Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/3csJZekX_cLNjU2Men_fceOPKEA.asa
File: 3csJZekX_cLNjU2Men_fceOPKEA.asa (raw, json)
Hash identifier: irrhjgoJp1T9LHez28rBpjrfAsWLiO1IsgQaRVT71is=
Subject key identifier: DD:CB:09:65:E9:17:FD:C2:CD:8D:4D:8C:7A:7F:DF:71:E3:8F:28:40
Certificate issuer: /CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Certificate serial: 019FF22D6E4187414BD3CD328718A3708A57
Authority key identifier: D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/3csJZekX_cLNjU2Men_fceOPKEA.asa
Signing time: Tue 11 Aug 2026 18:54:51 +0000
ASPA not before: Tue 11 Aug 2026 18:54:51 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214763
Providers: AS: 24381
AS: 29632
AS: 41051
AS: 47272
AS: 58057
AS: 209533
AS: 211509
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:2d:6e:41:87:41:4b:d3:cd:32:87:18:a3:70:8a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b0e8686f7dab1f64c80d4382c3c5949ff11dbf
Validity
Not Before: Aug 11 18:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddcb0965e917fdc2cd8d4d8c7a7fdf71e38f2840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:13:6b:5e:a4:dd:85:34:9c:c9:7b:f1:2a:
99:84:5e:01:c2:c8:ee:e8:92:2d:95:7f:7a:e6:6f:
e1:63:94:2e:28:5f:4f:3e:6c:2e:76:40:17:d2:b0:
0b:d9:92:4f:0d:7a:7b:c1:f8:90:b1:be:c6:2a:ef:
00:80:8e:0a:cb:f9:88:26:b2:fb:df:0d:5b:fe:ae:
d3:a6:d8:c6:52:51:12:d5:86:56:97:33:a8:d6:ef:
98:57:7c:0d:af:7a:96:94:00:cf:ae:d0:ad:d8:a4:
00:90:46:b8:e8:cd:48:d4:7b:8b:c0:27:78:bd:47:
98:10:33:4c:4c:0f:59:8d:a9:35:15:2a:06:55:aa:
a8:25:66:9d:4c:0e:cb:4e:3d:55:b7:ff:b9:6d:ab:
bc:38:94:39:84:8a:b8:5b:6f:c0:a4:6c:39:dd:1f:
a9:45:88:2b:6b:de:c0:97:eb:9d:d7:72:71:d7:47:
a4:b6:e3:0a:6a:f0:37:9d:80:4c:6c:4b:f8:1e:96:
ee:a2:95:f7:4b:cb:25:d5:3b:c3:57:2c:25:f1:78:
e3:15:3c:e9:24:1c:6d:17:cf:c3:45:f6:3c:56:82:
a2:82:fa:5c:e4:d9:95:f2:d9:34:9e:76:c7:bd:26:
52:0c:bb:a8:5e:c5:e9:06:35:1e:72:fa:c7:12:fc:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:09:65:E9:17:FD:C2:CD:8D:4D:8C:7A:7F:DF:71:E3:8F:28:40
X509v3 Authority Key Identifier:
keyid:D1:B0:E8:68:6F:7D:AB:1F:64:C8:0D:43:82:C3:C5:94:9F:F1:1D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bDoaG99qx9kyA1DgsPFlJ_xHb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/3csJZekX_cLNjU2Men_fceOPKEA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/456a2b-8755-4bfc-8b6c-dbbc254d1c6c/1/0bDoaG99qx9kyA1DgsPFlJ_xHb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214763
Signature Algorithm: sha256WithRSAEncryption
21:54:f5:2a:0c:40:a6:8c:9c:0f:47:1e:c6:10:4f:0e:49:03:
c5:3a:13:f7:c2:91:41:4a:81:c0:4b:a5:54:9a:32:bc:f5:e1:
7d:45:25:a4:8e:50:27:7c:cf:82:81:4d:0c:3b:35:e0:bc:ee:
15:e4:83:59:c4:50:3d:6f:5b:39:3a:81:48:bd:90:22:09:e7:
e3:4f:fa:72:d6:29:f8:e9:31:35:3b:dc:41:2c:38:4d:bc:1d:
d9:f9:dd:b7:04:3f:d1:fa:a2:b8:7d:5e:cd:2e:ae:90:df:e9:
62:ee:bd:77:90:02:c5:e7:78:67:bc:bb:8d:58:b3:f7:77:4c:
f8:ea:2a:3e:d8:30:70:77:ad:6a:ca:e3:20:ab:72:aa:3d:06:
c7:76:91:46:92:c8:29:de:14:b7:f3:9a:77:5d:f6:29:74:2f:
67:5a:69:e5:3f:69:98:a7:31:a7:d5:f1:ac:48:fa:d8:9b:3a:
0b:49:4e:cd:81:83:ca:2b:3f:8b:99:a7:9d:af:8b:f0:11:5a:
7c:6c:2a:63:95:47:b3:d2:06:d6:00:d1:8e:ed:d8:07:3f:de:
b7:28:31:08:e7:93:60:1d:54:cd:09:05:6c:66:cb:46:64:a0:
a5:49:e9:19:ce:7f:fe:3d:e2:34:05:ec:8e:2b:d1:f1:e0:36:
89:31:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:49 2026 by rpki-client