Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/WzKCG2YANYwDiCPMEDnF3wWEIL4.asa
File: WzKCG2YANYwDiCPMEDnF3wWEIL4.asa (raw, json)
Hash identifier: j0Le2/fYLgItT8RcFxl99L6MkmGjdvtEmpaCnBgE1Nw=
Subject key identifier: 5B:32:82:1B:66:00:35:8C:03:88:23:CC:10:39:C5:DF:05:84:20:BE
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 019CFC1F8396AC269CFBF65BB06DA9FB7C15
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/WzKCG2YANYwDiCPMEDnF3wWEIL4.asa
Signing time: Tue 17 Mar 2026 14:07:29 +0000
ASPA not before: Tue 17 Mar 2026 14:07:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213068
Providers: AS: 553
AS: 9136
AS: 12843
AS: 34878
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:1f:83:96:ac:26:9c:fb:f6:5b:b0:6d:a9:fb:7c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Mar 17 14:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b32821b6600358c038823cc1039c5df058420be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:f4:4d:b9:73:3d:12:66:bc:dd:dd:23:5a:
3f:36:c2:6e:7c:77:ce:44:f9:89:a9:af:d9:ff:a6:
1b:bf:7d:48:08:ef:a4:49:0b:64:7a:71:ba:1f:73:
e4:f7:fa:7f:2d:36:35:7e:f0:46:9f:f9:8d:30:d0:
ce:fe:88:7b:be:7f:7c:b0:bb:fb:ea:3c:17:f2:b6:
cc:f4:ca:24:33:56:98:e0:56:0a:e2:ba:68:12:da:
30:df:f8:84:13:96:00:7b:42:d2:21:5b:1d:e4:84:
5c:0b:1a:bb:9b:2b:25:cd:c0:46:9b:2b:27:fc:0e:
95:83:68:77:c1:ee:6c:6a:64:1a:0b:ed:d3:f3:3f:
fa:59:e1:cc:cb:ca:a8:a5:5b:5e:66:bb:bf:7e:29:
40:e9:43:fd:6e:58:71:57:92:28:51:cc:7a:82:a2:
a2:0a:46:56:4b:a4:80:7b:18:17:b1:4b:48:cc:03:
34:d2:7c:02:08:79:b1:a5:30:0b:a3:79:8d:e6:13:
0c:d1:a2:d4:33:73:61:4c:32:92:34:09:24:6f:e6:
9a:1b:bd:87:1c:90:44:d3:df:ef:e2:db:87:b1:8b:
62:6d:d6:6a:82:83:43:88:5b:38:f1:54:33:13:5d:
f4:b3:1c:f7:06:b3:d5:79:63:d3:03:15:e5:bc:ff:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:82:1B:66:00:35:8C:03:88:23:CC:10:39:C5:DF:05:84:20:BE
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/WzKCG2YANYwDiCPMEDnF3wWEIL4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213068
Signature Algorithm: sha256WithRSAEncryption
66:6f:78:e6:32:7f:86:99:1a:5d:1a:ff:10:fa:73:33:b2:67:
5e:78:a4:bb:ac:e8:26:84:d8:0a:9b:68:28:72:78:59:62:cf:
1b:00:b3:0f:6a:f9:ac:86:9c:30:01:15:d9:c9:7f:6f:1f:c7:
97:e3:92:93:ec:06:b0:a3:28:4b:ca:e6:20:2e:a2:2d:24:62:
43:72:82:4b:96:31:0b:a7:3c:ff:9e:c4:43:5e:3a:07:fc:be:
ce:ec:22:c2:b2:86:e7:d5:ea:00:0b:6f:27:7b:1d:32:b2:5a:
49:21:05:36:76:6d:aa:9f:6e:7f:2e:1a:26:aa:45:8d:ee:9d:
4d:39:22:a7:6e:9a:47:69:91:4d:d3:62:a8:e7:53:a6:7f:9e:
82:f1:08:70:60:90:d4:90:c4:ef:42:2e:59:25:82:e8:2e:58:
a6:6d:3a:f3:28:27:f1:97:56:96:a4:2f:7e:b3:a2:a1:06:e6:
b4:dd:51:9c:c0:ee:49:de:a9:e9:f9:f3:18:42:e1:2b:dc:9f:
e6:e0:d6:b7:60:56:54:fd:53:26:a0:af:db:26:06:5f:7c:82:
04:94:8b:29:a0:06:4d:24:82:b8:a7:a6:f1:5d:e3:d6:a6:9c:
53:e0:30:7a:21:7c:3a:02:99:c9:44:1d:4b:55:bf:28:4e:07:
67:2b:34:28
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZz8H4OWrCac+/ZbsG2p+3wVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky
ZDc4ODgwHhcNMjYwMzE3MTQwNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjMyODIxYjY2MDAzNThjMDM4ODIzY2MxMDM5YzVkZjA1ODQyMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0L0TblzPRJmvN3dI1o/NsJufHfO
RPmJqa/Z/6Ybv31ICO+kSQtkenG6H3Pk9/p/LTY1fvBGn/mNMNDO/oh7vn98sLv7
6jwX8rbM9MokM1aY4FYK4rpoEtow3/iEE5YAe0LSIVsd5IRcCxq7myslzcBGmysn
/A6Vg2h3we5samQaC+3T8z/6WeHMy8qopVteZru/filA6UP9blhxV5IoUcx6gqKi
CkZWS6SAexgXsUtIzAM00nwCCHmxpTALo3mN5hMM0aLUM3NhTDKSNAkkb+aaG72H
HJBE09/v4tuHsYtibdZqgoNDiFs48VQzE130sxz3BrPVeWPTAxXlvP+fzQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFsyghtmADWMA4gjzBA5xd8FhCC+MB8GA1UdIwQY
MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt
ZDk1MDk0NzMwNzJjLzEvV3pLQ0cyWUFOWXdEaUNQTUVEbkYzd1dFSUw0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj
LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNATDANBgkqhkiG
9w0BAQsFAAOCAQEAZm945jJ/hpkaXRr/EPpzM7JnXniku6zoJoTYCptoKHJ4WWLP
GwCzD2r5rIacMAEV2cl/bx/Hl+OSk+wGsKMoS8rmIC6iLSRiQ3KCS5YxC6c8/57E
Q146B/y+zuwiwrKG59XqAAtvJ3sdMrJaSSEFNnZtqp9ufy4aJqpFje6dTTkip26a
R2mRTdNiqOdTpn+egvEIcGCQ1JDE70IuWSWC6C5Ypm068ygn8ZdWlqQvfrOioQbm
tN1RnMDuSd6p6fnzGELhK9yf5uDWt2BWVP1TJqCv2yYGX3yCBJSLKaAGTSSCuKem
8V3j1qacU+AweiF8OgKZyUQdS1W/KE4HZys0KA==
-----END CERTIFICATE-----
Generated at Fri Mar 20 15:56:03 2026 by rpki-client