Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/QBW11jyT74R8oUHhAinuj7gPXSk.asa
File: QBW11jyT74R8oUHhAinuj7gPXSk.asa (raw, json)
Hash identifier: yZJV0811rYsc05YANwSpX99f0QsW0swdHpcFUdFqr0Y=
Subject key identifier: 40:15:B5:D6:3C:93:EF:84:7C:A1:41:E1:02:29:EE:8F:B8:0F:5D:29
Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial: 019D1F9172A6F6619C0C62CCF75A7E6CF2BE
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/QBW11jyT74R8oUHhAinuj7gPXSk.asa
Signing time: Tue 24 Mar 2026 11:18:38 +0000
ASPA not before: Tue 24 Mar 2026 11:18:38 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209369
Providers: AS: 21430
AS: 39392
AS: 60606
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:91:72:a6:f6:61:9c:0c:62:cc:f7:5a:7e:6c:f2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
Validity
Not Before: Mar 24 11:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4015b5d63c93ef847ca141e10229ee8fb80f5d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:2b:58:6e:a4:57:ad:52:16:e5:76:1b:4b:
f5:9d:cd:87:9e:be:b2:a1:de:7b:ae:01:39:33:b7:
3a:e1:eb:8e:c5:e0:38:b5:72:0d:0f:18:91:f4:a6:
9a:4f:46:06:66:58:22:32:bf:a4:01:ef:f2:c8:19:
4c:56:e1:5a:b6:c5:81:45:c0:fb:39:6a:b0:01:ef:
e1:40:65:d8:ec:52:34:86:93:27:89:98:8f:f2:09:
d6:ff:a6:6a:ed:05:3f:74:90:cc:88:a6:3c:8d:52:
74:c5:06:a8:b2:c2:27:18:56:e4:f6:c6:a5:09:0a:
99:32:76:2c:07:06:77:e9:10:b8:63:e0:60:bb:88:
14:10:d2:e8:2e:bc:9e:77:83:3e:20:24:33:a9:27:
ea:30:e1:29:95:a8:df:d8:f9:d0:92:94:94:21:e2:
15:a5:15:0f:ae:87:29:8d:e9:c0:0e:b7:67:22:fb:
f3:87:49:f9:d1:58:25:b6:be:18:73:eb:21:d7:22:
89:0b:5e:9e:5b:01:21:b8:67:31:3a:6c:32:f8:f3:
e4:00:e6:73:cc:b0:ac:d2:83:97:28:f7:f9:93:bd:
87:a4:32:c0:e8:5c:92:cd:2e:77:e8:c4:78:88:b5:
42:4f:b9:4f:5f:3e:88:a7:de:2b:2b:f4:32:dd:41:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:15:B5:D6:3C:93:EF:84:7C:A1:41:E1:02:29:EE:8F:B8:0F:5D:29
X509v3 Authority Key Identifier:
keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/QBW11jyT74R8oUHhAinuj7gPXSk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209369
Signature Algorithm: sha256WithRSAEncryption
23:b9:23:03:4f:f8:de:16:be:76:15:10:6a:58:eb:8d:9f:28:
ce:3c:7e:50:03:61:a1:4c:ed:9d:bb:5e:b8:21:65:40:48:e3:
c1:c0:55:91:7b:ef:1f:f6:3f:1f:70:c6:b5:ac:de:ae:c7:00:
0a:a4:c7:6a:65:40:25:ef:38:97:7a:94:cb:a7:79:09:18:5f:
37:5a:a7:2d:a0:2c:8d:8e:67:16:e6:f4:1f:e7:cd:1b:e8:4b:
af:4b:d8:ce:24:d9:97:b6:af:49:59:85:0a:8f:97:9d:45:19:
83:69:7a:16:80:65:a0:04:3a:a1:9d:23:95:de:f8:13:1c:5d:
fb:c6:c2:7c:13:bd:6a:8b:54:f2:52:0e:33:5a:1d:4d:93:6f:
0a:fe:f3:5e:4a:47:fe:89:2c:ba:50:7a:66:14:e4:46:56:40:
fd:2e:9c:c5:20:1a:1d:28:bd:0b:d5:38:8e:1c:c3:aa:fc:a2:
7a:56:f5:48:ab:94:de:7f:12:30:da:2d:b9:b1:ab:64:1e:c3:
71:28:9e:98:c8:a0:3a:87:00:f8:d3:4c:90:a6:c1:b8:c4:aa:
9b:21:18:48:50:64:b2:28:40:ca:f9:73:d2:9e:01:66:fb:20:
66:e0:47:96:e1:de:a7:5b:d9:ea:d3:24:c4:b7:a0:58:af:35:
a6:12:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:41 2026 by rpki-client