Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Hd_ICdNhT64kVnNjQJeb48kbhtY.asa
File: Hd_ICdNhT64kVnNjQJeb48kbhtY.asa (raw, json)
Hash identifier: N51depVelE6G97NqBuQlzlxFDaHY1vy6x1rcPY5lrCQ=
Subject key identifier: 1D:DF:C8:09:D3:61:4F:AE:24:56:73:63:40:97:9B:E3:C9:1B:86:D6
Certificate issuer: /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial: 01A0EC9980BE5B2FD4C63D7E01F8194E7832
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Hd_ICdNhT64kVnNjQJeb48kbhtY.asa
Signing time: Tue 29 Sep 2026 09:57:58 +0000
ASPA not before: Tue 29 Sep 2026 09:57:58 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213409
Providers: AS: 6939
AS: 8772
AS: 29632
AS: 200132
AS: 214757
AS: 214809
AS: 215296
AS: 215828
AS: 218569
AS: 400992
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:99:80:be:5b:2f:d4:c6:3d:7e:01:f8:19:4e:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
Validity
Not Before: Sep 29 09:57:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ddfc809d3614fae2456736340979be3c91b86d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:e6:59:4d:c5:4d:e5:db:52:c3:86:b9:a0:
04:5c:32:00:86:83:17:08:2c:99:64:dd:fc:7a:56:
96:bd:b5:d0:dc:5c:49:4b:0e:02:43:ca:29:57:b6:
49:94:8f:7e:02:cb:48:b4:92:e7:5b:ac:d5:f1:ea:
d3:0d:fa:f1:85:f1:f9:b1:2e:fe:c3:89:07:4e:63:
3b:cc:c4:de:29:af:10:75:54:3c:31:30:9b:9d:e6:
d4:5e:28:12:60:21:a1:80:73:8a:09:ee:78:8a:ad:
f1:de:29:db:b8:c9:68:81:50:7a:78:e7:ca:92:f4:
e2:12:3f:72:fc:fb:c0:41:bf:6a:04:fb:f4:9e:ec:
7f:f0:88:8d:7f:f7:d6:5c:fc:7f:ce:f6:53:c9:d6:
41:41:dd:0a:aa:e4:db:50:c0:c0:34:6c:f8:b5:2c:
21:9b:7c:9f:32:c7:ff:12:73:9b:54:a4:ee:89:d9:
b3:3d:09:47:ba:e6:24:25:f0:ba:6d:a4:8e:fb:f1:
48:ee:69:c9:3d:eb:d6:36:72:85:2e:08:32:a8:a7:
e0:86:89:43:d5:f2:08:0c:ee:7d:41:d9:e9:92:26:
bc:e3:02:69:bf:c9:41:78:13:0a:c4:46:93:c3:71:
6f:ba:22:44:c1:51:3a:68:88:f2:c4:46:43:e0:af:
7a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:C8:09:D3:61:4F:AE:24:56:73:63:40:97:9B:E3:C9:1B:86:D6
X509v3 Authority Key Identifier:
keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/Hd_ICdNhT64kVnNjQJeb48kbhtY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213409
Signature Algorithm: sha256WithRSAEncryption
06:5e:e5:eb:45:a7:7d:63:fd:e1:b1:f4:22:85:83:fa:20:5e:
0a:81:56:db:f5:5d:f0:b7:12:a0:8f:d5:6c:65:36:98:5d:57:
75:09:89:7b:23:33:de:58:38:12:aa:3e:03:62:0a:8d:d1:d6:
1c:6f:0d:01:f1:88:d1:0f:03:12:b3:46:fa:df:ba:7f:95:75:
33:1b:61:0f:32:97:c3:d5:0b:99:0d:ef:0f:13:26:6b:6f:a4:
2f:cc:ab:9d:6c:5a:2c:52:13:2c:14:fd:17:45:4b:e1:49:28:
23:d7:93:df:b9:e1:56:6d:c7:05:97:f4:19:18:0e:78:a3:08:
41:ed:e2:c0:c0:62:44:d3:23:a3:5a:bf:5d:89:c3:64:37:f7:
1f:60:99:75:2e:d7:1f:15:49:68:1b:b8:02:60:49:f5:53:1f:
55:7c:6a:be:e0:e7:d1:71:b3:f8:ad:a0:c8:fc:c6:bb:8b:c8:
43:52:0f:50:72:c9:69:e3:40:88:2d:68:70:92:6b:9a:16:53:
8e:d5:a5:d0:b3:33:7e:30:62:0f:a1:25:10:38:8e:8a:61:08:
8d:33:cc:3c:46:98:ee:da:71:59:d5:13:b5:5f:01:42:37:0b:
49:4c:ac:62:a3:83:d9:f0:b3:37:cc:71:42:2a:f3:b2:93:a1:
61:6c:17:4d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaDsmYC+Wy/Uxj1+AfgZTngyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MmQ1MTg0ODFjZWQyZjg0ZDAxMTA0Zjg3MWQ2NGQ0NDMw
MWRiM2IwHhcNMjYwOTI5MDk1NzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGRmYzgwOWQzNjE0ZmFlMjQ1NjczNjM0MDk3OWJlM2M5MWI4NmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2rmWU3FTeXbUsOGuaAEXDIAhoMX
CCyZZN38elaWvbXQ3FxJSw4CQ8opV7ZJlI9+AstItJLnW6zV8erTDfrxhfH5sS7+
w4kHTmM7zMTeKa8QdVQ8MTCbnebUXigSYCGhgHOKCe54iq3x3inbuMlogVB6eOfK
kvTiEj9y/PvAQb9qBPv0nux/8IiNf/fWXPx/zvZTydZBQd0KquTbUMDANGz4tSwh
m3yfMsf/EnObVKTuidmzPQlHuuYkJfC6baSO+/FI7mnJPevWNnKFLggyqKfgholD
1fIIDO59Qdnpkia84wJpv8lBeBMKxEaTw3FvuiJEwVE6aIjyxEZD4K96ZQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFB3fyAnTYU+uJFZzY0CXm+PJG4bWMB8GA1UdIwQY
MBaAFBUtUYSBztL4TQEQT4cdZNRDAds7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlMxUmhJSE8wdmhOQVJCUGh4MWsxRU1CMnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNTc0MjUtNDE1MC00MzA4LWJhOGQt
Y2E1NmY2YzFmNWI1LzEvSGRfSUNkTmhUNjRrVm5OalFKZWI0OGtiaHRZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNTc0MjUtNDE1MC00MzA4LWJhOGQtY2E1NmY2YzFmNWI1
LzEvRlMxUmhJSE8wdmhOQVJCUGh4MWsxRU1CMnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBoTANBgkqhkiG
9w0BAQsFAAOCAQEABl7l60WnfWP94bH0IoWD+iBeCoFW2/Vd8LcSoI/VbGU2mF1X
dQmJeyMz3lg4Eqo+A2IKjdHWHG8NAfGI0Q8DErNG+t+6f5V1MxthDzKXw9ULmQ3v
DxMma2+kL8yrnWxaLFITLBT9F0VL4UkoI9eT37nhVm3HBZf0GRgOeKMIQe3iwMBi
RNMjo1q/XYnDZDf3H2CZdS7XHxVJaBu4AmBJ9VMfVXxqvuDn0XGz+K2gyPzGu4vI
Q1IPUHLJaeNAiC1ocJJrmhZTjtWl0LMzfjBiD6ElEDiOimEIjTPMPEaY7tpxWdUT
tV8BQjcLSUysYqOD2fCzN8xxQirzspOhYWwXTQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:53 2026 by rpki-client