Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/8PYO221ijm73GqludhO0afrN2sw.asa
File: 8PYO221ijm73GqludhO0afrN2sw.asa (raw, json)
Hash identifier: cTow358n5VSy6y4+z4cDy48Lusx/C9hmIjmQirPwShY=
Subject key identifier: F0:F6:0E:DB:6D:62:8E:6E:F7:1A:A9:6E:76:13:B4:69:FA:CD:DA:CC
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 019DCA47F5516C5B52E5DBCC7168C5922B31
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/8PYO221ijm73GqludhO0afrN2sw.asa
Signing time: Sun 26 Apr 2026 14:53:26 +0000
ASPA not before: Sun 26 Apr 2026 14:53:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214061
Providers: AS: 60068
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:47:f5:51:6c:5b:52:e5:db:cc:71:68:c5:92:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Apr 26 14:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0f60edb6d628e6ef71aa96e7613b469facddacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:9c:f3:70:3a:5e:54:3f:6e:69:06:e1:31:
9b:59:43:37:d7:61:bf:74:bf:f8:93:ca:15:0c:4a:
9d:d1:b2:b4:e1:80:53:a6:7c:fb:24:f2:70:24:bc:
3f:2e:87:cd:8f:e3:e0:eb:c1:41:5c:16:1c:73:00:
cc:5e:1b:1a:85:c0:e3:d4:28:04:f8:ca:ad:84:0c:
8c:72:c7:2d:ec:6d:5e:55:4f:b8:17:ba:86:25:69:
b5:33:28:47:b9:84:af:99:00:a7:3b:66:d5:bd:22:
96:12:76:dc:13:f5:21:9d:83:e5:37:ac:67:72:15:
05:2c:bc:b2:68:1f:57:80:b4:98:6d:29:f6:16:a5:
e1:14:ae:06:31:35:6a:dd:09:f5:06:49:33:fb:93:
6d:0b:58:c9:a9:29:dd:dc:18:4f:75:18:82:c3:6c:
18:85:af:ae:01:75:6e:89:12:8d:62:57:f4:36:ce:
44:9e:69:c2:0b:69:db:11:65:aa:1b:9b:77:dd:7b:
ae:56:2e:73:4e:9e:bc:ee:e9:f2:73:ea:bb:51:fe:
ec:4a:b6:8a:f7:28:fc:99:a7:94:e0:eb:fa:c7:58:
a4:71:9a:c6:66:96:a3:4b:5d:8f:19:16:5a:ed:fb:
93:bc:0d:27:74:82:7e:c2:91:6f:32:01:34:b2:12:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:0E:DB:6D:62:8E:6E:F7:1A:A9:6E:76:13:B4:69:FA:CD:DA:CC
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/8PYO221ijm73GqludhO0afrN2sw.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214061
Signature Algorithm: sha256WithRSAEncryption
12:9b:dc:ad:59:ac:22:81:46:a5:8f:92:5a:17:9d:89:fc:6b:
5d:06:32:d6:e5:47:25:34:c2:ac:ce:c0:5d:64:1d:e9:69:bb:
1f:c5:71:4e:8b:08:d6:a1:e2:47:c4:2f:5e:a8:28:01:82:12:
d2:7a:e1:5f:cc:e4:a3:84:7a:d8:01:3e:c2:0b:40:8d:03:88:
93:af:37:5a:4d:9e:94:33:84:2d:08:f2:7d:2f:39:2b:94:fc:
da:c2:7d:18:17:0d:c9:d7:d2:2c:a6:3a:be:b3:04:3c:3f:d5:
8c:75:15:5e:09:d8:12:cb:d7:4b:68:09:cf:85:76:4f:78:4c:
2d:e3:93:c1:e3:2d:7b:b3:d6:13:64:ec:8e:b5:40:89:b7:46:
32:84:58:25:5f:72:a9:96:7b:f9:cf:d5:53:6a:ac:70:f5:82:
80:d9:53:1c:c3:1b:46:b8:2b:c0:3f:4c:10:e3:dd:c1:40:fa:
40:f9:db:99:a2:a5:a4:d3:ca:c4:ba:42:96:70:54:e2:14:a4:
16:43:0b:39:5a:88:22:b0:66:b1:3c:ac:53:72:42:11:48:ec:
a9:bd:ce:b5:3e:f7:b0:4b:a9:80:48:2c:1c:3c:82:d9:eb:a1:
b2:ba:d3:47:d8:ed:85:ad:45:e0:7d:47:06:36:da:2f:74:7a:
19:85:40:bd
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3KR/VRbFtS5dvMcWjFkisxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzQ5MDg1NDU2M2QzMjIyMmU5YWNlNWFkOGE2NDllOWI0
YTE3MjkwHhcNMjYwNDI2MTQ1MzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGY2MGVkYjZkNjI4ZTZlZjcxYWE5NmU3NjEzYjQ2OWZhY2RkYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r6c83A6XlQ/bmkG4TGbWUM312G/
dL/4k8oVDEqd0bK04YBTpnz7JPJwJLw/LofNj+Pg68FBXBYccwDMXhsahcDj1CgE
+MqthAyMcsct7G1eVU+4F7qGJWm1MyhHuYSvmQCnO2bVvSKWEnbcE/UhnYPlN6xn
chUFLLyyaB9XgLSYbSn2FqXhFK4GMTVq3Qn1Bkkz+5NtC1jJqSnd3BhPdRiCw2wY
ha+uAXVuiRKNYlf0Ns5EnmnCC2nbEWWqG5t33XuuVi5zTp687unyc+q7Uf7sSraK
9yj8maeU4Ov6x1ikcZrGZpajS12PGRZa7fuTvA0ndIJ+wpFvMgE0shL8nwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPD2DtttYo5u9xqpbnYTtGn6zdrMMB8GA1UdIwQY
MBaAFO40kIVFY9MiIums5a2KZJ6bShcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMt
NDVjNTNiN2VmOWZhLzEvOFBZTzIyMWlqbTczR3FsdWRoTzBhZnJOMnN3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMtNDVjNTNiN2VmOWZh
LzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNELTANBgkqhkiG
9w0BAQsFAAOCAQEAEpvcrVmsIoFGpY+SWhedifxrXQYy1uVHJTTCrM7AXWQd6Wm7
H8VxTosI1qHiR8QvXqgoAYIS0nrhX8zko4R62AE+wgtAjQOIk683Wk2elDOELQjy
fS85K5T82sJ9GBcNydfSLKY6vrMEPD/VjHUVXgnYEsvXS2gJz4V2T3hMLeOTweMt
e7PWE2TsjrVAibdGMoRYJV9yqZZ7+c/VU2qscPWCgNlTHMMbRrgrwD9MEOPdwUD6
QPnbmaKlpNPKxLpClnBU4hSkFkMLOVqIIrBmsTysU3JCEUjsqb3OtT73sEupgEgs
HDyC2euhsrrTR9jtha1F4H1HBjbaL3R6GYVAvQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:00:03 2026 by rpki-client