Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/xA8I-Ycp1q2fcI8xsU1jW8I19hg.asa
File: xA8I-Ycp1q2fcI8xsU1jW8I19hg.asa (raw, json)
Hash identifier: EBMdaG4QdyhLtZe7WkvdRNMZTr2xN3HzQQNtxbfhCyM=
Subject key identifier: C4:0F:08:F9:87:29:D6:AD:9F:70:8F:31:B1:4D:63:5B:C2:35:F6:18
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 019F19010D4BB5FD1CFFE59F8464627E53D2
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/xA8I-Ycp1q2fcI8xsU1jW8I19hg.asa
Signing time: Tue 30 Jun 2026 14:48:47 +0000
ASPA not before: Tue 30 Jun 2026 14:48:47 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 41327
Providers: AS: 1299
AS: 2914
AS: 3257
AS: 3356
AS: 3491
AS: 6453
AS: 6762
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:0d:4b:b5:fd:1c:ff:e5:9f:84:64:62:7e:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jun 30 14:48:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c40f08f98729d6ad9f708f31b14d635bc235f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:95:0e:5b:dd:63:df:5e:49:43:99:cd:d8:
e5:cb:ea:de:b2:17:4a:44:85:ea:30:53:cd:c8:0a:
ac:35:0c:e7:df:75:ca:db:1a:6e:91:7d:f2:2d:08:
60:81:c6:b6:4b:ec:00:aa:e2:e8:4f:b6:95:f5:64:
6f:bc:0c:fe:a1:5b:ca:84:e8:1c:99:1c:96:9a:72:
cd:16:15:f3:f9:7f:29:26:ea:13:4f:aa:23:ab:25:
52:8a:7d:3e:20:ef:c8:f0:46:c6:0a:90:33:2e:33:
ed:fd:fd:b6:84:0b:fd:a8:ce:d0:37:79:0f:0d:38:
19:0c:72:56:cd:3b:68:46:65:18:61:76:f5:16:4c:
31:a3:9f:70:76:39:01:aa:86:06:41:f0:e9:e4:0d:
17:c7:15:89:d2:c5:79:da:3c:bf:6b:5b:99:97:04:
89:aa:b1:49:dc:db:09:79:6c:e5:5e:6d:88:0b:18:
e0:d4:b6:42:17:93:b9:aa:5a:21:5f:cd:04:17:af:
cc:7a:65:d2:74:09:4e:b2:bf:da:c2:2a:08:a0:94:
9e:08:03:7b:ab:56:48:5f:0b:b6:38:9b:07:bd:e3:
7e:c7:26:7c:17:c3:fb:48:52:43:bf:f1:46:fb:83:
09:72:2c:0e:5e:8a:5b:43:81:a5:a3:9e:00:77:7c:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:08:F9:87:29:D6:AD:9F:70:8F:31:B1:4D:63:5B:C2:35:F6:18
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/xA8I-Ycp1q2fcI8xsU1jW8I19hg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41327
Signature Algorithm: sha256WithRSAEncryption
cb:d6:ca:d3:c1:b5:a5:81:44:21:f6:f1:5c:90:88:82:df:2e:
42:86:3f:d4:ab:1c:74:2b:4f:cb:4f:94:e3:dc:41:46:e4:1b:
a2:d7:30:b5:e8:94:aa:ac:72:37:95:6e:95:d7:a2:ed:21:cb:
47:e8:92:b6:73:8f:c3:3c:63:82:98:2f:aa:54:ba:63:64:bd:
7e:7b:02:c3:a0:98:fe:9a:a1:7e:c8:97:b0:4e:6a:b2:ea:f1:
99:a2:4f:1b:7f:0d:ad:11:7a:cc:6b:d7:89:fd:00:4c:0e:42:
85:01:53:3d:06:01:67:2d:7a:31:cc:d7:6d:5d:92:94:ae:fa:
7d:76:de:47:98:a3:54:43:c3:a4:3e:50:fd:71:2f:42:c8:2a:
40:94:74:94:ae:4b:b0:ec:f9:6b:67:7f:bc:a1:f0:bc:01:ef:
01:5c:72:86:61:e6:6d:55:3b:fb:c8:e7:a1:3c:75:75:56:55:
f4:8c:69:90:3a:f2:a1:45:f2:a0:82:47:c1:ad:13:d1:35:98:
4a:f7:b6:1d:17:96:02:24:1a:b0:64:bc:17:91:aa:ba:54:6f:
3a:44:a8:44:b9:5a:61:b2:3b:6d:2e:99:b5:42:76:8c:85:72:
4e:c7:5c:d7:03:1f:6f:60:11:22:bb:db:39:73:08:a6:83:d4:
85:e6:f3:a5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAQ1Ltf0c/+WfhGRiflPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2
OTY4MWIwHhcNMjYwNjMwMTQ0ODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDBmMDhmOTg3MjlkNmFkOWY3MDhmMzFiMTRkNjM1YmMyMzVmNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJOVDlvdY99eSUOZzdjly+reshdK
RIXqMFPNyAqsNQzn33XK2xpukX3yLQhggca2S+wAquLoT7aV9WRvvAz+oVvKhOgc
mRyWmnLNFhXz+X8pJuoTT6ojqyVSin0+IO/I8EbGCpAzLjPt/f22hAv9qM7QN3kP
DTgZDHJWzTtoRmUYYXb1Fkwxo59wdjkBqoYGQfDp5A0XxxWJ0sV52jy/a1uZlwSJ
qrFJ3NsJeWzlXm2ICxjg1LZCF5O5qlohX80EF6/MemXSdAlOsr/awioIoJSeCAN7
q1ZIXwu2OJsHveN+xyZ8F8P7SFJDv/FG+4MJciwOXopbQ4Glo54Ad3ww8wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMQPCPmHKdatn3CPMbFNY1vCNfYYMB8GA1UdIwQY
MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct
NjNiNTJhYTdmOGRhLzEveEE4SS1ZY3AxcTJmY0k4eHNVMWpXOEkxOWhnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh
LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwChbzANBgkqhkiG
9w0BAQsFAAOCAQEAy9bK08G1pYFEIfbxXJCIgt8uQoY/1KscdCtPy0+U49xBRuQb
otcwteiUqqxyN5Vuldei7SHLR+iStnOPwzxjgpgvqlS6Y2S9fnsCw6CY/pqhfsiX
sE5qsurxmaJPG38NrRF6zGvXif0ATA5ChQFTPQYBZy16MczXbV2SlK76fXbeR5ij
VEPDpD5Q/XEvQsgqQJR0lK5LsOz5a2d/vKHwvAHvAVxyhmHmbVU7+8jnoTx1dVZV
9IxpkDryoUXyoIJHwa0T0TWYSve2HReWAiQasGS8F5GqulRvOkSoRLlaYbI7bS6Z
tUJ2jIVyTsdc1wMfb2ARIrvbOXMIpoPUhebzpQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:34 2026 by rpki-client