Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/RxW3J-colFOkVksHm4xCxrnoO38.asa
File: RxW3J-colFOkVksHm4xCxrnoO38.asa (raw, json)
Hash identifier: 5kavPOBpW6XisOPfx4sQ9sZymfx7dERD5SqFBoW+fIA=
Subject key identifier: 47:15:B7:27:E7:28:94:53:A4:56:4B:07:9B:8C:42:C6:B9:E8:3B:7F
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 019D1501C0E97F0BF9161A5410DF18B0E27B
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/RxW3J-colFOkVksHm4xCxrnoO38.asa
Signing time: Sun 22 Mar 2026 10:05:29 +0000
ASPA not before: Sun 22 Mar 2026 10:05:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213449
Providers: AS: 1299
AS: 6204
AS: 6939
AS: 11967
AS: 34927
AS: 47536
AS: 49127
AS: 49600
AS: 58087
AS: 142064
AS: 200132
AS: 203446
AS: 211588
AS: 213753
AS: 214809
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:01:c0:e9:7f:0b:f9:16:1a:54:10:df:18:b0:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Mar 22 10:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4715b727e7289453a4564b079b8c42c6b9e83b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:e5:29:e5:d9:af:f5:64:f0:c4:74:5f:88:
38:5a:73:32:65:7d:32:93:9a:70:84:a7:da:c8:e7:
66:24:e8:ff:16:ab:ac:30:bb:7c:52:b9:cd:01:70:
39:52:aa:53:93:40:62:bd:96:1c:0a:8f:84:ca:f1:
75:51:ed:87:6a:14:b3:75:5d:dd:b7:63:46:a3:28:
1f:09:f6:57:c2:f1:9f:26:e4:e5:c6:28:5b:c7:1f:
cd:51:0c:f0:de:8b:31:1d:a5:50:ed:c2:25:6c:59:
a0:65:10:b2:76:62:1d:81:73:e7:76:72:bb:37:97:
3a:3f:42:83:7a:82:39:ac:5d:cb:59:09:9e:13:df:
93:75:bd:8e:8b:ec:4c:68:09:3d:f5:3c:3e:8b:d1:
6d:21:3f:90:8d:24:ae:f4:a3:c7:68:76:b6:c4:23:
be:4d:7a:3f:61:89:d4:c3:0d:59:74:1e:79:5c:c5:
2e:59:f8:41:02:64:a2:37:e7:a5:65:53:b9:1b:4e:
80:4e:d8:ea:d9:97:b6:68:f8:9f:b0:f1:9b:c8:46:
b5:50:a1:f3:2b:d6:3b:e3:e6:ae:88:6b:17:b4:98:
09:9a:44:29:c7:cc:4e:36:a7:2f:d0:de:35:13:eb:
01:11:4a:6b:2c:79:fc:32:f5:31:b5:ae:83:e7:1b:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:B7:27:E7:28:94:53:A4:56:4B:07:9B:8C:42:C6:B9:E8:3B:7F
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/RxW3J-colFOkVksHm4xCxrnoO38.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213449
Signature Algorithm: sha256WithRSAEncryption
4c:eb:9f:a3:69:d1:72:33:42:7f:f4:4c:89:41:08:02:36:8f:
de:b5:1c:04:04:01:79:94:79:99:36:83:d7:80:40:27:09:66:
2a:32:c3:bc:81:c9:17:9b:30:01:07:4a:bd:6d:34:cd:30:1d:
a5:a4:e5:29:58:47:34:84:9f:75:e5:56:29:f3:fa:32:ab:dd:
51:65:b9:3d:3b:54:5d:79:16:bf:ed:7a:c3:41:5d:a5:c6:7a:
26:7a:50:80:f8:c1:5e:e8:95:91:73:2d:f1:b5:92:06:9b:a1:
96:d7:27:5d:c8:ae:1d:de:a7:d6:3f:1f:37:08:b7:81:c2:21:
fa:91:ae:d7:20:d9:76:6b:74:56:9e:9e:c4:2a:a4:3c:05:51:
be:9b:6c:75:44:ff:5e:31:2a:41:9f:d7:2a:25:0d:e2:46:86:
eb:b8:30:7f:9e:b5:1f:88:56:82:d2:d7:85:91:5d:07:9a:2f:
8b:2b:7f:75:db:eb:23:ec:49:5d:2f:59:d0:02:0f:bd:9f:4c:
9a:05:a3:d0:88:c4:a0:b5:08:f0:08:69:23:eb:e8:6e:d2:d5:
21:81:f8:89:0e:dc:48:61:1f:ed:d9:30:38:36:07:87:83:70:
bd:38:c6:29:c1:ec:07:ab:4e:88:f6:54:04:f8:14:07:09:3b:
21:d9:a8:a5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0VAcDpfwv5FhpUEN8YsOJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh
NzVjZDQwHhcNMjYwMzIyMTAwNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzE1YjcyN2U3Mjg5NDUzYTQ1NjRiMDc5YjhjNDJjNmI5ZTgzYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTlKeXZr/Vk8MR0X4g4WnMyZX0y
k5pwhKfayOdmJOj/FqusMLt8UrnNAXA5UqpTk0BivZYcCo+EyvF1Ue2HahSzdV3d
t2NGoygfCfZXwvGfJuTlxihbxx/NUQzw3osxHaVQ7cIlbFmgZRCydmIdgXPndnK7
N5c6P0KDeoI5rF3LWQmeE9+Tdb2Oi+xMaAk99Tw+i9FtIT+QjSSu9KPHaHa2xCO+
TXo/YYnUww1ZdB55XMUuWfhBAmSiN+elZVO5G06ATtjq2Ze2aPifsPGbyEa1UKHz
K9Y74+auiGsXtJgJmkQpx8xONqcv0N41E+sBEUprLHn8MvUxta6D5xuHFQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEcVtyfnKJRTpFZLB5uMQsa56Dt/MB8GA1UdIwQY
MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt
ZTI5MWE1MmE5ZDE1LzEvUnhXM0otY29sRk9rVmtzSG00eEN4cm5vTzM4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1
LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNByTANBgkqhkiG
9w0BAQsFAAOCAQEATOufo2nRcjNCf/RMiUEIAjaP3rUcBAQBeZR5mTaD14BAJwlm
KjLDvIHJF5swAQdKvW00zTAdpaTlKVhHNISfdeVWKfP6MqvdUWW5PTtUXXkWv+16
w0FdpcZ6JnpQgPjBXuiVkXMt8bWSBpuhltcnXciuHd6n1j8fNwi3gcIh+pGu1yDZ
dmt0Vp6exCqkPAVRvptsdUT/XjEqQZ/XKiUN4kaG67gwf561H4hWgtLXhZFdB5ov
iyt/ddvrI+xJXS9Z0AIPvZ9MmgWj0IjEoLUI8AhpI+vobtLVIYH4iQ7cSGEf7dkw
ODYHh4NwvTjGKcHsB6tOiPZUBPgUBwk7IdmopQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:24 2026 by rpki-client