Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/oBxSXzs7vZVR5pIabH9fSfJ9YCM.asa
File: oBxSXzs7vZVR5pIabH9fSfJ9YCM.asa (raw, json)
Hash identifier: yiO3gUi5FUJST9MZ6eZJIcvD2fv1PnTYWKvJ/1y4JcI=
Subject key identifier: A0:1C:52:5F:3B:3B:BD:95:51:E6:92:1A:6C:7F:5F:49:F2:7D:60:23
Certificate issuer: /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial: 019ECD85B9DA4DC20EF66A5A6596138ADD4B
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/oBxSXzs7vZVR5pIabH9fSfJ9YCM.asa
Signing time: Mon 15 Jun 2026 23:02:33 +0000
ASPA not before: Mon 15 Jun 2026 23:02:33 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202118
Providers: AS: 47311
AS: 199524
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:85:b9:da:4d:c2:0e:f6:6a:5a:65:96:13:8a:dd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Validity
Not Before: Jun 15 23:02:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a01c525f3b3bbd9551e6921a6c7f5f49f27d6023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:d7:99:72:8e:66:f3:f4:9f:a9:88:2e:35:
c4:7b:d7:9a:3e:fe:66:4d:81:f8:eb:2e:ee:c8:83:
ab:ce:6f:c6:dc:2c:35:2f:64:9b:80:64:cc:8d:73:
9c:d6:6a:58:9d:89:5c:ec:57:2d:46:da:58:d3:2e:
4c:bb:ae:f6:c8:4d:74:0e:98:ff:2b:55:89:93:fd:
9b:22:21:f6:bc:21:06:d4:eb:2f:0a:ea:26:65:df:
4b:50:93:6d:fd:e5:f1:f7:46:f1:88:93:ab:ec:78:
88:5d:39:23:0e:7f:0f:9b:9b:39:38:a9:ca:df:88:
a4:66:b8:63:ab:aa:34:c4:6c:f8:c5:32:7b:35:12:
14:46:aa:4d:d2:34:ea:48:83:92:a8:2f:b6:5f:c2:
e2:31:b8:eb:0a:df:4d:5f:ae:7b:c7:ec:0f:f3:25:
78:55:86:46:dd:c7:e0:4d:a3:79:cb:d5:ff:8f:d7:
1d:f5:14:68:48:15:82:23:91:8a:9e:c2:f3:f6:28:
d3:63:9d:38:2b:58:6a:ed:f9:7f:34:09:5d:b9:29:
69:c4:9c:7c:2c:b9:0f:f1:70:5d:08:35:cd:8f:38:
a6:4b:a9:5e:3a:58:18:1c:b9:60:80:12:45:bc:2d:
bb:cd:6b:45:13:2b:c4:c0:68:1d:5b:ac:ca:f4:dc:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1C:52:5F:3B:3B:BD:95:51:E6:92:1A:6C:7F:5F:49:F2:7D:60:23
X509v3 Authority Key Identifier:
keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/oBxSXzs7vZVR5pIabH9fSfJ9YCM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202118
Signature Algorithm: sha256WithRSAEncryption
45:e0:31:35:f5:85:45:40:ee:da:fa:d0:c1:e5:ea:e3:00:e1:
57:93:f4:d5:07:5d:b6:04:f0:10:bd:a1:09:82:3d:7f:86:97:
bd:cd:25:f9:24:09:65:94:88:69:21:ad:6f:9d:40:8b:18:f3:
ef:1a:fe:2a:07:b4:42:dd:a7:55:e2:bf:cb:50:14:6d:19:b2:
cd:2c:09:2b:c7:66:5d:60:f5:92:ab:6d:c2:16:e0:97:70:df:
1a:7c:70:6a:b9:c9:4c:2b:54:d5:d4:4a:a1:ec:c1:8a:85:0a:
ad:d7:97:d8:2f:f2:8b:03:1a:ad:fd:b3:57:54:b1:69:c2:a5:
40:75:72:12:5c:35:01:6f:bd:33:87:17:b1:6e:47:3b:6e:a1:
aa:8b:9f:fb:3f:11:ed:b7:d8:86:79:cd:25:4f:00:23:41:e7:
6d:38:5f:ce:39:53:c5:c1:99:6e:9a:6b:26:05:7b:87:4d:8d:
87:42:89:00:00:25:fb:db:71:b3:c3:9a:c9:2e:f4:c6:fe:5d:
8c:eb:c5:8f:94:57:d5:10:81:af:0a:5d:f2:d0:74:48:af:80:
9a:a8:5e:f9:3b:3f:ca:90:84:77:08:1c:1b:a3:49:24:af:bc:
94:dd:45:ac:ea:9f:6c:3b:d1:ea:1c:a1:70:90:f8:88:75:6c:
05:27:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:04 2026 by rpki-client