Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.vexshield.eu/repo/vexshield/0/AS201028.asa
File: AS201028.asa (raw, json)
Hash identifier: 5il6LHybFB4zbvkSetqIq+D52CKqN7sCM9gE+yDmkvE=
Subject key identifier: 81:2F:38:0F:7A:C8:59:F8:61:D7:EC:32:1C:A2:15:84:B5:F4:87:5F
Certificate issuer: /CN=25dd0d9763fd6b0d07f6bcc40e27d373b9a4b828
Certificate serial: 369DDB5EC4250CF34158150A6C49AA5B5B688AF5
Authority key identifier: 25:DD:0D:97:63:FD:6B:0D:07:F6:BC:C4:0E:27:D3:73:B9:A4:B8:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd0Nl2P9aw0H9rzEDifTc7mkuCg.cer
Subject info access: rsync://rpki.vexshield.eu/repo/vexshield/0/AS201028.asa
Signing time: Fri 30 Oct 2026 18:33:08 +0000
ASPA not before: Fri 30 Oct 2026 18:28:08 +0000
ASPA not after: Fri 29 Oct 2027 18:33:08 +0000
Customer ASID: 201028
Providers: AS: 41051
AS: 197324
AS: 212895
AS: 214762
Validation: OK
Signature path: rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.crl
rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd0Nl2P9aw0H9rzEDifTc7mkuCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9d:db:5e:c4:25:0c:f3:41:58:15:0a:6c:49:aa:5b:5b:68:8a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd0d9763fd6b0d07f6bcc40e27d373b9a4b828
Validity
Not Before: Oct 30 18:28:08 2026 GMT
Not After : Oct 29 18:33:08 2027 GMT
Subject: CN=812F380F7AC859F861D7EC321CA21584B5F4875F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:ed:d8:c0:5d:eb:23:76:56:34:a7:fc:ba:
1f:b6:de:26:ee:12:28:69:13:27:55:09:7e:bf:35:
fb:61:1f:b3:f1:0c:ee:cb:da:93:a2:92:31:2e:ff:
40:b5:3b:00:7f:71:00:16:e2:fd:34:de:21:b4:ad:
7c:1d:41:38:2e:a1:a2:da:1b:d6:71:10:71:35:14:
1f:ea:9e:ac:54:96:24:0c:bf:c2:b6:4d:22:0e:98:
ff:26:1d:bc:d5:2d:48:81:ab:48:66:95:4d:d9:05:
dd:95:95:01:ab:58:6e:d7:22:eb:41:52:dc:8d:9b:
3a:a4:e8:ec:f9:2c:3b:e7:34:31:e1:ab:e6:b1:02:
68:f4:a9:3b:fe:45:6f:af:ac:d8:08:3e:63:17:58:
a3:e5:fc:49:e5:19:ef:c6:c7:95:71:35:d2:af:70:
d0:e6:4c:f1:5a:3b:73:30:f1:21:d7:a3:d2:4d:bc:
57:ad:55:78:a5:3c:aa:fa:63:7a:5d:c4:7f:9b:3f:
51:8c:dd:86:a1:4b:8f:08:8b:9f:c8:6c:18:2b:57:
5d:d8:8e:3e:ad:8d:2b:c0:0c:bd:43:22:5b:47:54:
77:43:4a:31:0d:71:8f:14:2b:e0:ed:04:2b:4e:3f:
d8:61:78:fb:33:c5:e0:56:d2:66:0c:01:95:76:50:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:38:0F:7A:C8:59:F8:61:D7:EC:32:1C:A2:15:84:B5:F4:87:5F
X509v3 Authority Key Identifier:
keyid:25:DD:0D:97:63:FD:6B:0D:07:F6:BC:C4:0E:27:D3:73:B9:A4:B8:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd0Nl2P9aw0H9rzEDifTc7mkuCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.vexshield.eu/repo/vexshield/0/AS201028.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201028
Signature Algorithm: sha256WithRSAEncryption
79:95:66:a5:d7:31:b8:b7:2c:67:bb:a8:51:1f:7c:92:b1:a2:
12:ba:ce:cf:98:74:ae:f4:b4:91:66:3c:92:e9:7e:49:f8:de:
3b:a1:3b:a4:b6:e0:d4:dc:71:ef:96:d4:92:c9:66:ae:4d:8c:
31:78:77:bf:75:eb:96:75:27:79:1c:35:cc:e4:8c:86:76:cc:
05:37:99:44:1c:57:2b:c8:2a:a2:9b:f3:e7:79:cb:1e:77:02:
00:55:dd:26:e7:e1:c9:2e:fd:6e:ae:c6:d3:35:08:b3:a4:93:
7d:c5:5b:c6:33:ef:26:47:6e:59:f2:2a:3b:09:ca:17:95:bc:
a0:a6:8e:a6:0c:b6:cb:2a:e3:a1:bc:a1:e5:19:f9:7c:11:02:
88:0b:3b:e4:78:be:7f:da:64:59:d6:76:21:02:ff:b2:0a:df:
83:49:ab:11:17:c8:06:00:ec:9c:0a:9c:e7:fd:66:9d:09:3a:
cf:de:32:75:7c:fd:b5:d1:e9:c2:cd:b5:81:8b:13:7b:b2:89:
63:d0:7f:61:72:60:c9:5f:be:4a:ac:55:01:25:62:8f:51:62:
36:4c:80:39:af:40:f9:4d:0c:46:f7:f6:fc:0f:25:8b:21:19:
3c:0a:48:1f:f4:e1:25:e4:fb:e9:5a:6c:d6:72:1e:a9:de:0c:
38:22:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:30:34 2026 by rpki-client