Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/QEdTUDegev0KaZfSCuf6zWuoigo.asa
File: QEdTUDegev0KaZfSCuf6zWuoigo.asa (raw, json)
Hash identifier: fGncvP1ZkzQxQhxOXkKKZ+OGZeCOlyGt6Cb/L36Th+s=
Subject key identifier: 40:47:53:50:37:A0:7A:FD:0A:69:97:D2:0A:E7:FA:CD:6B:A8:8A:0A
Certificate issuer: /CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Certificate serial: 019D44DA6A770C4426755A5565F980853544
Authority key identifier: 95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/QEdTUDegev0KaZfSCuf6zWuoigo.asa
Signing time: Tue 31 Mar 2026 17:04:17 +0000
ASPA not before: Tue 31 Mar 2026 17:04:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201957
Providers: AS: 11967
AS: 16276
AS: 41051
AS: 209533
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 13:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:da:6a:77:0c:44:26:75:5a:55:65:f9:80:85:35:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2b6a6f387bea6e8bd2e952a236909392b0713
Validity
Not Before: Mar 31 17:04:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4047535037a07afd0a6997d20ae7facd6ba88a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:0b:ea:0c:1b:42:e3:ed:a0:ce:0e:f9:98:
69:eb:1b:6f:a1:58:e2:93:ab:eb:28:d3:73:64:b4:
ce:32:ed:36:a9:1d:25:19:3a:3a:4d:37:f4:be:1b:
b4:d1:c0:18:27:33:a9:7f:85:d9:8f:2e:92:23:98:
f2:2e:f2:9c:24:f1:3b:30:24:d6:aa:ca:19:c1:3b:
98:d6:55:f0:5c:6c:ae:b7:82:24:57:55:84:c7:38:
c4:72:02:81:f3:88:71:1e:7f:7c:e4:17:fd:61:f7:
ae:5d:6e:f6:f1:73:7d:77:ee:ba:82:54:3d:03:df:
78:34:62:6e:c0:8e:3e:2d:ba:c5:d4:b3:cb:f1:82:
25:7f:cc:78:b4:43:91:03:28:28:06:fa:9f:03:16:
fc:5d:37:28:76:86:c8:65:5f:00:38:33:f7:ad:9d:
b4:49:bc:81:bc:ee:f1:60:68:b2:40:98:5d:b8:72:
47:2a:5e:17:33:d7:5f:83:1a:65:3b:7a:89:bb:a2:
76:90:b4:55:a2:6d:1a:c5:47:d2:e9:f2:d5:16:e8:
da:e1:77:a4:fa:1a:13:53:be:bc:41:db:a0:bf:7e:
71:c4:94:eb:59:5c:31:d0:08:3e:d9:f4:58:ca:04:
b5:20:d9:6b:b9:6f:d4:0c:90:e7:f1:b2:52:9f:8d:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:53:50:37:A0:7A:FD:0A:69:97:D2:0A:E7:FA:CD:6B:A8:8A:0A
X509v3 Authority Key Identifier:
keyid:95:A2:B6:A6:F3:87:BE:A6:E8:BD:2E:95:2A:23:69:09:39:2B:07:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laK2pvOHvqbovS6VKiNpCTkrBxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/QEdTUDegev0KaZfSCuf6zWuoigo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9299fc-b668-4f7e-bf0d-5aa9a49d3b9e/1/laK2pvOHvqbovS6VKiNpCTkrBxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201957
Signature Algorithm: sha256WithRSAEncryption
4c:70:de:f9:5b:02:0f:93:d0:16:2a:3c:9d:2e:ec:a1:ef:b6:
1d:d4:e8:d4:11:d4:0d:99:78:b9:f9:37:17:8e:b9:f2:f9:97:
8b:a5:2a:ec:73:7e:82:92:9d:15:b5:2b:15:97:e0:0c:e0:be:
98:c2:2d:22:a1:6b:9c:6e:48:29:34:be:e0:7a:63:38:c7:37:
8c:4a:d3:d7:40:cb:67:91:d9:d4:ba:c5:e5:a3:db:6e:53:c1:
e8:0b:e9:f1:df:32:46:a8:11:5e:4e:44:dd:43:d0:c5:02:b8:
fb:d8:60:cc:cb:83:1f:b0:1c:52:f9:a4:8b:14:0e:3d:0c:d4:
11:43:51:96:32:2a:32:ef:e5:a4:4b:e3:a3:1b:34:bf:fb:a1:
48:5b:f3:73:60:7e:2e:93:5f:90:07:8f:ab:d8:b1:ef:fe:38:
0e:6b:47:54:24:0a:c2:d3:cf:72:c9:fc:40:75:bb:0b:b7:1d:
c5:7f:e9:cc:87:4c:5f:48:73:5f:63:5e:88:fd:29:0b:cd:b5:
7c:ce:b3:f4:cf:65:bf:4f:5a:10:0b:b5:e6:64:42:3a:2d:db:
f9:8b:b7:33:16:7e:89:54:9f:85:33:0b:b0:56:6f:dd:3d:53:
12:c7:5a:36:d7:b3:a4:ed:e5:8a:1b:6a:88:be:d6:f9:d5:c0:
d0:46:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 23:43:06 2026 by rpki-client