Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/L7XJcrXAsnA6L5HcXO_kON78iWI.asa
File: L7XJcrXAsnA6L5HcXO_kON78iWI.asa (raw, json)
Hash identifier: /DLviuOmkxdGJXwWmiv78YOY3ddIPscOZgPQdVy3/GU=
Subject key identifier: 2F:B5:C9:72:B5:C0:B2:70:3A:2F:91:DC:5C:EF:E4:38:DE:FC:89:62
Certificate issuer: /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial: 01A150FFA896194593A8BF76CCFFAF5A3951
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/L7XJcrXAsnA6L5HcXO_kON78iWI.asa
Signing time: Sun 18 Oct 2026 21:51:34 +0000
ASPA not before: Sun 18 Oct 2026 21:51:34 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199742
Providers: AS: 23470
AS: 42532
AS: 49581
AS: 60068
AS: 62255
AS: 62403
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:ff:a8:96:19:45:93:a8:bf:76:cc:ff:af:5a:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Validity
Not Before: Oct 18 21:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fb5c972b5c0b2703a2f91dc5cefe438defc8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:c6:50:e6:95:21:d1:71:45:2f:a3:4f:ed:
16:6c:f9:e8:7c:31:00:fe:1d:2b:b7:9c:fb:7f:8d:
3e:f0:72:1a:49:5c:ec:c7:30:91:fa:aa:ce:af:01:
30:c4:20:36:5b:30:ff:ee:4d:12:3e:e1:f8:c2:fe:
27:15:10:69:0d:30:88:30:bc:bb:0d:b7:5f:27:b5:
1c:46:08:23:fa:a1:00:96:6d:c4:48:35:52:00:8d:
4a:97:3b:ad:c0:ec:dd:97:82:fc:3d:ac:5c:4b:0c:
ae:6c:a5:6d:e9:91:b8:a2:57:fc:1c:0c:3c:bc:c6:
fb:e9:a9:9d:d1:8d:2a:ce:a6:29:03:c7:fd:89:07:
f7:4b:13:b8:9e:3b:75:6d:8c:b5:51:c2:23:62:17:
2a:34:62:60:9f:6e:65:fc:b6:2f:37:f1:5f:0e:e9:
63:3a:aa:33:64:f9:e4:69:40:d7:2d:c6:9e:d8:00:
62:68:b0:54:9a:fc:e5:78:be:c7:1c:5c:ed:12:f5:
41:1f:62:5e:81:bb:05:5d:09:9b:43:6a:b7:fe:19:
9b:01:4e:9a:35:96:4c:48:25:09:05:88:7b:d5:f4:
03:ae:2d:7f:62:fd:a3:6e:a0:d2:97:3e:1b:91:9d:
35:11:98:9e:32:a8:15:02:6c:b7:e5:f8:e3:db:41:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:C9:72:B5:C0:B2:70:3A:2F:91:DC:5C:EF:E4:38:DE:FC:89:62
X509v3 Authority Key Identifier:
keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/L7XJcrXAsnA6L5HcXO_kON78iWI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199742
Signature Algorithm: sha256WithRSAEncryption
9b:ff:a7:98:cc:2d:0f:81:92:26:93:16:9f:de:a2:35:77:ef:
9f:0a:cb:64:f8:87:93:be:7a:33:fd:1e:94:93:c3:7d:b4:2d:
a2:e0:55:82:66:93:ff:2e:e8:08:83:d0:06:7a:f7:af:bb:1e:
cf:1b:54:1a:c9:e4:d0:84:44:da:be:50:a0:bd:2d:e6:1f:d5:
ab:46:63:70:65:74:e1:a0:a0:e4:5a:59:11:53:ba:9a:8b:8b:
3e:9d:85:2f:89:a2:13:56:46:91:6e:4e:38:cc:4b:5a:e5:09:
1a:33:9e:3b:28:54:ae:56:ac:49:42:f9:bf:c9:26:95:ff:09:
f5:93:38:64:7e:87:f0:c6:f4:57:7e:0a:ee:79:81:d0:0a:3d:
9a:5d:81:5d:d6:20:f9:b4:ce:ee:60:57:c3:60:bd:b6:22:65:
8d:2b:1a:90:2e:47:a7:e7:97:33:2a:6f:96:7b:5b:2c:d6:dc:
f9:c7:d3:f2:22:14:fe:cf:ed:23:c6:c8:75:d8:65:dd:31:38:
d8:d7:50:0a:c9:f2:9d:5e:63:17:33:f6:b4:67:cb:14:a6:34:
bb:85:62:d8:12:cc:4d:d6:00:b0:22:8e:79:d2:3e:1e:75:e3:
df:57:05:f4:29:20:4f:97:0d:cf:ee:24:23:50:b5:88:e6:01:
f8:39:92:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 03:42:09 2026 by rpki-client