Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa
File: PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa (raw, json)
Hash identifier: 4mulaDEjjaiJyNExN4M0awWM7+bcCqHjl7wFr6Imm1M=
Subject key identifier: 3C:32:98:D1:83:71:81:F2:FE:C1:DB:47:0B:B3:8C:A9:B1:91:CB:A4
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019C43D2790909A2E49CB3F43421A136C2DB
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa
Signing time: Mon 09 Feb 2026 19:13:12 +0000
ASPA not before: Mon 09 Feb 2026 19:13:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 207994
Providers: AS: 6830
AS: 35133
AS: 41441
AS: 50263
AS: 50952
AS: 56393
AS: 56584
AS: 64289
AS: 206221
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:d2:79:09:09:a2:e4:9c:b3:f4:34:21:a1:36:c2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Feb 9 19:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c3298d1837181f2fec1db470bb38ca9b191cba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:10:f9:d8:b6:68:f6:d6:98:47:44:a1:8c:
01:8a:18:2d:0b:a2:28:bd:1d:5c:8d:98:c0:0d:0b:
fd:1e:2a:6b:06:b1:64:5f:c0:e5:a0:61:f4:01:3b:
c3:95:37:c2:84:a3:5c:ac:62:4e:25:ca:99:49:13:
f8:39:40:95:4d:51:a6:74:4a:24:e2:3f:51:bc:f5:
c9:95:b5:62:74:1b:96:4a:92:75:f3:9e:1f:f9:d2:
d7:63:03:59:fa:fb:19:a4:70:de:33:38:88:43:5d:
3a:4c:46:29:2b:a4:18:b2:34:5a:82:d4:e9:74:e4:
03:8c:12:2b:b4:74:df:c5:f5:ea:b2:0d:1a:a7:7d:
7c:ad:d5:5d:f9:fa:2c:2d:a9:d1:65:e4:65:f0:5f:
77:e5:61:4c:7b:ac:9e:18:b2:35:c7:a9:09:30:28:
40:22:16:38:57:82:e8:47:8c:59:33:40:61:7d:22:
c5:f3:58:52:fb:3f:b0:54:98:c5:41:87:b7:ce:3f:
cc:de:5a:dc:94:28:ff:31:75:db:7c:fe:5c:9f:8d:
db:e5:bb:9d:8e:7f:1b:64:de:20:ca:5f:b0:19:81:
93:3d:d5:5b:fb:60:5e:b8:75:ae:5c:7c:ca:05:80:
d6:bf:76:4d:1e:6e:bb:20:55:6d:c1:e8:3d:b3:46:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:98:D1:83:71:81:F2:FE:C1:DB:47:0B:B3:8C:A9:B1:91:CB:A4
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/PDKY0YNxgfL-wdtHC7OMqbGRy6Q.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207994
Signature Algorithm: sha256WithRSAEncryption
0a:2b:1d:f6:69:d9:16:58:5b:72:6e:ba:95:20:67:9c:f0:6c:
9a:ce:e3:e6:51:28:0c:02:9a:68:32:ab:13:b2:9c:fd:1b:19:
9d:ce:d3:b3:c2:36:65:33:41:8a:91:0d:b3:5c:71:68:25:2e:
f4:ee:31:b3:ae:79:ae:56:a0:e3:81:c9:a7:08:06:b0:5a:52:
49:ca:95:45:c3:92:98:88:48:93:9e:da:a2:f3:5a:ca:65:b1:
d5:82:ce:f6:ef:de:6a:2a:9d:0e:fd:54:31:2f:24:61:c1:79:
5d:74:72:4e:4b:a6:ad:5d:1b:f7:67:44:c4:35:58:50:b5:8d:
34:f2:9c:44:53:cc:54:57:b2:6e:a4:ef:40:3d:56:7b:1b:e5:
0c:3c:bb:63:43:30:7a:49:eb:98:c0:ad:b3:2e:f8:3c:88:73:
9b:e3:79:57:4d:db:0b:87:63:e6:33:2b:9f:12:2d:4a:cf:54:
44:6f:48:7e:b8:ab:fe:f9:6d:20:f1:06:45:a6:e1:82:f2:5d:
5f:d4:17:3c:8e:7d:37:c6:42:b8:21:ef:8e:d9:a9:0c:c5:72:
6f:81:ac:dd:3a:3e:45:bf:3c:3e:23:7a:8c:7d:02:3d:28:97:
fc:5f:7a:34:f5:65:88:3a:19:bb:e1:1e:37:dc:58:05:9e:ba:
52:00:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:09:42 2026 by rpki-client