Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/d3jRJzfNcmKLdki4X5n6KAB1oqY.asa
File: d3jRJzfNcmKLdki4X5n6KAB1oqY.asa (raw, json)
Hash identifier: YyCHQdyQJIpMeZ8pOZUdv509B8AQVs+wxG+aONpSIlc=
Subject key identifier: 77:78:D1:27:37:CD:72:62:8B:76:48:B8:5F:99:FA:28:00:75:A2:A6
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019CED2D8673799A0936D048449083C08DBC
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/d3jRJzfNcmKLdki4X5n6KAB1oqY.asa
Signing time: Sat 14 Mar 2026 16:28:29 +0000
ASPA not before: Sat 14 Mar 2026 16:28:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205941
Providers: AS: 6204
AS: 6939
AS: 20473
AS: 23507
AS: 44324
AS: 53356
AS: 57050
AS: 60602
AS: 60900
AS: 62553
AS: 207252
AS: 208453
AS: 210464
AS: 212271
AS: 212635
AS: 212895
AS: 213413
AS: 213449
AS: 214480
AS: 214757
AS: 214762
AS: 214809
AS: 215828
AS: 400587
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:2d:86:73:79:9a:09:36:d0:48:44:90:83:c0:8d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Mar 14 16:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7778d12737cd72628b7648b85f99fa280075a2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:1b:1d:1f:fc:c1:30:d9:fd:77:7c:d1:8e:
7c:55:0e:03:23:78:8c:19:96:5c:1d:26:fe:a4:97:
df:1d:87:a7:15:b0:d0:01:dd:cc:c0:98:52:91:04:
e8:83:9a:4a:01:e5:73:58:fb:4d:53:e2:b8:8e:88:
05:a8:be:58:aa:c1:0e:7f:16:d0:12:91:01:44:0b:
05:ee:6c:4d:67:1e:41:d5:c4:fc:c1:31:a6:ec:cc:
1f:b0:e1:ae:cb:b3:68:06:f9:bc:46:51:e9:39:31:
21:78:2c:c2:64:e4:1b:90:aa:e5:13:5b:0f:03:ac:
05:af:ef:b2:d6:0c:ba:d3:e6:e8:eb:9d:f1:02:a9:
ed:2a:e4:ae:82:ee:ec:68:e1:24:4c:37:5d:09:27:
27:a3:77:10:c5:af:28:eb:86:4d:21:96:ac:64:8f:
29:2f:20:a7:4f:9d:81:92:e7:33:de:d8:38:20:60:
72:0a:de:93:af:0d:c1:a2:80:87:f3:07:cd:39:9b:
ba:26:86:ae:2e:77:ae:d8:e7:1c:f3:b6:c4:eb:71:
3d:8a:f7:ea:2c:8d:77:7f:db:6e:a0:20:ec:e7:8a:
ab:99:aa:15:cb:b0:09:c4:ad:55:48:ac:07:d0:96:
1a:50:85:75:c4:72:2b:06:47:66:fa:35:0b:76:d2:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:78:D1:27:37:CD:72:62:8B:76:48:B8:5F:99:FA:28:00:75:A2:A6
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/d3jRJzfNcmKLdki4X5n6KAB1oqY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205941
Signature Algorithm: sha256WithRSAEncryption
08:0f:04:cf:6b:f9:c4:4d:e9:34:e7:ff:da:09:b5:86:94:4a:
05:2d:49:2e:5f:18:fe:90:1a:c0:f7:e8:d7:76:e1:55:cb:e6:
68:5c:8c:aa:0e:f6:05:28:0d:f2:ef:e4:37:18:13:28:e4:ae:
a7:bb:da:d7:99:47:4a:b9:fd:3d:da:be:46:a0:52:4a:8d:30:
f5:06:4c:ff:72:e4:5b:af:79:8b:30:57:b7:0e:2c:51:f3:5a:
cd:8d:86:68:27:5c:3d:cc:8f:28:39:7c:d1:96:77:6e:ba:80:
07:2f:b0:d2:d6:36:7b:17:10:6f:ed:c2:94:42:70:f3:c9:14:
9c:87:95:08:0d:d5:9b:1e:6d:bd:46:50:12:0e:3a:4f:97:04:
9f:ea:24:bc:63:c7:3b:f2:f3:b1:e6:79:bc:a3:14:26:be:46:
34:de:39:17:c1:28:74:a3:4d:bf:dd:5b:72:78:0a:bb:e2:0c:
2b:c5:9b:c1:bf:29:16:7c:20:22:24:0a:38:b6:44:a7:35:d0:
3a:a7:ce:a0:a9:9a:de:88:f5:be:64:bc:8d:45:0f:a8:f2:97:
c5:15:6f:ee:a8:6c:cb:52:ec:8e:47:1e:20:17:fc:5e:b6:42:
f7:b0:25:8a:89:49:f4:97:36:ce:36:65:d8:4b:33:7c:98:9f:
bf:b0:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:44 2026 by rpki-client