Autonomous System Provider Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/AS213605.asa
File: AS213605.asa (raw, json)
Hash identifier: ZprMJW46KmtS/YBi4KkFGWXwSYtf+SNNUlvrOWHdeqM=
Subject key identifier: 1D:B7:E7:3C:86:B3:95:87:B8:E2:9B:2F:C0:F2:89:A8:EA:AB:C7:AF
Certificate issuer: /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial: 705493AC5B42C3B5329310CD4F1E8821663144F1
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/AS213605.asa
Signing time: Wed 13 Aug 2025 12:36:34 +0000
ASPA not before: Wed 13 Aug 2025 12:31:34 +0000
ASPA not after: Wed 12 Aug 2026 12:36:34 +0000
Customer ASID: 213605
Providers: AS: 3204
AS: 6939
AS: 7720
AS: 17433
AS: 20473
AS: 34927
AS: 44324
AS: 51087
AS: 53667
AS: 199310
AS: 209533
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:54:93:ac:5b:42:c3:b5:32:93:10:cd:4f:1e:88:21:66:31:44:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Validity
Not Before: Aug 13 12:31:34 2025 GMT
Not After : Aug 12 12:36:34 2026 GMT
Subject: CN=1DB7E73C86B39587B8E29B2FC0F289A8EAABC7AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:24:59:fc:9c:53:2d:c6:12:5d:ad:06:79:
94:e6:6d:ba:92:2a:6a:33:8f:15:72:fb:1a:75:f7:
bd:47:4f:0f:74:fd:9b:0b:a7:83:c8:4f:42:a1:a1:
41:2d:26:21:6c:02:08:e5:a6:73:0a:9e:c8:ba:cb:
49:c0:56:22:d2:fc:14:f8:4a:9b:58:db:db:e9:0a:
81:b1:15:58:ac:0b:a3:6e:ea:a3:e9:bc:62:e0:5a:
e8:54:03:73:6e:55:ff:de:be:4b:70:c7:91:6d:40:
27:34:7a:0e:49:7e:0c:3b:d8:40:2b:ad:34:ef:b4:
d9:45:ae:c4:00:d9:de:92:f1:b5:59:2d:ff:ce:2d:
fe:0b:79:78:5f:93:3a:ca:11:92:74:26:26:d1:df:
bf:9d:a0:22:2c:0f:b1:8a:27:c9:e4:59:43:74:ae:
98:33:e4:e4:07:0d:78:5f:95:b0:17:ab:e1:5f:a3:
42:8e:29:3f:47:7e:8b:9b:e3:59:14:c4:c7:df:47:
8f:e5:34:ce:e6:6e:22:83:b6:4b:8e:b1:15:a4:d0:
17:c1:f7:41:aa:9c:8e:ff:7c:3c:cc:43:65:a7:05:
c0:d1:d9:fa:d5:b2:4a:6f:6b:7f:c7:c1:3a:37:46:
ff:43:9e:c1:27:ef:b0:63:d7:f4:e9:04:9e:9d:29:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B7:E7:3C:86:B3:95:87:B8:E2:9B:2F:C0:F2:89:A8:EA:AB:C7:AF
X509v3 Authority Key Identifier:
keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/AS213605.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213605
Signature Algorithm: sha256WithRSAEncryption
9c:cb:c1:3a:88:c0:f7:72:93:52:f1:c2:22:03:b4:9e:9d:3e:
f1:af:47:a2:07:3e:71:d6:78:93:1c:7f:6f:51:9a:70:71:70:
5a:01:3f:30:2a:db:53:d3:26:34:ba:f8:0e:15:5a:b1:9c:ef:
30:f0:a5:b6:13:dc:fb:bf:45:75:cd:87:e0:50:b1:56:e7:b5:
a4:b5:71:a7:32:2e:15:82:5e:82:b4:da:62:fc:fa:86:6f:41:
f9:54:b0:bd:7a:71:a6:63:2f:f5:5c:d0:55:e1:a9:a7:e8:ca:
a8:60:87:3a:4d:82:13:ac:c9:50:e6:71:b0:e7:cc:de:e6:9b:
aa:02:f1:19:da:18:2a:52:80:a8:34:e7:6e:7d:a4:3b:c5:bc:
9a:04:7c:61:d8:01:9b:80:4d:3c:db:b9:6b:7e:26:90:1a:91:
47:d9:b3:b0:54:69:91:cb:30:c5:ae:e4:24:f8:88:f9:9d:f7:
a2:e8:8f:4d:0d:f5:1b:b3:19:99:45:ed:8e:81:1c:45:94:25:
7b:e7:97:e6:02:46:06:79:ae:2c:6c:d9:2e:5e:69:dc:72:63:
a1:32:bc:8b:7c:6e:32:ba:57:fa:f2:4c:48:cc:c7:dc:59:c1:
ef:b6:47:ca:ce:7b:f2:cc:15:bc:25:fb:3a:18:77:40:0d:d0:
8c:df:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:49 2025 by rpki-client