Autonomous System Provider Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
File: AS215685.asa (raw, json)
Hash identifier: 380XpPjxyEWuiuf9OGDiT0uEDBxAf696G0ZUMuh1yvU=
Subject key identifier: 96:3E:04:52:22:3C:10:30:AC:73:B8:C1:00:FD:EE:64:C3:98:00:02
Certificate issuer: /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial: 15C8B27538873F0C45AC0D8689C46E417886E444
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
Signing time: Tue 03 Nov 2026 16:54:56 +0000
ASPA not before: Tue 03 Nov 2026 16:49:56 +0000
ASPA not after: Tue 02 Nov 2027 16:54:56 +0000
Customer ASID: 215685
Providers: AS: 1299
AS: 5405
AS: 6204
AS: 6939
AS: 11967
AS: 29670
AS: 34927
AS: 41051
AS: 50917
AS: 52025
AS: 62255
AS: 200132
AS: 201279
AS: 207252
AS: 215114
AS: 215828
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c8:b2:75:38:87:3f:0c:45:ac:0d:86:89:c4:6e:41:78:86:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Validity
Not Before: Nov 3 16:49:56 2026 GMT
Not After : Nov 2 16:54:56 2027 GMT
Subject: CN=963E0452223C1030AC73B8C100FDEE64C3980002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:11:03:89:6f:f9:1e:b0:26:1a:8e:96:8a:
b6:7a:90:dd:db:4f:fd:97:3d:96:5e:68:9b:09:7f:
cb:a7:7f:be:1a:03:a9:58:60:4a:4f:24:bc:c6:57:
d4:1b:89:52:5f:d7:a9:2b:a7:ad:ab:98:08:c8:36:
d1:db:90:aa:6f:d7:54:f3:db:9e:f6:2a:a7:30:90:
1e:21:74:7d:d8:91:49:1a:a9:bd:5c:7a:8c:e5:9d:
52:21:5a:ae:22:92:fb:4d:f4:18:60:c3:9f:6f:29:
4b:e7:1c:95:7f:5e:ac:a7:51:79:c7:ac:6f:95:3f:
eb:c4:ea:93:2d:17:94:47:69:af:1f:e6:2e:85:b9:
04:1e:3e:61:a9:d5:04:b2:06:24:6d:c9:6d:67:0a:
e5:b9:d8:88:8f:9a:0b:22:25:b5:ca:a8:61:82:25:
ce:d4:98:13:c1:a2:30:ee:17:79:f4:8e:cb:66:e8:
d4:55:7e:2b:a3:3a:19:7f:92:4a:d8:a4:9a:e5:c1:
60:3f:93:0e:10:1e:f4:e3:eb:6c:f6:04:e7:c8:3e:
17:a4:c5:51:3b:fa:ff:ae:a0:6c:b1:6e:fa:8c:cb:
b8:8b:50:68:ea:00:18:0d:22:1a:7a:63:8d:60:56:
aa:69:27:86:31:aa:44:f1:4c:b5:44:fc:3a:90:15:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:04:52:22:3C:10:30:AC:73:B8:C1:00:FD:EE:64:C3:98:00:02
X509v3 Authority Key Identifier:
keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/AS215685.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215685
Signature Algorithm: sha256WithRSAEncryption
44:d3:ec:82:bf:8e:52:58:1c:43:1c:83:a8:dc:05:dd:7c:05:
ad:1c:75:36:d3:ef:00:16:57:ef:e0:46:2e:12:89:62:59:0e:
1f:87:f9:52:41:67:b9:50:c6:ca:9b:80:b9:81:74:eb:60:45:
19:a2:e4:03:7f:b3:aa:5a:68:d4:57:e8:d9:7e:be:85:df:db:
56:c2:9e:5d:25:50:0a:19:8f:33:66:61:52:12:57:bf:cf:2e:
91:ce:4f:5f:af:66:67:a3:5a:c2:ba:7c:9c:6b:56:bd:15:ed:
af:3a:46:3b:bd:6f:3e:63:04:85:6b:84:39:2e:bf:cd:4c:c8:
da:b8:99:52:c3:a8:3a:36:b5:da:89:45:7b:d2:e0:7b:4d:2d:
32:a1:58:31:94:4d:e0:c9:7e:86:5c:e1:76:50:33:82:07:97:
a4:9e:f8:68:71:5b:81:a1:bf:9e:67:94:c5:21:ec:4f:d4:60:
bd:83:91:66:cc:2e:a2:99:73:08:f2:95:6d:9d:2f:81:73:57:
4c:74:14:67:2f:70:2e:ef:10:00:17:e7:83:15:b2:f0:be:a5:
a6:e3:5f:23:64:a9:8d:ea:72:0d:e8:62:58:4c:6c:05:93:de:
dd:d4:bd:b8:d0:33:1d:7c:ed:32:f3:01:50:52:8b:12:94:c7:
55:a7:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:24:24 2026 by rpki-client