Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/1-OJG4cixSLw4XZgWpAd1qWjHEVE.asa
File: 1-OJG4cixSLw4XZgWpAd1qWjHEVE.asa (raw, json)
Hash identifier: K8MI4BDbf1s2PQxtv/mRyafnYrH8cc8Lx7UABQsjM0k=
Subject key identifier: F8:E2:46:E1:C8:B1:48:BC:38:5D:98:16:A4:07:75:A9:68:C7:11:51
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 01A1C42FB5C9EF43663948C9A274B9575E2F
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/1-OJG4cixSLw4XZgWpAd1qWjHEVE.asa
Signing time: Tue 10 Nov 2026 06:40:23 +0000
ASPA not before: Tue 10 Nov 2026 06:40:23 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201345
Providers: AS: 11967
AS: 20473
AS: 31898
AS: 41051
AS: 197324
AS: 209533
AS: 211358
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:2f:b5:c9:ef:43:66:39:48:c9:a2:74:b9:57:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Nov 10 06:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8e246e1c8b148bc385d9816a40775a968c71151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:e3:e9:72:f4:84:32:97:cc:4c:53:ee:f2:
36:91:fa:08:80:2e:6a:2d:62:a8:13:4e:de:9b:ac:
3e:cd:9e:ed:39:d4:3e:ed:8f:c9:a2:8d:34:ee:98:
45:a4:8a:a7:5c:ab:15:0b:e0:f3:61:9c:07:81:47:
09:67:44:76:c4:6f:86:b1:09:15:6e:6b:33:f3:b5:
fc:66:99:09:1d:f1:2e:80:a3:9c:9b:e9:3b:6f:58:
24:bf:7f:4b:06:9a:d4:4a:aa:9d:95:34:47:2c:4b:
84:e0:d9:72:06:9a:ad:db:46:07:8f:be:01:b3:1a:
22:4c:15:a0:ef:5b:db:eb:79:ff:16:7a:18:7a:ee:
8b:91:d1:3b:8b:7e:10:a9:4e:88:93:7f:bd:bc:c9:
d7:71:89:f5:3f:79:ab:45:9c:8a:9a:26:68:f8:4a:
af:0a:0f:34:e1:5a:1e:62:7b:c8:9b:c6:ae:79:c1:
15:86:85:e6:34:8a:df:0c:f8:8e:2a:39:83:8f:4a:
40:fa:42:7a:2d:b9:79:55:31:69:06:93:8d:f8:fe:
3b:2c:e7:b9:87:a3:96:83:05:70:bf:6f:31:e8:b4:
98:40:67:61:8f:34:92:f8:a3:b9:1d:20:f1:aa:74:
3f:7d:35:e5:bf:fd:87:e7:3d:9c:a7:d8:a9:95:1d:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:46:E1:C8:B1:48:BC:38:5D:98:16:A4:07:75:A9:68:C7:11:51
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/1-OJG4cixSLw4XZgWpAd1qWjHEVE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201345
Signature Algorithm: sha256WithRSAEncryption
3d:86:41:22:b6:6f:d6:3f:34:6d:3c:ea:67:96:04:c9:7a:dd:
fe:1b:c3:fa:08:b4:1b:c0:ce:a4:2a:f0:05:1d:e4:e5:7f:0d:
42:d9:8c:71:69:98:b0:75:fe:b1:1a:9d:44:41:99:e3:48:cb:
67:3b:f6:90:b4:32:ca:0a:2b:b2:0b:5e:b0:c3:be:10:2b:2a:
ee:ba:5a:db:34:fd:61:bb:e4:69:84:0a:7e:47:50:de:1b:15:
87:46:ec:61:c3:e8:15:ab:d8:2c:10:88:05:c3:ae:3a:04:22:
f6:c3:11:72:3f:85:75:5b:ab:c3:bd:a2:e5:b9:b9:22:f7:9e:
d8:ee:f0:21:bc:1b:e4:f7:41:12:73:9b:c9:df:59:f0:46:a3:
2e:84:b5:16:a0:55:25:28:35:09:1d:c6:ca:f7:04:1e:4c:19:
bb:a5:59:8b:72:10:b2:d1:1f:0d:ab:39:bd:52:21:c2:60:22:
60:cd:95:69:3b:e9:f0:f3:c2:8c:93:4d:15:e2:a1:48:6d:88:
db:94:20:a3:62:3c:0f:8c:d9:62:9e:11:b4:99:cc:0f:b9:d2:
ca:fb:aa:11:2e:78:30:66:86:0e:36:7e:f8:e8:f8:bb:16:fc:
b7:cb:0a:3c:6d:9b:31:01:fc:a8:9b:e6:7c:82:5d:ee:67:7a:
f5:bc:73:68
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgISAaHEL7XJ70NmOUjJonS5V14vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTM3ZWNlNzM1Zjk0YjMxNjcxMjExMTNkOGZkYTRkNmJm
M2I4ODgwHhcNMjYxMTEwMDY0MDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGUyNDZlMWM4YjE0OGJjMzg1ZDk4MTZhNDA3NzVhOTY4YzcxMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyzj6XL0hDKXzExT7vI2kfoIgC5q
LWKoE07em6w+zZ7tOdQ+7Y/Joo007phFpIqnXKsVC+DzYZwHgUcJZ0R2xG+GsQkV
bmsz87X8ZpkJHfEugKOcm+k7b1gkv39LBprUSqqdlTRHLEuE4NlyBpqt20YHj74B
sxoiTBWg71vb63n/FnoYeu6LkdE7i34QqU6Ik3+9vMnXcYn1P3mrRZyKmiZo+Eqv
Cg804VoeYnvIm8auecEVhoXmNIrfDPiOKjmDj0pA+kJ6Lbl5VTFpBpON+P47LOe5
h6OWgwVwv28x6LSYQGdhjzSS+KO5HSDxqnQ/fTXlv/2H5z2cp9iplR21wQIDAQAB
o4ICBTCCAgEwHQYDVR0OBBYEFPjiRuHIsUi8OF2YFqQHdaloxxFRMB8GA1UdIwQY
MBaAFEwTfs5zX5SzFnEhET2P2k1r87iIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAt
MmVmMjI1NjRhNDAwLzEvMS1PSkc0Y2l4U0x3NFhaZ1dwQWQxcVdqSEVWRS5hc2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvM2IyZmIxLTExNzgtNDg3Mi1iOGIwLTJlZjIyNTY0YTQw
MC8xL1RCTi16bk5mbExNV2NTRVJQWV9hVFd2enVJZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDEoEwDQYJKoZI
hvcNAQELBQADggEBAD2GQSK2b9Y/NG086meWBMl63f4bw/oItBvAzqQq8AUd5OV/
DULZjHFpmLB1/rEanURBmeNIy2c79pC0MsoKK7ILXrDDvhArKu66Wts0/WG75GmE
Cn5HUN4bFYdG7GHD6BWr2CwQiAXDrjoEIvbDEXI/hXVbq8O9ouW5uSL3ntju8CG8
G+T3QRJzm8nfWfBGoy6EtRagVSUoNQkdxsr3BB5MGbulWYtyELLRHw2rOb1SIcJg
ImDNlWk76fDzwoyTTRXioUhtiNuUIKNiPA+M2WKeEbSZzA+50sr7qhEueDBmhg42
fvjo+LsW/LfLCjxtmzEB/Kib5nyCXe5nevW8c2g=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:56:47 2026 by rpki-client