Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/l29f1pwR90G9hmQYKMzdnPcuWRI.asa
File: l29f1pwR90G9hmQYKMzdnPcuWRI.asa (raw, json)
Hash identifier: RNcM3GXoyy5iuqkZ/xhWwSNrSjX/280dh47k+2z7ykw=
Subject key identifier: 97:6F:5F:D6:9C:11:F7:41:BD:86:64:18:28:CC:DD:9C:F7:2E:59:12
Certificate issuer: /CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Certificate serial: 019DF3BB84AEF887832F7E06FCB833CADD0E
Authority key identifier: 28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/l29f1pwR90G9hmQYKMzdnPcuWRI.asa
Signing time: Mon 04 May 2026 16:04:05 +0000
ASPA not before: Mon 04 May 2026 16:04:05 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201640
Providers: AS: 215437
AS: 401896
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:bb:84:ae:f8:87:83:2f:7e:06:fc:b8:33:ca:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Validity
Not Before: May 4 16:04:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976f5fd69c11f741bd86641828ccdd9cf72e5912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:42:fe:22:a2:b3:4d:c9:8b:6b:fb:f7:12:
eb:8b:32:87:33:96:c3:b0:e7:75:89:97:ee:81:79:
42:02:ab:c7:00:89:0b:61:25:cd:cb:28:4a:8d:9e:
40:ca:de:bb:d4:54:2d:26:08:57:47:e9:6e:00:76:
17:71:4a:c6:1f:2a:4a:77:35:c4:d8:9e:b4:7b:1c:
8e:77:ab:c0:92:bd:a0:ae:40:8b:15:ed:7d:f3:4e:
f4:b4:26:1d:2e:17:db:8a:6c:0f:4f:06:34:d7:44:
71:61:38:a5:97:a2:14:18:03:30:18:70:69:49:e7:
96:ba:59:ae:23:cb:98:09:0a:a2:ab:a6:53:32:06:
fe:fe:53:c8:31:a2:02:a4:b0:fa:c8:ac:9d:6d:5c:
63:47:12:1c:99:1b:16:47:c1:77:01:32:f9:41:79:
c2:8a:10:2c:b1:d1:b5:66:5d:7c:7b:d6:d5:04:1b:
52:97:0e:0d:b7:fe:6c:e2:fe:2b:a2:1e:b2:63:5b:
a4:4c:38:c0:72:88:89:35:66:e3:9d:a3:da:f0:fb:
f0:7e:cd:1e:5f:a3:df:50:0d:9c:d9:5f:cc:c8:e3:
d3:c8:d3:83:57:dd:ca:bd:c0:28:07:dc:c5:5d:c4:
be:c2:fa:6b:56:3a:f3:f2:fc:cc:60:31:a1:bc:be:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:5F:D6:9C:11:F7:41:BD:86:64:18:28:CC:DD:9C:F7:2E:59:12
X509v3 Authority Key Identifier:
keyid:28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/l29f1pwR90G9hmQYKMzdnPcuWRI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201640
Signature Algorithm: sha256WithRSAEncryption
a8:44:5e:7d:fa:31:f9:86:b5:bb:91:37:58:45:17:e6:c6:9a:
d9:4b:99:4c:7e:c4:f2:31:22:0a:46:90:bc:e9:f4:fa:32:50:
1b:a0:a3:61:60:5e:c2:c4:fe:fa:f2:62:af:27:d2:24:7c:e8:
49:5f:68:28:6a:36:fa:a9:5d:56:ff:97:c1:07:d1:5b:49:5c:
8c:08:74:f7:22:44:6c:2e:22:a7:d8:e9:f1:ef:f1:b0:a8:30:
3b:6e:02:c7:75:41:0f:0f:e1:ca:e7:6d:a7:74:1a:6e:06:95:
48:3e:7d:07:e2:26:31:a1:77:ae:82:8d:17:99:b6:b7:29:b8:
57:fd:fc:02:71:9e:98:18:3f:07:f5:35:48:ed:bb:db:d6:3b:
6d:6c:43:cf:fa:9f:a8:1b:18:6a:5f:74:0e:37:5a:14:07:81:
65:7c:f8:6c:4a:c3:99:16:36:f3:18:3a:bb:39:4f:a9:33:78:
2e:b3:a7:cb:c4:d6:b0:8a:8a:b8:c7:08:ab:99:43:f8:34:ff:
da:10:fa:b0:57:0c:69:e5:04:15:9b:65:d0:8f:14:44:d7:af:
d0:b3:71:fa:f4:71:9a:1d:12:7f:34:12:c8:61:83:b4:95:b3:
46:6e:de:e3:2f:31:b6:da:68:60:ce:a1:e3:5e:6c:2e:7f:90:
92:1e:8b:c4
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3zu4Su+IeDL34G/Lgzyt0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTVkZDI5Mzc0ZTJhY2NhYmU0ZDhhZWM0M2Y0ZGE3Y2Qx
MjA1ZjMwHhcNMjYwNTA0MTYwNDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzZmNWZkNjljMTFmNzQxYmQ4NjY0MTgyOGNjZGQ5Y2Y3MmU1OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRVC/iKis03Ji2v79xLrizKHM5bD
sOd1iZfugXlCAqvHAIkLYSXNyyhKjZ5Ayt671FQtJghXR+luAHYXcUrGHypKdzXE
2J60exyOd6vAkr2grkCLFe198070tCYdLhfbimwPTwY010RxYTill6IUGAMwGHBp
SeeWulmuI8uYCQqiq6ZTMgb+/lPIMaICpLD6yKydbVxjRxIcmRsWR8F3ATL5QXnC
ihAssdG1Zl18e9bVBBtSlw4Nt/5s4v4roh6yY1ukTDjAcoiJNWbjnaPa8Pvwfs0e
X6PfUA2c2V/MyOPTyNODV93KvcAoB9zFXcS+wvprVjrz8vzMYDGhvL7WVwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJdvX9acEfdBvYZkGCjM3Zz3LlkSMB8GA1UdIwQY
MBaAFCiV3Sk3TirMq+TYrsQ/TafNEgXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pYZEtUZE9Lc3lyNU5pdXhEOU5wODBTQmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMzg4M2YtYzA1Ny00MWZkLWExNWUt
YWM3ZWY5ZTg0YWI2LzEvbDI5ZjFwd1I5MEc5aG1RWUtNemRuUGN1V1JJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMzg4M2YtYzA1Ny00MWZkLWExNWUtYWM3ZWY5ZTg0YWI2
LzEvS0pYZEtUZE9Lc3lyNU5pdXhEOU5wODBTQmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMTqDANBgkqhkiG
9w0BAQsFAAOCAQEAqEReffox+Ya1u5E3WEUX5saa2UuZTH7E8jEiCkaQvOn0+jJQ
G6CjYWBewsT++vJiryfSJHzoSV9oKGo2+qldVv+XwQfRW0lcjAh09yJEbC4ip9jp
8e/xsKgwO24Cx3VBDw/hyudtp3QabgaVSD59B+ImMaF3roKNF5m2tym4V/38AnGe
mBg/B/U1SO2729Y7bWxDz/qfqBsYal90DjdaFAeBZXz4bErDmRY28xg6uzlPqTN4
LrOny8TWsIqKuMcIq5lD+DT/2hD6sFcMaeUEFZtl0I8URNev0LNx+vRxmh0SfzQS
yGGDtJWzRm7e4y8xttpoYM6h415sLn+Qkh6LxA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:24:36 2026 by rpki-client