Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/PmSCD4wgzFyU2AqXpshqRaKIPuc.asa
File: PmSCD4wgzFyU2AqXpshqRaKIPuc.asa (raw, json)
Hash identifier: 25QFICONcsuYG4Rf1aqXoo/9TTjRkFuSaxU7izwH5pM=
Subject key identifier: 3E:64:82:0F:8C:20:CC:5C:94:D8:0A:97:A6:C8:6A:45:A2:88:3E:E7
Certificate issuer: /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial: 019F19011411F0FAB3B92FD0235A218DBFE2
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/PmSCD4wgzFyU2AqXpshqRaKIPuc.asa
Signing time: Tue 30 Jun 2026 14:48:48 +0000
ASPA not before: Tue 30 Jun 2026 14:48:48 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 206924
Providers: AS: 1299
AS: 3170
AS: 5511
AS: 6939
AS: 44684
AS: 44854
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:14:11:f0:fa:b3:b9:2f:d0:23:5a:21:8d:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
Validity
Not Before: Jun 30 14:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e64820f8c20cc5c94d80a97a6c86a45a2883ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:8d:04:ca:f2:6b:35:38:fa:b8:34:b2:54:
6e:95:e4:8b:0f:08:95:e2:4f:62:b3:42:9e:a5:61:
09:42:e6:9d:74:31:1e:30:69:1e:07:9f:4c:e5:2f:
53:8f:99:f3:a8:99:47:40:fd:57:5a:7c:0e:51:b1:
a4:d7:a9:fe:5d:91:4e:ab:8a:66:4a:3d:61:f8:7b:
bc:d4:79:62:17:25:3d:ab:8a:65:71:82:3b:2a:2f:
4d:2d:09:5b:79:64:b5:83:a5:f7:f8:3b:24:7f:97:
f4:b1:cb:3d:3f:12:ce:47:6b:81:7b:1d:b5:49:91:
d5:2c:40:d1:f8:11:14:4c:9a:57:a0:2e:a7:b0:4b:
df:7a:6b:ff:34:75:81:d4:f0:ee:2c:93:ef:ff:bb:
89:06:4a:08:53:b8:b2:07:50:61:1d:13:6f:a7:64:
eb:94:1f:76:98:62:94:c8:94:d1:bd:12:02:b4:e6:
06:1f:7c:bb:42:79:3d:39:05:09:15:12:8f:24:d8:
a4:2f:cd:5e:f3:b3:ef:98:86:1b:69:c7:e6:69:fb:
29:3a:df:a2:a5:26:2e:49:ec:8c:0f:86:81:6f:4d:
49:ca:24:52:57:63:59:93:c4:31:0f:3a:bd:4b:47:
77:64:f2:1d:16:1c:3e:d4:68:3a:c0:a1:ff:d6:e3:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:64:82:0F:8C:20:CC:5C:94:D8:0A:97:A6:C8:6A:45:A2:88:3E:E7
X509v3 Authority Key Identifier:
keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/PmSCD4wgzFyU2AqXpshqRaKIPuc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206924
Signature Algorithm: sha256WithRSAEncryption
32:f3:64:c2:66:7b:f7:af:7a:fc:72:90:46:4b:9d:3c:ec:39:
ac:18:24:b1:96:ef:83:c6:3f:42:06:b7:9c:ed:fa:de:6a:fb:
3e:95:d2:b1:1a:f3:db:f0:7a:ef:db:75:be:b4:f2:ea:18:6f:
d2:9a:d3:62:e2:5c:d3:7e:92:02:1a:f8:3e:3d:32:ed:82:47:
b9:b1:d8:20:4e:1a:ac:cc:4f:59:20:1a:56:8c:e8:8a:1a:79:
6c:c7:f5:24:4a:93:3b:dd:1a:95:fe:bf:0a:38:30:c5:d0:17:
68:c1:87:c0:2a:27:a5:1f:e9:0b:c7:6f:20:cc:9f:dd:4e:79:
0f:28:c1:94:d1:b9:47:58:30:9b:4a:73:4f:04:26:da:64:7b:
f7:46:5a:e5:3f:6a:48:6e:0a:4c:99:b4:c5:1f:d4:ce:7b:c1:
49:a4:0c:5b:f3:a9:0b:75:2e:28:44:c5:12:49:5c:2a:fb:e4:
74:b5:14:ec:c6:0f:d6:d9:63:cb:4b:12:8f:c9:89:cd:8d:e8:
35:bd:46:3b:fa:59:69:6c:0e:b4:42:47:47:f8:43:e9:a3:64:
3e:76:7a:cd:50:3b:46:16:aa:d0:94:5c:31:46:55:95:96:cf:
47:21:b1:aa:87:65:cc:7c:35:69:eb:94:a8:77:fe:e6:bb:ad:
8c:31:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:04 2026 by rpki-client