Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/NZTX6pH1QPom42qBqPZVw2bPTws.asa
File: NZTX6pH1QPom42qBqPZVw2bPTws.asa (raw, json)
Hash identifier: zWqNcvUJB80CiSud3BuDS4Ml/QCupqFbVTVc3lLQxuc=
Subject key identifier: 35:94:D7:EA:91:F5:40:FA:26:E3:6A:81:A8:F6:55:C3:66:CF:4F:0B
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 019F6CE83AE1242E23DCBDA9CB3B261226A6
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/NZTX6pH1QPom42qBqPZVw2bPTws.asa
Signing time: Thu 16 Jul 2026 21:49:46 +0000
ASPA not before: Thu 16 Jul 2026 21:49:46 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209990
Providers: AS: 6939
AS: 11967
AS: 34872
AS: 34927
AS: 208226
AS: 211588
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:e8:3a:e1:24:2e:23:dc:bd:a9:cb:3b:26:12:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Jul 16 21:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3594d7ea91f540fa26e36a81a8f655c366cf4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:5f:b0:55:76:80:5e:05:5e:d2:c1:90:20:
2b:ad:d7:6e:4f:3a:3a:b8:66:48:d8:17:e1:09:50:
60:5e:4a:fd:62:18:73:88:28:38:c1:51:19:26:4b:
c5:8c:0f:46:32:47:a3:e2:4e:48:d9:cb:8f:e8:5e:
85:23:d9:ca:26:95:f1:0d:6b:f9:43:82:6c:c2:1a:
70:f8:fd:89:95:73:da:d3:3b:b8:17:e0:1f:44:a4:
58:90:0b:e5:9f:6e:31:fb:98:7d:46:90:00:cd:da:
71:c4:3c:6b:f3:30:3b:38:c4:53:1c:d9:04:5c:c3:
65:e8:7b:78:2e:10:97:8b:d4:11:da:47:86:52:19:
1e:cb:4a:ed:1b:a3:b5:f8:1d:f2:3b:0e:ad:1d:99:
f8:45:e7:c4:3e:cc:76:8f:30:18:10:8c:84:bd:89:
ad:d3:60:2a:c2:92:02:45:23:57:3e:7f:38:34:29:
54:67:12:1a:70:2d:f9:58:ac:99:b2:7c:97:dd:59:
32:f6:a2:f7:02:d9:3b:1f:6c:25:9e:88:5c:78:86:
4c:e9:46:42:ba:26:44:b9:74:b1:d4:81:10:4a:75:
31:da:56:46:87:12:16:13:83:66:63:08:87:82:54:
34:84:b8:8c:b0:42:83:d8:a7:41:6d:7e:6d:70:28:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:94:D7:EA:91:F5:40:FA:26:E3:6A:81:A8:F6:55:C3:66:CF:4F:0B
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/NZTX6pH1QPom42qBqPZVw2bPTws.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209990
Signature Algorithm: sha256WithRSAEncryption
bb:84:be:8c:25:8c:78:a3:9f:a6:91:f3:12:f1:ae:8c:92:f3:
96:f5:12:d9:ec:fc:d9:08:89:b4:da:4e:61:7c:9e:b2:3e:b3:
4f:b3:48:a2:86:67:c8:32:f9:fc:13:0b:b1:2e:39:18:11:58:
4e:41:81:82:b6:81:c4:db:51:18:16:8c:ea:6e:86:65:5d:ea:
82:d1:b4:3a:e5:28:e1:7c:49:f2:61:8b:0d:83:e9:1c:0c:86:
3b:a5:f4:31:bb:d8:b2:33:4b:9a:d9:b5:d3:f8:66:0a:57:68:
dc:5a:4a:7c:a0:19:6e:be:a6:ff:0d:e3:c6:8f:8c:86:af:01:
7c:3e:18:be:9c:33:47:a7:cd:66:3a:98:bb:98:3a:97:54:06:
69:4c:ee:20:cc:1b:65:20:3a:14:fe:e0:c7:5c:ef:45:af:53:
32:d9:fa:7b:4e:2b:09:02:0a:d8:4b:c1:51:a3:86:09:76:c5:
0e:75:eb:8c:8e:d1:db:aa:7c:97:5c:06:e8:1a:d6:d4:4e:97:
81:58:e6:dc:23:10:a0:bf:8e:be:dd:40:df:77:ac:ea:32:f2:
c3:8d:16:9e:f4:4f:74:62:52:dd:f8:a2:14:cc:fe:bc:cd:d1:
f7:06:cc:70:29:62:a6:95:67:71:3a:72:06:6a:e7:7f:8e:b1:
df:74:6f:4c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ9s6DrhJC4j3L2pyzsmEiamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx
M2M5NGQwHhcNMjYwNzE2MjE0OTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTk0ZDdlYTkxZjU0MGZhMjZlMzZhODFhOGY2NTVjMzY2Y2Y0ZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMBfsFV2gF4FXtLBkCArrdduTzo6
uGZI2BfhCVBgXkr9YhhziCg4wVEZJkvFjA9GMkej4k5I2cuP6F6FI9nKJpXxDWv5
Q4Jswhpw+P2JlXPa0zu4F+AfRKRYkAvln24x+5h9RpAAzdpxxDxr8zA7OMRTHNkE
XMNl6Ht4LhCXi9QR2keGUhkey0rtG6O1+B3yOw6tHZn4RefEPsx2jzAYEIyEvYmt
02AqwpICRSNXPn84NClUZxIacC35WKyZsnyX3Vky9qL3Atk7H2wlnohceIZM6UZC
uiZEuXSx1IEQSnUx2lZGhxIWE4NmYwiHglQ0hLiMsEKD2KdBbX5tcCis1QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDWU1+qR9UD6JuNqgaj2VcNmz08LMB8GA1UdIwQY
MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt
MmU5N2FiYTBmYjJjLzEvTlpUWDZwSDFRUG9tNDJxQnFQWlZ3MmJQVHdzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj
LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0RjANBgkqhkiG
9w0BAQsFAAOCAQEAu4S+jCWMeKOfppHzEvGujJLzlvUS2ez82QiJtNpOYXyesj6z
T7NIooZnyDL5/BMLsS45GBFYTkGBgraBxNtRGBaM6m6GZV3qgtG0OuUo4XxJ8mGL
DYPpHAyGO6X0MbvYsjNLmtm10/hmCldo3FpKfKAZbr6m/w3jxo+Mhq8BfD4Yvpwz
R6fNZjqYu5g6l1QGaUzuIMwbZSA6FP7gx1zvRa9TMtn6e04rCQIK2EvBUaOGCXbF
DnXrjI7R26p8l1wG6BrW1E6XgVjm3CMQoL+Ovt1A33es6jLyw40WnvRPdGJS3fii
FMz+vM3R9wbMcClippVncTpyBmrnf46x33RvTA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:32 2026 by rpki-client