Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/D_BEXKJxx02XQORfBK7due4WKmg.asa
File: D_BEXKJxx02XQORfBK7due4WKmg.asa (raw, json)
Hash identifier: NvwJFKQMeKjwgVozzqK6BRCu+sDhYcEghwySo/RibEc=
Subject key identifier: 0F:F0:44:5C:A2:71:C7:4D:97:40:E4:5F:04:AE:DD:B9:EE:16:2A:68
Certificate issuer: /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial: 01A04875B35C11C6DA506A458EE4151526AD
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/D_BEXKJxx02XQORfBK7due4WKmg.asa
Signing time: Fri 28 Aug 2026 13:01:08 +0000
ASPA not before: Fri 28 Aug 2026 13:01:08 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214079
Providers: AS: 211138
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:75:b3:5c:11:c6:da:50:6a:45:8e:e4:15:15:26:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Validity
Not Before: Aug 28 13:01:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ff0445ca271c74d9740e45f04aeddb9ee162a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:bb:4a:d4:40:33:e8:a8:72:9c:e2:a9:00:
cb:7e:eb:a2:40:fb:53:75:c9:3a:30:3c:cc:59:cd:
37:75:68:19:a3:c1:73:1a:f8:50:83:b2:0c:aa:17:
22:af:44:f7:a0:30:34:d0:7a:45:ae:91:23:15:2d:
9b:ce:8b:c5:81:ee:bd:40:07:f3:7c:1b:8a:d2:91:
e3:32:e4:dd:a2:35:32:a5:4e:a7:7a:a9:3f:65:c5:
83:af:df:fa:32:e7:ee:ea:8c:16:46:1a:32:d9:e0:
6c:01:3a:a4:32:30:37:57:e0:5c:da:c0:e0:dd:42:
c8:22:bc:7d:67:33:ee:17:f9:e7:8d:e0:6f:ac:da:
1f:54:57:a4:29:d7:4b:95:d6:e8:e8:3b:a4:ff:22:
c0:0d:b4:96:01:e4:b3:c1:fe:20:b4:8d:97:c3:ac:
39:0f:60:8e:a6:f5:5a:66:20:bc:9d:e1:f0:fc:10:
e4:c5:18:38:3b:03:50:73:32:21:c2:58:af:0e:46:
ae:9f:4a:c3:ce:9f:79:4c:fe:22:0d:c6:cb:11:1a:
db:3d:be:1d:3e:c8:e9:02:fa:46:25:93:b1:33:15:
08:6b:83:f3:30:98:9c:a8:48:64:d1:40:28:f7:21:
9a:41:48:2a:77:e2:02:0a:af:aa:2f:10:cb:48:d9:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F0:44:5C:A2:71:C7:4D:97:40:E4:5F:04:AE:DD:B9:EE:16:2A:68
X509v3 Authority Key Identifier:
keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/D_BEXKJxx02XQORfBK7due4WKmg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214079
Signature Algorithm: sha256WithRSAEncryption
a4:57:cf:69:73:6b:0f:9c:10:b5:ce:e6:81:71:d3:03:53:96:
a0:73:84:7f:7f:9f:13:79:a2:d9:c6:a3:3e:e7:2e:a2:83:3f:
ed:93:4f:62:fe:03:13:fc:db:37:f7:ca:1f:5f:24:c8:aa:06:
41:32:8b:2d:dc:e3:6c:f0:ab:7d:3c:f6:f1:ba:6f:d6:6f:01:
68:66:c7:8b:69:5c:5d:e9:41:58:f5:48:cf:f7:2b:cb:31:d6:
9e:35:b7:d9:be:5a:eb:16:5b:29:d4:24:26:86:1b:78:d0:38:
92:2c:06:02:50:37:b4:ff:b1:07:88:4f:20:a2:c0:94:a2:7c:
b7:29:b6:9e:bc:16:a9:59:02:47:63:4f:f7:a7:ee:cd:a7:b3:
4b:7a:85:48:1a:63:bf:c0:b3:72:74:51:81:62:a7:e6:02:58:
c2:0f:99:ca:6d:07:f8:1f:23:b1:23:35:1c:cf:70:e9:de:4e:
0d:da:a6:fd:32:24:67:f3:cd:be:d4:8f:c9:6a:38:09:c3:c4:
8e:14:06:ad:ff:f1:b2:e5:31:4b:f2:94:3c:24:17:2b:cd:bd:
2f:88:34:a4:6c:45:dd:74:bb:83:ee:94:49:5d:2f:24:97:e9:
57:e7:6a:ad:2e:f3:08:06:1e:0a:28:28:68:fc:c0:2c:33:94:
96:2c:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:35 2026 by rpki-client