Autonomous System Provider Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
File: AS214720.asa (raw, json)
Hash identifier: I1FjQMkoBYbhZHEuwncM4yWxPn+U0l8mdvoMVA4Gx7E=
Subject key identifier: 95:01:35:F4:29:86:B9:48:82:EF:43:BF:93:CF:3B:83:C6:0A:6B:AE
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 3B7720348A808C8C014B00458C1D6346E312E109
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
Signing time: Tue 28 Apr 2026 13:33:29 +0000
ASPA not before: Tue 28 Apr 2026 13:28:29 +0000
ASPA not after: Tue 27 Apr 2027 13:33:29 +0000
Customer ASID: 214720
Providers: AS: 40929
AS: 44324
AS: 53808
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:77:20:34:8a:80:8c:8c:01:4b:00:45:8c:1d:63:46:e3:12:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Apr 28 13:28:29 2026 GMT
Not After : Apr 27 13:33:29 2027 GMT
Subject: CN=950135F42986B94882EF43BF93CF3B83C60A6BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:12:c8:cd:7d:40:5b:63:00:d7:03:40:3d:
f5:60:49:94:68:78:a4:53:ee:6f:72:23:09:4d:cd:
b7:fe:b5:a2:6c:10:df:f8:70:7c:aa:61:ad:22:77:
05:e3:48:f0:d5:5f:78:7c:f6:af:fe:b7:10:af:e3:
d8:4f:80:76:bb:f7:0d:33:c3:6b:43:53:21:53:93:
42:a0:52:2b:19:5b:3c:1e:84:83:94:85:ef:75:4b:
dc:72:31:16:c5:66:99:d6:29:c3:27:22:23:32:9f:
0f:6e:97:56:6a:99:8b:5d:3f:7a:40:24:93:f1:9f:
6f:41:60:63:2a:45:c5:00:b6:29:b4:44:4d:c3:72:
d9:fd:2d:b4:8a:ba:a4:5b:30:7f:9f:f1:82:25:fc:
44:8a:3f:18:f9:0b:9d:30:ca:29:88:81:ac:0c:ba:
5b:9e:57:bf:1d:64:07:45:a0:c0:8f:cc:68:2f:d3:
00:40:94:45:f3:70:d0:b7:fa:3c:1b:db:6d:73:e2:
b1:95:0a:5f:f7:84:58:ac:2a:4c:df:92:aa:3e:ad:
70:24:e5:f4:a5:18:f6:a0:56:44:97:01:17:f8:e8:
eb:1a:90:60:2a:14:c5:e8:1c:0d:ff:76:40:e1:5d:
18:e8:b6:07:b3:e5:65:74:f7:ef:c1:d5:8e:5e:5e:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:35:F4:29:86:B9:48:82:EF:43:BF:93:CF:3B:83:C6:0A:6B:AE
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS214720.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214720
Signature Algorithm: sha256WithRSAEncryption
36:8f:af:40:20:58:21:d2:dd:e9:2d:f4:15:98:f6:e9:b9:b1:
19:8e:49:a7:15:4b:ec:1a:6f:2f:ee:61:50:6d:c9:02:39:00:
0c:da:d1:7e:e2:c6:87:71:5a:98:3e:3e:98:37:c9:14:88:4e:
14:3a:0f:a3:aa:cc:ae:3a:b4:9e:a3:80:cd:3a:6e:5a:7b:67:
39:c2:5d:90:30:bf:cd:34:17:28:f3:cc:59:7b:7a:02:ed:24:
89:8d:86:97:db:ee:2b:42:be:78:85:f8:9c:86:49:98:fc:b4:
cb:37:74:fc:fc:b9:21:eb:96:56:1e:d3:f7:8c:bd:50:f5:56:
c6:be:20:76:74:89:ab:ff:29:c8:67:b2:b8:f7:d2:4e:d2:e4:
b2:c6:23:59:1c:d9:e2:e6:bc:42:34:a8:11:81:a8:af:d8:3d:
86:b9:db:e0:4c:6d:63:bb:9c:36:87:88:72:76:8a:d5:b4:08:
75:d4:b0:ae:45:4d:00:19:ab:94:c7:08:fd:e1:fc:9c:dc:82:
b4:20:08:5e:30:44:5e:ce:1b:2e:ec:d4:d5:ef:8b:07:68:9d:
08:7f:f8:e2:9d:60:0a:82:c4:29:f6:da:f9:6e:90:25:a3:62:
1d:bc:a2:0f:4b:10:c5:60:80:d9:c2:69:7a:3e:68:5f:6c:ab:
d5:4d:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:30 2026 by rpki-client