Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/IN4aftU4mxLp5KA49YCP9vHKTic.asa
File: IN4aftU4mxLp5KA49YCP9vHKTic.asa (raw, json)
Hash identifier: 3oIJ+Tz8iLDJDKYlcLRCqkZSodGIL5xewYbZeBiTC/4=
Subject key identifier: 20:DE:1A:7E:D5:38:9B:12:E9:E4:A0:38:F5:80:8F:F6:F1:CA:4E:27
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 019FCD654B49C8645C601C627B99BDF3F308
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/IN4aftU4mxLp5KA49YCP9vHKTic.asa
Signing time: Tue 04 Aug 2026 15:29:55 +0000
ASPA not before: Tue 04 Aug 2026 15:29:55 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208223
Providers: AS: 6939
AS: 14447
AS: 17408
AS: 18041
AS: 20473
AS: 27523
AS: 41051
AS: 44324
AS: 53808
AS: 59105
AS: 204539
AS: 204921
AS: 209533
AS: 212895
AS: 213605
AS: 215828
AS: 393577
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:65:4b:49:c8:64:5c:60:1c:62:7b:99:bd:f3:f3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Aug 4 15:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20de1a7ed5389b12e9e4a038f5808ff6f1ca4e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:89:81:61:ec:c8:3d:ee:e5:95:ab:50:19:
fb:f0:95:a5:d8:a0:7c:d5:9d:38:7a:2e:4d:8b:03:
44:96:57:4f:53:b2:6e:55:94:16:59:93:71:24:17:
60:21:a1:60:73:67:5a:01:cc:b5:86:69:e3:4d:bf:
45:e2:e1:2a:ab:1a:d5:db:51:88:c2:3b:9e:b6:65:
c9:c3:61:fd:24:c3:a0:28:5d:1e:57:c3:eb:22:5d:
65:30:93:69:1a:0d:51:f9:72:ab:73:12:ea:ea:37:
92:34:22:78:0d:4c:31:d2:e0:f0:ab:1d:31:da:7e:
0e:cc:78:42:53:3d:2d:01:18:bf:a5:bd:56:50:56:
86:a7:7c:16:b1:1a:0c:1b:eb:c0:c3:88:24:ec:bb:
5a:97:f2:6c:94:31:b1:38:b4:5f:74:e9:e3:09:18:
2f:70:3a:b1:ea:55:98:e2:14:a3:c8:6e:eb:f5:ea:
55:66:fa:df:10:33:f0:96:a0:19:67:dd:1e:8f:c0:
0d:99:ad:33:7f:ba:0a:da:07:92:d2:c6:b9:f4:84:
b7:95:e8:02:ee:cf:26:87:7a:30:38:b8:f2:20:55:
b3:80:12:31:42:54:b6:76:59:6c:4c:b6:62:2d:ed:
ed:dd:d3:4c:f9:9d:bd:96:dc:33:30:64:c5:92:fe:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:1A:7E:D5:38:9B:12:E9:E4:A0:38:F5:80:8F:F6:F1:CA:4E:27
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/IN4aftU4mxLp5KA49YCP9vHKTic.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208223
Signature Algorithm: sha256WithRSAEncryption
30:a2:a4:69:41:fa:55:7a:e0:2f:86:07:72:dc:00:86:7a:a3:
f3:01:b3:cf:44:88:4a:47:b4:0c:4b:4e:a1:d9:b4:2b:17:a0:
fa:c6:72:b2:04:09:34:87:56:e4:e1:22:66:32:95:21:25:65:
da:58:2f:24:79:c2:cc:57:11:e5:2e:b3:93:46:1e:72:44:63:
16:9a:46:50:71:70:50:3c:03:e0:5d:22:20:7c:69:cd:ce:fe:
7e:5d:3a:df:59:b4:a5:a1:dd:cd:c4:5f:89:e7:c2:03:06:6e:
ea:c4:81:ad:8e:15:6b:bd:bd:d0:d1:31:1b:1b:29:3c:e7:09:
19:48:33:34:e9:2a:29:f9:d6:f9:4f:dc:85:de:7f:60:24:1d:
91:ae:db:38:2b:a9:04:c3:18:49:25:7c:b6:ec:57:15:f9:60:
be:be:46:f7:3a:93:7e:6d:e7:e2:03:36:ed:88:ed:7e:3f:1e:
1e:96:28:cb:7f:bf:9b:cf:13:64:de:b8:dd:9e:71:bf:e9:49:
d7:21:85:49:55:a9:bc:1e:c2:2e:40:ea:21:7f:25:e2:53:73:
19:22:d4:7c:55:3b:74:c4:37:2d:e2:b1:46:3b:77:62:fd:18:
2b:2d:75:01:e5:1e:1e:e5:df:fc:08:9a:b4:44:41:66:ae:64:
8a:bc:7a:78
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/NZUtJyGRcYBxie5m98/MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWMzNzJmN2E5YjgxNzFkY2JmYzExNjBjYWEyMmM4ZmRj
NjhiN2IwHhcNMjYwODA0MTUyOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGRlMWE3ZWQ1Mzg5YjEyZTllNGEwMzhmNTgwOGZmNmYxY2E0ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE2JgWHsyD3u5ZWrUBn78JWl2KB8
1Z04ei5NiwNElldPU7JuVZQWWZNxJBdgIaFgc2daAcy1hmnjTb9F4uEqqxrV21GI
wjuetmXJw2H9JMOgKF0eV8PrIl1lMJNpGg1R+XKrcxLq6jeSNCJ4DUwx0uDwqx0x
2n4OzHhCUz0tARi/pb1WUFaGp3wWsRoMG+vAw4gk7Ltal/JslDGxOLRfdOnjCRgv
cDqx6lWY4hSjyG7r9epVZvrfEDPwlqAZZ90ej8ANma0zf7oK2geS0sa59IS3legC
7s8mh3owOLjyIFWzgBIxQlS2dllsTLZiLe3t3dNM+Z29ltwzMGTFkv7C3QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCDeGn7VOJsS6eSgOPWAj/bxyk4nMB8GA1UdIwQY
MBaAFMysNy96m4Fx3L/BFgyqIsj9xot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQt
YzQ1MDJkYTg2OWJiLzEvSU40YWZ0VTRteExwNUtBNDlZQ1A5dkhLVGljLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQtYzQ1MDJkYTg2OWJi
LzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtXzANBgkqhkiG
9w0BAQsFAAOCAQEAMKKkaUH6VXrgL4YHctwAhnqj8wGzz0SISke0DEtOodm0Kxeg
+sZysgQJNIdW5OEiZjKVISVl2lgvJHnCzFcR5S6zk0YeckRjFppGUHFwUDwD4F0i
IHxpzc7+fl0631m0paHdzcRfiefCAwZu6sSBrY4Va7290NExGxspPOcJGUgzNOkq
KfnW+U/chd5/YCQdka7bOCupBMMYSSV8tuxXFflgvr5G9zqTfm3n4gM27Yjtfj8e
HpYoy3+/m88TZN643Z5xv+lJ1yGFSVWpvB7CLkDqIX8l4lNzGSLUfFU7dMQ3LeKx
Rjt3Yv0YKy11AeUeHuXf/AiatERBZq5kirx6eA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:02 2026 by rpki-client