Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/xI3mSzA39zF43009qIs2M3pSe-k.asa
File: xI3mSzA39zF43009qIs2M3pSe-k.asa (raw, json)
Hash identifier: GlLSzFEifqmuA/Cp37rMhQ6UiPynz4DXqUCCB16h6fk=
Subject key identifier: C4:8D:E6:4B:30:37:F7:31:78:DF:4D:3D:A8:8B:36:33:7A:52:7B:E9
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019E20C9CDA0E737B6A84CD0D8E167CA17A3
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/xI3mSzA39zF43009qIs2M3pSe-k.asa
Signing time: Wed 13 May 2026 10:02:36 +0000
ASPA not before: Wed 13 May 2026 10:02:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211715
Providers: AS: 41051
AS: 209533
AS: 212895
AS: 213449
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c9:cd:a0:e7:37:b6:a8:4c:d0:d8:e1:67:ca:17:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: May 13 10:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c48de64b3037f73178df4d3da88b36337a527be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:41:e7:f4:a0:c3:b6:f9:83:18:02:45:c2:
4f:fd:3e:97:07:06:00:43:cd:13:bf:20:60:25:48:
83:8d:d1:03:50:ae:98:61:eb:27:a8:ed:7d:6b:8b:
83:16:24:78:52:bb:e2:4a:dd:30:63:34:68:9c:f2:
90:70:82:7e:ad:15:cf:ab:8b:20:84:46:17:9e:c7:
5c:48:51:b2:0c:93:3b:58:d0:44:51:bc:b3:0e:62:
66:c4:38:2d:c7:f1:71:42:cd:18:43:81:3c:3c:45:
1b:c8:f6:87:ea:e0:6d:3d:43:12:84:14:e5:0f:6a:
e7:46:97:9a:cb:2a:fd:49:54:41:f2:f7:a3:1d:cc:
32:ca:0f:23:e3:09:fb:e2:f8:97:2c:13:60:4d:56:
d3:dd:f6:dd:89:46:79:57:21:b4:27:50:40:59:ce:
b1:d3:27:f2:7e:7b:79:ea:17:36:e3:73:f2:a9:68:
df:ea:89:00:fe:b2:2c:ae:1b:c6:58:91:80:74:b1:
c2:bf:96:33:8c:6e:9b:e4:12:22:7c:dd:b1:c0:fa:
7e:c2:37:8d:f9:26:76:0a:51:ba:d8:13:5c:8e:50:
1f:a2:fc:9e:14:ab:d6:34:36:b6:42:6c:65:6d:7a:
ba:2c:ac:a3:6b:a7:26:2a:15:2e:40:93:28:2c:92:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:E6:4B:30:37:F7:31:78:DF:4D:3D:A8:8B:36:33:7A:52:7B:E9
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/xI3mSzA39zF43009qIs2M3pSe-k.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211715
Signature Algorithm: sha256WithRSAEncryption
ae:2d:89:0c:53:85:ce:cf:14:8f:87:6e:70:cd:6b:8c:d3:59:
19:91:08:d3:58:e3:78:78:c0:40:e3:87:d1:d8:83:34:b2:3e:
68:b7:c1:a2:02:cd:2f:43:48:c5:87:42:2d:61:7f:5a:e2:c5:
ab:cb:97:ba:9d:cc:69:e7:de:bd:92:ae:0b:fe:51:f9:2a:28:
85:af:74:a5:54:2e:90:04:c3:bc:42:6b:21:3d:d6:95:d5:72:
82:68:e3:68:d6:5f:cf:b8:23:10:67:71:ee:71:83:14:49:f5:
00:b9:57:8b:fc:5a:8d:9e:8b:42:c8:d2:4e:8c:46:31:31:49:
06:a0:b4:79:ee:ab:5f:54:0c:99:3f:38:0c:2a:4d:3b:8b:25:
aa:3b:fa:82:9f:3e:26:39:e0:a9:43:6a:c6:03:38:15:ce:c9:
78:1a:3e:c5:ff:60:ed:e6:13:c5:87:ce:ed:6b:e1:74:c7:d0:
e2:34:d6:9c:6e:4f:34:c3:30:ef:c0:fb:30:3b:ac:25:f6:29:
e5:a9:8b:ae:3e:c9:14:3a:0e:66:df:7b:28:d3:fe:c2:55:82:
95:5d:fd:3d:27:ae:f8:37:6e:b9:c7:6e:3f:e7:d8:a0:94:c0:
0e:9d:72:57:ca:c4:ad:f9:be:04:05:50:67:75:42:de:e9:dc:
db:de:36:4f
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAZ4gyc2g5ze2qEzQ2OFnyhejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2YxOTFhOGRiYmYxZjEzMTQ3NDk3NTM1OGYyNDQ0ZDY5
NTBlODIwHhcNMjYwNTEzMTAwMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDhkZTY0YjMwMzdmNzMxNzhkZjRkM2RhODhiMzYzMzdhNTI3YmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY5B5/Sgw7b5gxgCRcJP/T6XBwYA
Q80TvyBgJUiDjdEDUK6YYesnqO19a4uDFiR4UrviSt0wYzRonPKQcIJ+rRXPq4sg
hEYXnsdcSFGyDJM7WNBEUbyzDmJmxDgtx/FxQs0YQ4E8PEUbyPaH6uBtPUMShBTl
D2rnRpeayyr9SVRB8vejHcwyyg8j4wn74viXLBNgTVbT3fbdiUZ5VyG0J1BAWc6x
0yfyfnt56hc243PyqWjf6okA/rIsrhvGWJGAdLHCv5YzjG6b5BIifN2xwPp+wjeN
+SZ2ClG62BNcjlAfovyeFKvWNDa2QmxlbXq6LKyja6cmKhUuQJMoLJJUMwIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFMSN5kswN/cxeN9NPaiLNjN6UnvpMB8GA1UdIwQY
MBaAFPt/GRqNu/HxMUdJdTWPJETWlQ6CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zOFpHbzI3OGZFeFIwbDFOWThrUk5hVkRvSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWEx
LTg3NDdkYWE1OTNmMi8xL3hJM21TekEzOXpGNDMwMDlxSXMyTTNwU2Utay5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWExLTg3NDdkYWE1OTNm
Mi8xLzEtMzhaR28yNzhmRXhSMGwxTlk4a1JOYVZEb0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzsDMA0GCSqG
SIb3DQEBCwUAA4IBAQCuLYkMU4XOzxSPh25wzWuM01kZkQjTWON4eMBA44fR2IM0
sj5ot8GiAs0vQ0jFh0ItYX9a4sWry5e6ncxp5969kq4L/lH5KiiFr3SlVC6QBMO8
QmshPdaV1XKCaONo1l/PuCMQZ3HucYMUSfUAuVeL/FqNnotCyNJOjEYxMUkGoLR5
7qtfVAyZPzgMKk07iyWqO/qCnz4mOeCpQ2rGAzgVzsl4Gj7F/2Dt5hPFh87ta+F0
x9DiNNacbk80wzDvwPswO6wl9inlqYuuPskUOg5m33so0/7CVYKVXf09J674N265
x24/59iglMAOnXJXysSt+b4EBVBndULe6dzb3jZP
-----END CERTIFICATE-----
Generated at Fri May 15 05:35:43 2026 by rpki-client