Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/40Yv3FJarP6L9fctYDOp2f3FVUM.asa
File: 40Yv3FJarP6L9fctYDOp2f3FVUM.asa (raw, json)
Hash identifier: jpERvaDO1bnIeXcly3KkynVSBYXXgKkGP8cwdmaFv9U=
Subject key identifier: E3:46:2F:DC:52:5A:AC:FE:8B:F5:F7:2D:60:33:A9:D9:FD:C5:55:43
Certificate issuer: /CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Certificate serial: 019FD332421638E35F8E9D1ED82D659FB5F4
Authority key identifier: B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/40Yv3FJarP6L9fctYDOp2f3FVUM.asa
Signing time: Wed 05 Aug 2026 18:31:54 +0000
ASPA not before: Wed 05 Aug 2026 18:31:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 197736
Providers: AS: 11967
AS: 34927
AS: 41051
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:32:42:16:38:e3:5f:8e:9d:1e:d8:2d:65:9f:b5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ffab3bab48291c01e8c0e5ef50f81f3b39b239
Validity
Not Before: Aug 5 18:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3462fdc525aacfe8bf5f72d6033a9d9fdc55543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:8f:0a:78:ac:e8:35:db:93:0e:da:5a:be:
6b:21:98:ad:c0:06:91:58:69:6f:44:c7:dc:c3:6d:
3b:9d:86:ef:94:3c:ea:3d:e6:b2:2d:ec:9a:ff:1e:
8e:68:da:51:58:f6:06:97:6d:9a:2a:de:e7:8d:a0:
f7:c4:5f:23:03:75:c6:c1:69:70:ae:e8:eb:9c:8d:
cb:7e:24:e0:c3:05:cd:1d:5d:69:c4:6d:cf:da:18:
f0:b3:8d:1e:fd:ee:0c:85:d8:10:43:35:2c:13:6f:
e4:0c:7c:56:d6:80:68:06:a3:55:9d:9a:9a:de:2e:
61:66:6d:cb:b9:0c:e3:3d:2a:1e:35:4b:33:f9:6a:
ad:48:a7:44:bd:3e:b0:e7:0f:1e:88:bd:52:b2:aa:
70:be:3c:e1:58:11:8f:f3:76:c0:6d:7c:1d:76:b9:
9a:34:64:70:0a:ab:d4:bb:2a:f0:77:10:f1:da:bf:
d8:68:8d:37:2f:1b:93:0e:56:29:09:5a:9d:c4:07:
06:40:5b:51:69:d9:2c:32:9b:f1:71:5b:d6:90:64:
fc:36:4f:44:d4:43:76:fc:b2:0b:4c:09:32:72:bb:
07:78:2b:b7:55:59:86:ca:d6:bc:f6:fb:8b:a1:81:
17:04:be:99:09:aa:b8:1f:84:c6:5d:4a:4d:f7:4d:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:2F:DC:52:5A:AC:FE:8B:F5:F7:2D:60:33:A9:D9:FD:C5:55:43
X509v3 Authority Key Identifier:
keyid:B7:FF:AB:3B:AB:48:29:1C:01:E8:C0:E5:EF:50:F8:1F:3B:39:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_-rO6tIKRwB6MDl71D4Hzs5sjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/40Yv3FJarP6L9fctYDOp2f3FVUM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/868cf8-b74b-448a-af13-a28fd9feda76/1/t_-rO6tIKRwB6MDl71D4Hzs5sjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197736
Signature Algorithm: sha256WithRSAEncryption
a9:59:a2:5c:27:66:b9:cf:68:65:06:80:f8:33:d9:23:86:27:
32:73:ac:bb:63:99:23:aa:c0:80:4b:a5:53:b6:12:c3:c2:05:
72:04:7b:47:48:d8:65:a8:13:74:e8:95:53:29:10:35:22:3e:
b7:96:9e:32:b8:ac:e0:2a:19:50:51:f8:ba:a9:ce:03:d7:a8:
b8:4c:5a:f4:a6:fd:d2:6b:ca:81:aa:25:38:71:83:8d:0d:2c:
47:bc:5f:6f:c3:a4:41:29:90:94:c3:34:90:bb:f5:27:72:aa:
09:39:20:20:6f:1a:d2:da:e0:73:f5:f5:4d:4d:f2:41:13:57:
cc:f4:26:24:66:91:b6:e2:6f:7c:3a:e8:70:4d:04:c1:70:3c:
e8:ed:7c:83:38:b5:65:b9:1e:e3:7b:31:a2:08:0a:be:19:9f:
78:bc:c9:31:a4:fe:3f:0a:1d:e7:9d:20:1a:a2:a2:d3:d0:82:
36:ff:54:99:81:d3:e3:0f:10:b6:fc:de:6b:5d:12:17:ea:95:
41:1b:cb:a1:00:72:5d:7c:cd:ef:6a:50:a0:6b:ec:4a:6a:01:
d7:de:db:6a:f7:4c:21:df:9f:a5:29:4c:4a:22:e8:0d:22:80:
00:d7:3c:9b:1d:aa:c3:21:55:22:90:4c:89:29:f7:59:77:99:
6a:57:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:39:57 2026 by rpki-client