Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/T9mevdqWtNZfyBgMq55mLo4_NGY.asa
File: T9mevdqWtNZfyBgMq55mLo4_NGY.asa (raw, json)
Hash identifier: i1bQotm0KZ02q33gBaWmVlAwdUqJwdGXipOsl27HFpE=
Subject key identifier: 4F:D9:9E:BD:DA:96:B4:D6:5F:C8:18:0C:AB:9E:66:2E:8E:3F:34:66
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019DC65C5E7267327A7ADD30FBD7596344F0
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/T9mevdqWtNZfyBgMq55mLo4_NGY.asa
Signing time: Sat 25 Apr 2026 20:37:15 +0000
ASPA not before: Sat 25 Apr 2026 20:37:15 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212123
Providers: AS: 6939
AS: 21700
AS: 34549
AS: 34854
AS: 58299
AS: 199839
AS: 200462
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:5c:5e:72:67:32:7a:7a:dd:30:fb:d7:59:63:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Apr 25 20:37:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fd99ebdda96b4d65fc8180cab9e662e8e3f3466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:aa:8f:a8:fb:cf:e4:b4:0a:10:a1:a3:2f:
4f:5a:1d:1d:61:1f:b1:af:21:c8:46:12:24:e0:1b:
0a:00:35:08:e9:a4:14:f6:c1:65:eb:bd:09:72:b4:
ee:38:30:6c:08:47:70:9f:d5:bc:21:f1:21:49:cd:
fe:4c:94:84:27:12:34:96:be:13:22:65:72:7e:a3:
29:db:56:e4:56:dc:4c:a4:95:07:87:90:1b:50:0b:
a6:f4:f7:74:d3:0e:6b:77:92:cf:0d:4e:50:22:19:
50:df:87:00:23:08:a7:2a:79:55:9b:6c:ed:2e:ac:
c7:ac:f1:62:4d:c1:f7:67:d9:71:41:58:c3:c4:c5:
a5:d0:e6:c5:52:32:0e:9d:3a:b6:b6:1f:1b:b1:d0:
e2:9a:b0:f6:e5:a6:db:27:81:b7:8d:8d:17:b5:ed:
94:41:e0:ce:f6:4c:27:b9:8e:ab:1c:f3:0f:11:e9:
ab:39:f4:93:40:89:78:3c:e7:e2:66:38:11:df:e1:
01:85:9e:11:ff:19:e9:99:4e:17:c5:1f:f9:c6:27:
f2:62:65:d4:42:75:ec:5b:9f:29:5c:8f:d9:cb:59:
cf:b9:83:a6:1a:27:a9:4d:b9:80:ad:fb:8a:31:2d:
9f:e2:80:27:68:93:4b:9e:d5:2d:b0:db:23:9f:30:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D9:9E:BD:DA:96:B4:D6:5F:C8:18:0C:AB:9E:66:2E:8E:3F:34:66
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/T9mevdqWtNZfyBgMq55mLo4_NGY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212123
Signature Algorithm: sha256WithRSAEncryption
2c:ca:17:71:87:24:f0:82:a3:0a:7e:25:f9:f7:eb:1c:eb:ad:
48:14:4d:48:55:d4:c0:85:b0:82:32:55:15:c3:2b:f4:5a:5b:
67:fe:91:59:41:d2:94:5b:63:6b:00:0c:77:98:e4:e0:2c:fe:
b6:bf:67:34:39:af:66:bc:9e:68:6f:71:4e:8f:a7:7f:c3:65:
6e:00:26:77:5e:ff:6d:ce:6b:3c:6e:f5:c7:ad:10:2f:b1:ed:
69:e4:9b:bb:c3:3f:4f:3e:34:01:8d:b6:03:8c:0f:7b:50:09:
6b:06:e2:df:14:4d:e6:9b:5b:a4:cd:a7:42:8e:58:32:32:4b:
58:da:e8:1e:e3:01:a7:b4:28:20:1a:04:07:58:a3:e8:80:30:
07:6b:85:6d:8e:91:2b:e1:38:7f:81:10:24:1d:b5:e9:f7:b7:
5d:aa:f3:3e:9b:60:c9:1f:1d:19:75:cd:4a:3b:a2:ca:9e:aa:
cc:c4:7a:cb:4e:9e:18:3b:52:25:78:0e:65:a7:4f:36:2f:5a:
80:39:2f:37:3a:b3:85:d1:18:d2:13:3d:a1:1c:5e:f5:36:83:
41:bd:ba:62:6f:dd:25:d7:59:82:1f:85:11:5c:77:5d:da:09:
67:bf:28:a5:73:0f:2c:96:7b:fc:13:a0:91:b5:52:d5:9e:18:
54:95:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:38 2026 by rpki-client