Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/VHYuz4UcUkynvHCzUDSQCju7BCI.asa
File: VHYuz4UcUkynvHCzUDSQCju7BCI.asa (raw, json)
Hash identifier: 0TrnGCXvem2+dXeObnQzySc0MKCAlyb9A5oznrjBvV8=
Subject key identifier: 54:76:2E:CF:85:1C:52:4C:A7:BC:70:B3:50:34:90:0A:3B:BB:04:22
Certificate issuer: /CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Certificate serial: 019F0D3AF84999FB063E7AC977C1ACC79EC9
Authority key identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/VHYuz4UcUkynvHCzUDSQCju7BCI.asa
Signing time: Sun 28 Jun 2026 07:56:36 +0000
ASPA not before: Sun 28 Jun 2026 07:56:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214933
Providers: AS: 17433
AS: 34927
AS: 44324
AS: 53808
AS: 151194
AS: 153376
AS: 154185
AS: 198025
AS: 203031
AS: 203168
AS: 204211
AS: 204539
AS: 207303
AS: 210352
AS: 210440
AS: 212895
AS: 213605
AS: 214439
AS: 214955
AS: 215172
AS: 216211
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:3a:f8:49:99:fb:06:3e:7a:c9:77:c1:ac:c7:9e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Validity
Not Before: Jun 28 07:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54762ecf851c524ca7bc70b35034900a3bbb0422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:fb:db:a0:34:ba:5c:72:4e:2c:a0:23:68:
72:ad:1d:93:b3:be:44:d2:ec:66:90:91:d7:70:1f:
16:06:77:32:6b:c2:31:67:5e:57:10:a9:8a:28:bf:
5d:4e:40:fa:22:2e:c0:b4:38:ed:30:84:22:67:58:
87:00:fd:3d:9b:13:b1:e3:da:4c:0e:b0:02:0e:66:
0f:56:ff:91:2c:d9:14:90:b1:61:4e:5e:ef:ee:55:
3d:5e:b6:1a:ca:d3:08:9e:da:ab:6d:bf:33:dc:ef:
11:c1:0c:30:83:fd:94:17:62:8d:4b:b7:1d:c8:a5:
3b:1f:8c:5a:79:7a:69:04:a4:05:72:d5:11:b9:1b:
28:79:c2:f4:54:ed:b7:40:f1:a2:b5:4f:e2:30:4b:
8b:f8:63:4c:8e:5c:59:6a:5c:65:fe:0d:3a:ce:57:
d0:93:bd:95:5b:ea:8b:b6:f3:96:11:1e:aa:7e:de:
40:5d:ff:dd:32:bd:43:41:c1:1f:92:66:be:92:d5:
9a:72:2c:d1:fa:32:96:cd:58:22:6b:c8:35:65:27:
0d:18:61:11:a6:47:e3:eb:5a:f4:32:ae:a2:6a:27:
87:8b:fe:03:8a:ce:9e:a8:36:ea:c3:0a:cf:69:7d:
78:20:d5:7e:c5:67:43:47:bb:59:f7:b5:fb:a6:47:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:76:2E:CF:85:1C:52:4C:A7:BC:70:B3:50:34:90:0A:3B:BB:04:22
X509v3 Authority Key Identifier:
keyid:57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/VHYuz4UcUkynvHCzUDSQCju7BCI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214933
Signature Algorithm: sha256WithRSAEncryption
27:8f:69:48:e1:05:75:f0:ba:29:94:23:01:af:64:cb:fa:c9:
e4:c1:dd:79:23:8f:94:ca:3c:93:5c:76:3f:60:a2:f5:6c:83:
28:80:8f:9c:60:d1:1e:75:75:03:d8:fb:fe:f6:a3:b7:46:26:
4d:55:e6:5d:ef:bf:07:b8:0f:e2:94:1c:b6:4a:2c:a2:07:34:
5d:c3:85:45:12:b4:37:f7:3a:f9:f9:d2:b6:8c:a5:d4:18:68:
ed:a1:12:87:ef:47:b1:ec:9d:3d:5b:04:e4:79:f1:08:ea:ee:
45:29:b9:3d:b1:3c:70:a4:df:ca:62:b9:2b:3f:2b:e5:ca:89:
29:67:8c:e0:51:e6:f2:7e:64:37:b2:76:65:af:2e:40:c8:1a:
bc:c2:83:3e:fe:12:4d:c1:cb:3b:ff:29:ce:e2:e7:22:a8:50:
f1:83:d9:1c:67:7c:43:ad:05:1a:8c:66:45:ef:24:b0:14:38:
78:41:0c:af:d8:2f:e8:5f:ed:1f:65:96:cd:3d:e7:84:7a:8b:
5e:63:9b:1d:e2:f3:e8:1a:38:1c:0a:4c:aa:18:98:a8:7b:84:
4f:bc:a6:62:8e:f6:20:bd:e7:31:c3:2a:6f:93:4c:6c:66:4c:
6a:d4:1f:92:86:eb:4f:19:e5:e9:54:dc:ae:10:fb:af:12:e2:
c3:fd:bc:dc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8NOvhJmfsGPnrJd8Gsx57JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTk1M2U5MTdiYTk1YjdhYWMyZDIzYmVlYmMxN2YyNGM2
ZjdmNjkwHhcNMjYwNjI4MDc1NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDc2MmVjZjg1MWM1MjRjYTdiYzcwYjM1MDM0OTAwYTNiYmIwNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eb726A0ulxyTiygI2hyrR2Ts75E
0uxmkJHXcB8WBncya8IxZ15XEKmKKL9dTkD6Ii7AtDjtMIQiZ1iHAP09mxOx49pM
DrACDmYPVv+RLNkUkLFhTl7v7lU9XrYaytMIntqrbb8z3O8RwQwwg/2UF2KNS7cd
yKU7H4xaeXppBKQFctURuRsoecL0VO23QPGitU/iMEuL+GNMjlxZalxl/g06zlfQ
k72VW+qLtvOWER6qft5AXf/dMr1DQcEfkma+ktWacizR+jKWzVgia8g1ZScNGGER
pkfj61r0Mq6iaieHi/4Dis6eqDbqwwrPaX14INV+xWdDR7tZ97X7pkcyWQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFR2Ls+FHFJMp7xws1A0kAo7uwQiMB8GA1UdIwQY
MBaAFFfpU+kXupW3qsLSO+68F/JMb39pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83ZDkzNDktMzYwMy00NjA1LWIxNGYt
YTBlYmRjOTZiNTMzLzEvVkhZdXo0VWNVa3ludkhDelVEU1FDanU3QkNJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83ZDkzNDktMzYwMy00NjA1LWIxNGYtYTBlYmRjOTZiNTMz
LzEvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHlTANBgkqhkiG
9w0BAQsFAAOCAQEAJ49pSOEFdfC6KZQjAa9ky/rJ5MHdeSOPlMo8k1x2P2Ci9WyD
KICPnGDRHnV1A9j7/vajt0YmTVXmXe+/B7gP4pQctkosogc0XcOFRRK0N/c6+fnS
toyl1Bho7aESh+9HseydPVsE5HnxCOruRSm5PbE8cKTfymK5Kz8r5cqJKWeM4FHm
8n5kN7J2Za8uQMgavMKDPv4STcHLO/8pzuLnIqhQ8YPZHGd8Q60FGoxmRe8ksBQ4
eEEMr9gv6F/tH2WWzT3nhHqLXmObHeLz6Bo4HApMqhiYqHuET7ymYo72IL3nMcMq
b5NMbGZMatQfkobrTxnl6VTcrhD7rxLiw/283A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:31 2026 by rpki-client