Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/ndpzPSk3H3xw28qda6myjkObuX0.asa
File: ndpzPSk3H3xw28qda6myjkObuX0.asa (raw, json)
Hash identifier: 1DRwpJ/PoAaH3WDBi1DxoV7aRX9CY7XDRgR72GoOVOc=
Subject key identifier: 9D:DA:73:3D:29:37:1F:7C:70:DB:CA:9D:6B:A9:B2:8E:43:9B:B9:7D
Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial: 019CC7E347DF10776C846369C03824CE7E05
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/ndpzPSk3H3xw28qda6myjkObuX0.asa
Signing time: Sat 07 Mar 2026 10:41:26 +0000
ASPA not before: Sat 07 Mar 2026 10:41:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209693
Providers: AS: 9002
AS: 30823
AS: 49581
AS: 49612
AS: 51765
AS: 62255
AS: 215730
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:e3:47:df:10:77:6c:84:63:69:c0:38:24:ce:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Validity
Not Before: Mar 7 10:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dda733d29371f7c70dbca9d6ba9b28e439bb97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:04:6c:7f:d3:aa:9f:5e:ad:55:58:4a:91:
aa:b8:70:81:70:2e:86:14:d6:3d:06:f2:af:a1:cd:
73:24:a6:ed:9b:44:ee:53:04:f6:df:6e:13:da:f0:
64:19:47:3d:01:86:08:ca:5f:d0:bc:d9:20:bd:4e:
b5:b1:25:da:6e:5f:f1:88:07:5d:54:80:14:f5:21:
dc:66:58:ed:17:1d:b1:42:c3:0c:8c:07:21:a0:75:
b7:56:a6:26:2b:e3:4d:32:84:23:ce:35:ec:d6:d7:
e3:03:1e:d1:dd:b7:61:9f:de:33:e5:85:1f:c3:0f:
33:e0:82:b9:0c:b6:cc:72:7d:49:88:2e:1d:37:1a:
75:06:e6:79:39:a9:cc:69:73:57:4a:0c:d4:cf:63:
74:e0:bb:d3:b4:62:b6:9a:c9:91:77:af:47:c9:dd:
ea:0f:0c:17:9e:61:4e:20:02:ca:2a:a3:d8:8a:4a:
37:21:ea:fa:0b:96:ee:55:fa:3f:93:57:ab:c8:32:
e5:19:5e:3a:ba:87:2e:d3:30:86:58:95:53:89:fa:
b0:da:33:f3:61:93:db:56:03:4c:c2:6f:d7:07:a6:
1c:5f:2e:a5:5d:27:82:6f:a8:af:79:ab:63:53:14:
0c:78:bb:56:8a:da:54:74:b7:1e:7b:51:ca:ae:32:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:73:3D:29:37:1F:7C:70:DB:CA:9D:6B:A9:B2:8E:43:9B:B9:7D
X509v3 Authority Key Identifier:
keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/ndpzPSk3H3xw28qda6myjkObuX0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209693
Signature Algorithm: sha256WithRSAEncryption
8d:31:e3:02:2e:b8:39:28:4d:e6:84:ee:1d:18:14:9a:e9:40:
fe:ee:e4:cd:91:18:90:8c:32:14:00:26:52:26:f2:d2:af:01:
ef:ad:39:50:5e:8e:c8:2f:ab:d3:9c:33:9c:c9:12:70:30:76:
e0:1d:a4:b1:82:89:5e:6c:6b:70:86:e9:f8:d6:c7:4f:0e:c3:
5a:29:5e:cb:18:0f:6d:1c:99:99:9f:cc:b6:36:7c:f0:73:8d:
d0:b4:40:30:f0:2e:bd:84:2d:1a:41:35:1d:9f:04:ba:1a:40:
94:e4:53:1e:26:a2:17:32:63:31:52:56:22:f4:52:9a:23:2d:
f9:99:eb:13:0c:81:a7:3a:fd:c3:86:f4:66:79:20:b2:5a:ef:
6e:74:8f:f7:82:12:ae:96:d7:7a:dc:49:92:a2:bf:11:4e:92:
a6:8d:ed:d7:48:45:4f:10:0f:8d:20:ec:04:49:bb:86:32:23:
25:31:5a:7d:b0:aa:38:55:4d:2a:a6:31:f6:c2:fb:71:0b:92:
ec:ce:6f:e0:5f:c0:bc:a6:74:e0:58:f6:a9:7b:75:4a:4f:0d:
b9:d8:a7:8f:9f:4a:e3:8f:bc:fe:b9:e4:ef:f0:0e:62:c7:b5:
d6:b6:21:6b:01:8f:88:39:68:ee:8e:1b:ce:f5:43:9f:fc:c3:
84:dd:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:45 2026 by rpki-client