Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa
File: qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa (raw, json)
Hash identifier: 53AqSfnCOo667DHb8w2oqtwcLknCSxXAHJeADmD+v3g=
Subject key identifier: AA:32:CC:04:06:C2:E8:2D:90:8B:CB:91:4D:43:F9:CA:B1:24:7E:86
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019CDDDFB2B7CEF04EA680FC8EFEA25CDE34
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa
Signing time: Wed 11 Mar 2026 17:09:10 +0000
ASPA not before: Wed 11 Mar 2026 17:09:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212815
Providers: AS: 6939
AS: 8801
AS: 39801
AS: 49434
AS: 62000
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:df:b2:b7:ce:f0:4e:a6:80:fc:8e:fe:a2:5c:de:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Mar 11 17:09:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa32cc0406c2e82d908bcb914d43f9cab1247e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:0b:18:3c:cb:e1:e1:bc:9d:01:fd:95:42:
a2:e2:3f:c3:ea:61:df:ac:f3:e8:a4:d6:47:51:e1:
a1:9e:71:ec:9b:31:95:4a:d1:a8:37:4e:f4:57:26:
da:64:69:72:35:4e:a3:37:26:59:ac:8e:25:5d:ff:
ec:39:8c:12:3a:36:80:72:2f:0a:8b:e1:48:17:b2:
5a:0f:73:eb:c8:32:3a:0f:d8:6d:3f:c6:c7:d6:53:
f8:6e:9b:db:21:3c:65:aa:f7:4f:29:0e:d7:18:f2:
8c:98:e9:58:91:d2:87:2f:35:b9:49:ef:26:d4:11:
77:24:54:06:46:0d:ac:66:86:d5:5e:79:0e:8e:ff:
3f:08:94:a5:c3:cd:f3:5c:3e:15:3b:0c:d7:3c:4e:
47:f0:13:d6:b7:03:e5:8b:3a:32:0f:d4:c6:13:f2:
aa:c3:2b:95:63:7a:ac:ee:47:83:5c:07:6d:93:8f:
23:a0:eb:7e:e7:d0:20:dd:a7:33:cf:c4:56:a4:b9:
3b:8a:1b:00:8a:92:e3:8f:08:c6:8a:c1:b4:8d:8b:
78:5e:be:60:ff:bf:a2:63:0b:90:69:81:67:d0:f4:
4e:78:c3:cd:01:de:7d:a0:cc:99:10:97:63:5f:04:
db:b5:d9:84:8b:cc:16:93:8e:0c:11:88:68:b8:9a:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:32:CC:04:06:C2:E8:2D:90:8B:CB:91:4D:43:F9:CA:B1:24:7E:86
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/qjLMBAbC6C2Qi8uRTUP5yrEkfoY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212815
Signature Algorithm: sha256WithRSAEncryption
da:4c:4b:18:c3:8e:9c:ca:31:ed:eb:98:a1:e4:5b:0d:2e:81:
05:ee:5b:6a:2d:23:ae:ce:1a:0a:b3:75:5d:b7:eb:6a:1b:0c:
1a:4f:79:c7:fc:64:d8:22:19:0d:0d:0e:91:63:16:4d:0c:3b:
d1:92:71:4f:4f:97:87:a2:24:db:0c:0a:32:af:d6:da:63:22:
67:3b:39:91:f8:15:d3:a3:63:db:73:3c:6f:fb:d6:3d:df:51:
83:1e:19:26:60:67:fe:b1:22:f2:aa:83:9e:e1:28:71:fe:3a:
44:51:8b:78:b3:4c:bc:43:0e:98:e2:30:d7:6d:9f:81:7b:7b:
4a:81:9c:e7:00:06:bf:ae:48:37:70:ea:25:15:5b:af:5f:6d:
56:af:bd:78:dd:b0:d3:09:70:7b:59:f6:bc:4b:5e:16:25:d3:
62:4a:6c:f3:1b:41:6c:84:05:90:56:d0:1a:3b:a2:14:48:cc:
85:39:c8:09:1d:a6:5f:83:af:0f:a1:42:59:f7:89:2f:b0:77:
f6:ab:d8:5b:89:e9:66:de:01:2b:50:65:58:96:36:d1:a0:8e:
50:73:19:0c:9c:7c:3b:38:04:3d:56:f9:fb:7f:58:b2:0a:aa:
b6:8d:d9:17:a5:06:a1:17:66:00:31:5b:26:46:8b:db:d6:d4:
be:c4:4e:97
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzd37K3zvBOpoD8jv6iXN40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2
N2RmMDIwHhcNMjYwMzExMTcwOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMyY2MwNDA2YzJlODJkOTA4YmNiOTE0ZDQzZjljYWIxMjQ3ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBALGDzL4eG8nQH9lUKi4j/D6mHf
rPPopNZHUeGhnnHsmzGVStGoN070VybaZGlyNU6jNyZZrI4lXf/sOYwSOjaAci8K
i+FIF7JaD3PryDI6D9htP8bH1lP4bpvbITxlqvdPKQ7XGPKMmOlYkdKHLzW5Se8m
1BF3JFQGRg2sZobVXnkOjv8/CJSlw83zXD4VOwzXPE5H8BPWtwPlizoyD9TGE/Kq
wyuVY3qs7keDXAdtk48joOt+59Ag3aczz8RWpLk7ihsAipLjjwjGisG0jYt4Xr5g
/7+iYwuQaYFn0PROeMPNAd59oMyZEJdjXwTbtdmEi8wWk44MEYhouJo9QQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKoyzAQGwugtkIvLkU1D+cqxJH6GMB8GA1UdIwQY
MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvcWpMTUJBYkM2QzJRaTh1UlRVUDV5ckVrZm9ZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/TzANBgkqhkiG
9w0BAQsFAAOCAQEA2kxLGMOOnMox7euYoeRbDS6BBe5bai0jrs4aCrN1XbfrahsM
Gk95x/xk2CIZDQ0OkWMWTQw70ZJxT0+Xh6Ik2wwKMq/W2mMiZzs5kfgV06Nj23M8
b/vWPd9Rgx4ZJmBn/rEi8qqDnuEocf46RFGLeLNMvEMOmOIw122fgXt7SoGc5wAG
v65IN3DqJRVbr19tVq+9eN2w0wlwe1n2vEteFiXTYkps8xtBbIQFkFbQGjuiFEjM
hTnICR2mX4OvD6FCWfeJL7B39qvYW4npZt4BK1BlWJY20aCOUHMZDJx8OzgEPVb5
+39Ysgqqto3ZF6UGoRdmADFbJkaL29bUvsROlw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:04 2026 by rpki-client