDcnSAXCCTAiLQvuYv_ovjLcLM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211358
Signature Algorithm: sha256WithRSAEncryption
3a:8c:f7:64:bc:ce:6a:8b:c5:0b:4e:9f:a7:c0:27:79:9d:f6:
f2:6c:ad:c0:cf:b2:56:eb:11:40:b8:0b:80:2c:c2:1b:c0:c4:
f6:f1:47:b6:3c:aa:86:6c:c8:0c:73:04:2a:35:3d:b3:e7:6e:
21:ea:56:48:14:34:7f:46:46:7b:24:4a:f2:7f:e4:12:27:1e:
28:25:da:4a:ca:19:24:7f:ac:23:4e:54:a1:12:8f:0e:00:c5:
4b:fd:20:c2:5a:c3:71:d2:b0:c6:04:27:61:40:41:64:94:10:
13:57:1a:95:94:0d:f1:71:36:69:4e:fd:c9:b9:0a:b0:e0:34:
cc:d4:ff:51:e8:46:bc:15:59:de:e6:16:17:6b:99:3f:0c:23:
64:24:e9:3a:2d:13:34:fa:4d:8c:51:a0:04:f1:d7:ef:0d:82:
65:93:42:72:8d:86:ef:b2:3d:25:ff:67:2c:84:55:03:34:ff:
6d:c2:dd:fa:23:7d:2a:f2:41:04:f7:6f:a0:de:e9:d3:41:6c:
68:a6:be:0a:03:3e:c8:05:c0:be:14:ac:16:b4:09:1c:26:a9:
b3:69:b6:67:37:93:73:41:3d:9e:7f:c5:61:fb:68:f2:e6:79:
18:85:a5:b6:9e:a0:58:a3:80:c4:f7:cd:fc:44:a4:99:79:55:
97:f9:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:12 2026 by rpki-client