Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/5aiPK-AjdStx2wVba_jLR8yEmJE.asa
File: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (raw, json)
Hash identifier: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=
Subject key identifier: E5:A8:8F:2B:E0:23:75:2B:71:DB:05:5B:6B:F8:CB:47:CC:84:98:91
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019D3021D84291F382B470D93549E03C3AA8
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/5aiPK-AjdStx2wVba_jLR8yEmJE.asa
Signing time: Fri 27 Mar 2026 16:30:17 +0000
ASPA not before: Fri 27 Mar 2026 16:30:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204137
Providers: AS: 3216
AS: 31257
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:21:d8:42:91:f3:82:b4:70:d9:35:49:e0:3c:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Mar 27 16:30:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5a88f2be023752b71db055b6bf8cb47cc849891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:d2:6a:a0:04:a9:f7:65:29:a7:1d:aa:18:
87:9e:5c:27:6f:61:a5:05:dc:c0:85:88:1a:15:49:
65:16:5a:69:64:59:c1:9c:21:4b:92:1e:af:b2:7e:
44:3e:a2:79:6b:4d:db:cc:d8:ac:e0:bd:50:a7:e1:
60:d8:87:92:89:92:72:ef:e0:51:8c:55:bb:f0:21:
ac:f2:61:6f:0d:93:ba:ae:bf:69:e7:27:1a:30:f8:
a1:83:9e:9f:c0:23:09:a0:1f:40:fc:4c:38:db:97:
e3:1b:b6:e2:3f:34:7a:3d:66:90:38:93:12:76:d4:
c2:99:3b:b4:2d:12:ae:39:41:3a:95:6e:a7:ca:1d:
93:e4:e2:1e:30:b4:31:29:b3:0a:ec:79:19:25:04:
96:7b:7c:3e:2a:a3:5c:b8:3e:5e:35:2b:2e:d7:5d:
58:43:ec:58:40:4f:db:b2:35:f5:6d:fe:5a:98:12:
70:00:c1:7b:6e:d2:98:be:01:32:e2:39:17:4d:d7:
4f:4e:06:6e:db:bb:0b:30:02:32:8e:3e:ed:02:67:
ec:07:98:9c:12:c1:85:7e:a4:77:11:b4:0e:67:eb:
43:67:39:11:47:f2:0e:bd:22:c3:88:12:8e:ec:3e:
c6:73:b5:0c:4a:39:f2:05:e6:09:b9:b1:19:5a:a7:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:8F:2B:E0:23:75:2B:71:DB:05:5B:6B:F8:CB:47:CC:84:98:91
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/5aiPK-AjdStx2wVba_jLR8yEmJE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204137
Signature Algorithm: sha256WithRSAEncryption
41:34:be:cc:6d:33:5f:fb:40:ef:6d:78:75:15:f5:c7:e0:12:
d3:d3:cd:a8:f7:88:54:7c:0a:3c:04:0b:59:cb:cb:c7:52:e0:
11:3e:c3:d7:d4:dc:5b:0b:cf:98:67:43:22:6d:23:f5:5c:61:
02:38:b4:89:c3:42:7e:57:06:7f:a2:05:b3:0e:fd:d5:9c:40:
37:eb:d5:78:e3:dd:86:53:2f:e7:fd:fe:69:05:b4:4a:95:0e:
b9:86:32:72:5b:33:c6:19:8e:9c:ed:52:89:30:2e:7a:dd:2e:
09:9b:b9:a5:b0:1b:cb:a8:30:0f:d1:23:c3:40:be:c3:eb:20:
95:64:ed:eb:f8:6d:d1:60:41:cc:42:0b:6f:67:e8:75:cf:b6:
bc:cb:78:a7:a5:0b:d1:4f:e6:c3:ce:e7:42:05:a4:e3:88:28:
f0:f9:b7:9b:8c:18:32:5c:be:18:6d:68:e4:14:e0:28:72:f7:
dc:35:13:c9:bf:31:d3:53:a8:42:17:aa:53:7a:77:2b:7d:f5:
c5:54:d4:90:3d:89:10:8c:29:22:33:b2:02:e9:d7:7d:eb:52:
64:c4:4f:1f:40:83:52:6d:cf:44:f4:51:8b:5b:5d:da:96:96:
04:01:14:1a:e3:e8:d3:ce:3e:a5:bf:b5:b4:aa:0c:1b:ec:96:
83:f7:c9:79
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0wIdhCkfOCtHDZNUngPDqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjYwMzI3MTYzMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWE4OGYyYmUwMjM3NTJiNzFkYjA1NWI2YmY4Y2I0N2NjODQ5ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w/SaqAEqfdlKacdqhiHnlwnb2Gl
BdzAhYgaFUllFlppZFnBnCFLkh6vsn5EPqJ5a03bzNis4L1Qp+Fg2IeSiZJy7+BR
jFW78CGs8mFvDZO6rr9p5ycaMPihg56fwCMJoB9A/Ew425fjG7biPzR6PWaQOJMS
dtTCmTu0LRKuOUE6lW6nyh2T5OIeMLQxKbMK7HkZJQSWe3w+KqNcuD5eNSsu111Y
Q+xYQE/bsjX1bf5amBJwAMF7btKYvgEy4jkXTddPTgZu27sLMAIyjj7tAmfsB5ic
EsGFfqR3EbQOZ+tDZzkRR/IOvSLDiBKO7D7Gc7UMSjnyBeYJubEZWqc0dwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOWojyvgI3UrcdsFW2v4y0fMhJiRMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvNWFpUEstQWpkU3R4MndWYmFfakxSOHlFbUpFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdaTANBgkqhkiG
9w0BAQsFAAOCAQEAQTS+zG0zX/tA7214dRX1x+AS09PNqPeIVHwKPAQLWcvLx1Lg
ET7D19TcWwvPmGdDIm0j9VxhAji0icNCflcGf6IFsw791ZxAN+vVeOPdhlMv5/3+
aQW0SpUOuYYyclszxhmOnO1SiTAuet0uCZu5pbAby6gwD9Ejw0C+w+sglWTt6/ht
0WBBzEILb2fodc+2vMt4p6UL0U/mw87nQgWk44go8Pm3m4wYMly+GG1o5BTgKHL3
3DUTyb8x01OoQheqU3p3K331xVTUkD2JEIwpIjOyAunXfetSZMRPH0CDUm3PRPRR
i1td2paWBAEUGuPo084+pb+1tKoMG+yWg/fJeQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:58:12 2026 by rpki-client