Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa
File: rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa (raw, json)
Hash identifier: bXRFXUqc3+i7IbvfhYLLcVD+F3j7EW9sM7pvUyDECaU=
Subject key identifier: AD:3F:08:BF:FC:67:24:FC:EE:0E:59:0E:5A:CE:FF:F1:F3:90:04:54
Certificate issuer: /CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Certificate serial: 019CB2EF3413712BB35A16B45984245965F0
Authority key identifier: B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa
Signing time: Tue 03 Mar 2026 09:02:26 +0000
ASPA not before: Tue 03 Mar 2026 09:02:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 203757
Providers: AS: 41108
AS: 204680
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:ef:34:13:71:2b:b3:5a:16:b4:59:84:24:59:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7eda202ff1d7f35127b11dea1d50f367ea2e99a
Validity
Not Before: Mar 3 09:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad3f08bffc6724fcee0e590e5acefff1f3900454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:19:3f:d0:94:09:a2:9f:05:c2:b1:c4:7b:
fe:da:a0:b7:75:6b:d3:37:26:fb:f9:6a:f1:61:86:
9b:ee:aa:06:fb:99:1c:d6:4b:c1:22:b5:36:45:6a:
36:1d:7f:ee:ca:d5:6f:c6:2c:2f:7b:d8:ec:00:3c:
11:d5:ad:6f:94:7c:0c:0c:80:37:3c:68:8b:f2:9c:
99:36:a7:2c:22:79:3b:d4:c4:4f:77:3f:48:85:5f:
1d:15:5e:38:a4:5c:5a:d2:cc:c9:53:72:ce:a0:53:
ed:09:10:39:23:06:ee:ed:2a:f1:4d:b5:63:4c:6e:
9a:7f:b8:ed:ba:7e:79:7c:0e:13:87:22:2e:9f:82:
60:30:24:9e:0a:61:e9:8b:b6:b7:c5:97:7d:cf:4c:
4b:aa:09:67:81:de:82:12:33:a7:29:31:04:79:61:
04:56:7c:4b:ca:31:b0:c0:57:f9:66:0b:2a:b2:7b:
fe:4b:08:da:f6:3f:db:af:cc:de:75:a8:9f:8b:6b:
5e:b7:c9:6f:6f:41:9a:11:85:46:86:1f:4d:4e:0d:
3b:e8:76:2b:ad:71:df:e2:26:a8:08:3a:9f:04:a6:
2d:b1:17:97:b3:3f:7e:62:df:41:05:10:35:3e:cd:
18:bd:93:f7:13:8a:d0:1c:09:10:d8:8a:a3:ef:7a:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:08:BF:FC:67:24:FC:EE:0E:59:0E:5A:CE:FF:F1:F3:90:04:54
X509v3 Authority Key Identifier:
keyid:B7:ED:A2:02:FF:1D:7F:35:12:7B:11:DE:A1:D5:0F:36:7E:A2:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-2iAv8dfzUSexHeodUPNn6i6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/rT8Iv_xnJPzuDlkOWs7_8fOQBFQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6ae76d-b599-439e-b17a-2bff1a7000a9/1/t-2iAv8dfzUSexHeodUPNn6i6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203757
Signature Algorithm: sha256WithRSAEncryption
65:5d:f5:aa:75:10:a3:f3:5b:22:c7:03:c2:d4:75:3e:e0:f1:
21:80:c3:fd:62:70:d2:a5:3d:b8:d6:e6:e8:65:0b:f9:01:8f:
cf:f3:61:42:35:77:40:c9:d7:65:de:0e:eb:9b:50:e9:85:33:
2a:24:a9:ec:9e:55:7e:2c:95:f6:b0:ab:7a:67:04:df:84:31:
8e:25:bc:99:2f:41:bb:c4:28:38:cf:02:bd:b2:7c:18:e7:8d:
09:16:c3:32:43:1e:6d:d3:03:58:4d:2e:45:98:0b:47:bf:0e:
86:05:f8:e0:06:87:4c:7a:e3:c3:ba:cb:1c:e7:c3:51:74:0c:
f5:cb:62:08:15:6f:da:ae:a3:db:cf:0c:8c:40:b8:94:f8:45:
0c:50:2d:07:eb:2a:9a:2d:09:c7:58:a2:19:e1:c7:ee:ab:79:
bd:11:4a:71:23:3e:95:9a:90:3e:0e:f3:87:23:66:06:ac:ec:
a4:d0:3b:52:a0:47:d5:60:2b:08:7d:db:3a:fd:20:83:0b:41:
7b:f1:03:e4:3d:99:98:ae:6e:60:6f:9d:7f:ee:c7:1d:8f:7d:
6f:3c:1e:de:0e:e8:17:b4:5b:2c:2d:71:79:11:88:0c:0f:6d:
61:a5:10:56:90:35:89:73:4a:f4:11:26:8c:e2:f4:41:65:41:
f8:cb:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:03 2026 by rpki-client