Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/M7gWGYW91F0j7eUzXPHmjCoAwKM.asa
File: M7gWGYW91F0j7eUzXPHmjCoAwKM.asa (raw, json)
Hash identifier: Qh8k+hDiOMbUIT1y/GooLFM58PU2WVTuu2yJWHiMRtc=
Subject key identifier: 33:B8:16:19:85:BD:D4:5D:23:ED:E5:33:5C:F1:E6:8C:2A:00:C0:A3
Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Certificate serial: 019DDD7646276CE43F7E807E3542256DB0EE
Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/M7gWGYW91F0j7eUzXPHmjCoAwKM.asa
Signing time: Thu 30 Apr 2026 08:16:49 +0000
ASPA not before: Thu 30 Apr 2026 08:16:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208223
Providers: AS: 6939
AS: 14447
AS: 17408
AS: 18041
AS: 20473
AS: 27523
AS: 44324
AS: 53808
AS: 58057
AS: 59105
AS: 204539
AS: 209533
AS: 212895
AS: 213605
AS: 215172
AS: 215828
AS: 216324
AS: 393577
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:76:46:27:6c:e4:3f:7e:80:7e:35:42:25:6d:b0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b
Validity
Not Before: Apr 30 08:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33b8161985bdd45d23ede5335cf1e68c2a00c0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:ec:5f:78:61:ef:cd:91:13:8a:0d:18:ff:
14:f7:de:10:35:33:67:ef:ee:db:d2:52:18:c8:6d:
1d:9a:64:9f:43:40:a2:9b:b6:84:d6:f4:2d:d3:ee:
76:26:8c:42:41:6e:1f:f3:e6:60:71:87:c7:35:ed:
e7:14:e4:16:83:a0:26:46:fa:80:71:a0:23:0a:82:
2b:7b:96:55:1e:d5:a9:dc:7b:12:29:57:f3:a3:70:
cf:71:87:46:97:20:63:e1:77:9d:a8:64:25:f9:7f:
13:db:64:6e:8d:52:74:98:76:ac:d4:3d:e4:d7:e2:
e8:c9:a9:28:a9:96:b5:94:24:e9:b7:6f:d0:75:d9:
62:f0:10:24:b1:52:31:d2:7f:10:e5:2a:91:b3:d8:
d4:05:c6:b3:3d:f1:55:3a:0d:75:f8:71:d9:c5:eb:
60:3b:fa:32:8d:a9:ba:f4:ba:7c:08:f8:9f:7d:01:
9b:1d:84:7c:93:cd:16:25:73:93:43:e7:c7:01:39:
f2:47:c2:8e:39:e7:16:7c:75:30:31:4b:8d:dc:60:
fd:1c:ef:c1:94:db:3f:ba:68:1b:94:58:15:04:26:
b0:72:67:fb:81:ea:be:86:e6:49:12:69:a4:c9:88:
fc:c5:5c:38:73:4b:c4:3c:0a:2b:b9:f2:3d:7e:21:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B8:16:19:85:BD:D4:5D:23:ED:E5:33:5C:F1:E6:8C:2A:00:C0:A3
X509v3 Authority Key Identifier:
keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/M7gWGYW91F0j7eUzXPHmjCoAwKM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208223
Signature Algorithm: sha256WithRSAEncryption
5a:fa:e0:2c:47:a9:61:4b:f0:0a:ba:f6:4e:be:39:46:0d:0b:
c8:5a:e3:f8:bb:b0:f5:ab:70:1d:99:c9:bb:00:7d:f1:e8:f4:
27:3b:78:9d:01:5e:45:4b:9b:47:08:a3:4a:7f:dc:1a:09:2b:
32:43:5c:86:d2:3d:62:a8:8e:e3:59:b3:b6:81:cb:84:b0:11:
9e:46:63:47:57:43:d7:47:6c:bc:0f:f2:48:1d:86:6b:b2:61:
85:94:75:ff:25:ec:8b:3a:1d:7d:e4:5e:c2:c6:4f:0a:ea:23:
e7:52:d8:14:2a:72:37:5f:f6:27:f6:e8:7e:bd:d5:e6:3e:27:
07:2b:b8:6e:e2:cb:0a:c9:4a:34:bc:8b:2a:16:4e:40:13:56:
48:ad:45:0c:15:b5:22:ef:5e:52:14:98:3b:d2:8f:64:72:fd:
60:09:08:3b:67:40:ee:e5:34:76:4a:c4:45:11:c1:06:6d:e9:
20:6e:d0:81:4e:ed:3a:3c:b0:bc:12:44:d2:03:cb:1a:1c:7c:
63:f1:d3:3a:30:41:26:0c:32:34:2f:ea:b9:f8:43:07:93:06:
5f:8e:51:85:06:b2:bd:8c:18:15:51:56:1e:07:30:86:1e:4d:
12:86:a8:d2:f8:9a:e9:84:88:b6:2c:f3:9a:0a:a3:16:ec:fc:
cf:70:33:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:56 2026 by rpki-client