Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa
File: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (raw, json)
Hash identifier: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=
Subject key identifier: 1B:15:F4:34:47:C3:CC:CC:3B:80:46:BF:64:08:FD:55:3B:99:E6:B5
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 019D26F980AE24AA4BFC3CB4658E38B79FCF
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa
Signing time: Wed 25 Mar 2026 21:49:38 +0000
ASPA not before: Wed 25 Mar 2026 21:49:38 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209506
Providers: AS: 20473
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:f9:80:ae:24:aa:4b:fc:3c:b4:65:8e:38:b7:9f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Mar 25 21:49:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b15f43447c3cccc3b8046bf6408fd553b99e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:fa:bb:f0:6c:63:a6:4c:a0:df:2d:c6:ab:
ee:c2:89:bb:35:12:4a:0e:ec:72:1a:1a:7d:7f:cd:
ba:9c:58:92:60:ff:64:18:a4:a0:11:8b:dd:79:3d:
d3:94:7f:51:d6:ca:30:11:7d:f6:b8:5d:d5:47:c4:
12:ae:67:36:5f:c7:2a:0a:91:5e:d6:fa:ce:83:ea:
3a:3d:ac:e7:0a:dc:8c:16:58:ac:65:5a:09:94:63:
90:a4:11:dd:34:d8:31:66:dd:d5:2f:42:fb:9d:c9:
a5:15:4c:0f:f6:cf:3f:7f:ff:19:16:1b:6d:37:30:
80:9a:dd:ec:28:63:71:7e:e4:89:4d:94:4c:4b:c3:
9b:19:5a:46:46:77:ff:a5:e1:22:f1:6d:36:a3:fb:
f5:de:7e:59:63:be:d5:b6:8d:e5:f8:1b:19:3c:b4:
f4:85:62:bf:7a:8b:6f:bf:0a:0c:98:bc:2e:35:a2:
52:4a:75:b3:36:5c:fb:8c:d1:60:3a:6f:a7:d7:6a:
d9:f0:2d:ed:1f:8d:71:42:8d:64:29:d1:50:81:98:
ac:63:89:fb:9c:63:cb:d2:b1:39:87:40:1e:60:0e:
7f:c1:e0:25:ef:96:8f:50:ee:a9:cc:2f:e5:08:ac:
1b:a9:dd:7a:06:a6:cf:4d:fc:5b:5e:76:56:75:61:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:F4:34:47:C3:CC:CC:3B:80:46:BF:64:08:FD:55:3B:99:E6:B5
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209506
Signature Algorithm: sha256WithRSAEncryption
01:5e:1e:09:a1:79:3b:8a:0c:6a:a6:90:31:57:bc:d2:d9:cd:
2a:72:23:a3:7e:6b:03:6e:15:db:e2:ef:71:0f:37:29:fd:f1:
58:46:c4:9e:7d:df:66:7d:a8:c4:e4:aa:7d:0f:b5:29:cb:a1:
c3:ca:3a:4d:a6:df:4b:ad:31:70:64:9d:e5:95:e7:12:fc:a3:
cb:9b:46:3a:c7:f3:88:01:82:d0:dd:18:77:2e:a7:71:08:c9:
0b:6f:d5:a5:42:c7:14:bf:bb:6b:e7:f7:20:cc:d4:df:c1:cd:
ef:db:0e:8d:1b:e9:4c:23:38:06:dc:5e:e8:cc:df:83:85:a9:
79:9e:1a:38:06:43:e0:d8:14:2a:d1:e6:ac:29:c1:0d:95:22:
b3:ef:d0:e9:42:9c:b7:82:04:2f:b0:f0:60:c9:df:1f:9f:d2:
c6:24:75:16:35:3b:05:36:7d:16:a5:34:e6:26:5f:9a:35:ec:
82:e4:59:73:4c:f7:d6:8d:1f:2a:6a:a4:c6:e3:d1:1c:af:f4:
5d:d4:cb:2d:d0:1f:de:ff:37:cb:b0:49:26:25:95:8d:d7:e1:
db:1e:16:49:93:26:8f:59:ea:d0:a4:b3:d4:0f:50:fb:51:4d:
a9:eb:b8:0a:36:a5:c2:66:c9:a6:82:a4:38:8e:94:bf:e8:b5:
f9:e0:ba:93
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ0m+YCuJKpL/Dy0ZY44t5/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjkxMWFmYjI5Y2UzMzUyNzY3ZTcxMzlkOWI5NWRmOGEw
NTk4Y2IwHhcNMjYwMzI1MjE0OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjE1ZjQzNDQ3YzNjY2NjM2I4MDQ2YmY2NDA4ZmQ1NTNiOTllNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsj6u/BsY6ZMoN8txqvuwom7NRJK
DuxyGhp9f826nFiSYP9kGKSgEYvdeT3TlH9R1sowEX32uF3VR8QSrmc2X8cqCpFe
1vrOg+o6PaznCtyMFlisZVoJlGOQpBHdNNgxZt3VL0L7ncmlFUwP9s8/f/8ZFhtt
NzCAmt3sKGNxfuSJTZRMS8ObGVpGRnf/peEi8W02o/v13n5ZY77Vto3l+BsZPLT0
hWK/eotvvwoMmLwuNaJSSnWzNlz7jNFgOm+n12rZ8C3tH41xQo1kKdFQgZisY4n7
nGPL0rE5h0AeYA5/weAl75aPUO6pzC/lCKwbqd16BqbPTfxbXnZWdWEURQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBsV9DRHw8zMO4BGv2QI/VU7mea1MB8GA1UdIwQY
MBaAFJ65Ea+ynOM1J2fnE52bld+KBZjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYt
NjVlMjQ1NzEzMmVmLzEvR3hYME5FZkR6TXc3Z0VhX1pBajlWVHVaNXJVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYtNjVlMjQ1NzEzMmVm
LzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMyYjANBgkqhkiG
9w0BAQsFAAOCAQEAAV4eCaF5O4oMaqaQMVe80tnNKnIjo35rA24V2+LvcQ83Kf3x
WEbEnn3fZn2oxOSqfQ+1Kcuhw8o6TabfS60xcGSd5ZXnEvyjy5tGOsfziAGC0N0Y
dy6ncQjJC2/VpULHFL+7a+f3IMzU38HN79sOjRvpTCM4Btxe6Mzfg4WpeZ4aOAZD
4NgUKtHmrCnBDZUis+/Q6UKct4IEL7DwYMnfH5/SxiR1FjU7BTZ9FqU05iZfmjXs
guRZc0z31o0fKmqkxuPRHK/0XdTLLdAf3v83y7BJJiWVjdfh2x4WSZMmj1nq0KSz
1A9Q+1FNqeu4CjalwmbJpoKkOI6Uv+i1+eC6kw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:41:59 2026 by rpki-client