Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/0Ls74XbMffGVDMxDWUzqk8rXfpg.asa
File: 0Ls74XbMffGVDMxDWUzqk8rXfpg.asa (raw, json)
Hash identifier: ArBNl1lSF8AHI2rhog081GUWVnhBOxqLulK0sjaGNto=
Subject key identifier: D0:BB:3B:E1:76:CC:7D:F1:95:0C:CC:43:59:4C:EA:93:CA:D7:7E:98
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019CB4C97282FD44494E8B7B6C74A1457650
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/0Ls74XbMffGVDMxDWUzqk8rXfpg.asa
Signing time: Tue 03 Mar 2026 17:40:26 +0000
ASPA not before: Tue 03 Mar 2026 17:40:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205941
Providers: AS: 6204
AS: 20473
AS: 23507
AS: 44324
AS: 53356
AS: 57050
AS: 60602
AS: 60900
AS: 62553
AS: 207252
AS: 208453
AS: 210464
AS: 212271
AS: 212895
AS: 213413
AS: 213449
AS: 214480
AS: 214757
AS: 214762
AS: 214809
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:c9:72:82:fd:44:49:4e:8b:7b:6c:74:a1:45:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Mar 3 17:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0bb3be176cc7df1950ccc43594cea93cad77e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:f8:10:57:28:0d:d8:00:86:6c:82:49:15:
21:92:32:ea:5a:7a:86:db:58:fe:85:ed:b7:f9:6d:
dd:5a:a6:44:33:9a:51:dc:b9:ef:5b:f7:01:bc:e0:
91:a0:02:2b:78:89:70:fe:c7:ef:01:8d:04:98:29:
b9:48:f2:6b:71:bd:67:2f:d4:ba:0c:88:24:fc:21:
62:f3:ec:7b:af:99:e3:47:fe:0b:e4:24:36:ff:b3:
50:43:bf:c4:f5:78:f9:0a:d0:84:07:67:b1:72:c1:
73:ca:d3:c0:28:85:0d:9f:c5:49:1c:47:11:8b:f1:
0f:6c:7e:a8:16:5e:6f:23:c5:bf:8a:d2:d3:12:a6:
82:13:40:a3:fe:dc:f0:dd:3e:ef:83:ee:cb:25:2e:
f2:2f:a1:0d:84:13:04:8e:63:d9:9c:79:56:86:a8:
36:d9:fb:9a:96:27:d4:99:a6:54:16:23:93:e0:0a:
d9:20:f8:13:cb:cb:92:23:ae:a9:03:bf:b8:b2:86:
76:35:bd:45:eb:8b:91:9a:83:30:df:a1:7f:2f:22:
a1:e5:33:c0:90:25:c3:09:2b:59:46:2e:91:d3:41:
8a:a8:f1:1f:7d:32:a9:2a:fc:14:3f:a2:5b:c0:cd:
95:36:59:38:d6:01:c9:17:b4:91:91:e4:ea:45:90:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BB:3B:E1:76:CC:7D:F1:95:0C:CC:43:59:4C:EA:93:CA:D7:7E:98
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/0Ls74XbMffGVDMxDWUzqk8rXfpg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205941
Signature Algorithm: sha256WithRSAEncryption
2a:10:d5:36:3a:7a:9e:ec:76:cc:c8:b3:f0:0e:ab:aa:88:92:
8d:a9:a1:85:bb:4f:fa:5b:f0:d4:8d:99:56:18:d6:bc:52:47:
b0:13:ca:99:67:0e:8d:e2:0c:74:a5:55:9c:aa:aa:cf:ab:93:
c0:cb:68:d3:8c:51:dc:f5:e3:a4:91:6c:dd:94:b2:7b:b7:91:
e0:0c:69:9d:05:63:5a:5f:db:63:21:1f:f6:fc:51:df:e1:8a:
4c:c1:af:a5:be:c5:10:06:a7:d3:a5:0f:50:ef:2f:2a:32:3b:
9f:26:d4:7b:b1:7f:43:cf:17:54:a5:27:c3:b8:8d:e6:23:d6:
57:30:21:98:20:f7:1d:ad:40:2b:be:4c:ab:4d:e6:79:12:cb:
12:50:02:67:ec:16:f7:d3:cc:aa:ab:9e:14:45:6e:75:92:8f:
a5:62:89:14:21:b8:9f:29:90:68:6d:3f:fa:43:c8:8e:9e:bf:
9e:51:aa:69:e6:44:4f:f2:c9:5b:e5:49:b5:f7:5c:9d:03:e3:
48:29:dd:97:5c:52:b3:2e:b4:9b:b4:e3:db:4c:47:24:3b:8f:
84:89:64:d7:6c:11:9d:f4:ac:27:fa:40:10:4d:ea:3e:e4:0f:
ad:03:ef:c2:5e:0c:7a:d6:35:28:13:2c:87:f0:56:6f:4d:2b:
80:cc:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:56:38 2026 by rpki-client