Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ojqmlwhhXFrCH170geti55uM044.asa
File: ojqmlwhhXFrCH170geti55uM044.asa (raw, json)
Hash identifier: 2ItvtmzRux4XPVZnMHD/8EZ3jabau5ok75G2+Um7ykI=
Subject key identifier: A2:3A:A6:97:08:61:5C:5A:C2:1F:5E:F4:81:EB:62:E7:9B:8C:D3:8E
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019CC477202FB03D37C641E13B0F1B54DDD9
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ojqmlwhhXFrCH170geti55uM044.asa
Signing time: Fri 06 Mar 2026 18:44:27 +0000
ASPA not before: Fri 06 Mar 2026 18:44:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204943
Providers: AS: 207187
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:77:20:2f:b0:3d:37:c6:41:e1:3b:0f:1b:54:dd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Mar 6 18:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a23aa69708615c5ac21f5ef481eb62e79b8cd38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:27:1f:80:41:d4:00:b0:9f:85:10:8c:7e:
b3:04:5a:81:a3:21:a1:b6:16:c2:e1:84:d3:16:41:
80:bf:90:f5:58:d0:ad:91:b4:71:c7:3e:27:46:a0:
09:34:f9:e3:15:47:6f:c4:9d:fd:af:d6:7d:27:46:
d7:a3:59:f9:e7:7e:ec:5d:d0:71:0e:81:a2:35:a3:
4e:d7:b2:a0:a5:61:68:4f:d4:7e:ee:d0:14:f2:fe:
9c:a6:a6:d3:9f:ee:92:7e:c0:a4:35:83:0d:95:51:
d5:ec:b9:af:6e:f9:16:b1:28:a7:e2:2a:66:8d:4c:
07:32:4b:f8:dd:1c:bb:4d:89:67:ba:f1:5a:3d:8c:
f7:14:43:c2:b8:6e:eb:59:8a:bd:5a:8d:f9:cb:77:
71:a2:2a:84:87:71:45:4b:0f:96:b6:b2:90:26:c7:
a7:33:fa:b5:fc:b8:26:be:6b:2e:16:14:69:d0:41:
26:7c:3a:4d:8b:88:2a:66:95:47:54:45:b1:9f:b7:
54:11:da:40:0c:da:0c:2d:09:69:a1:a0:47:bc:ed:
f8:2f:21:c0:35:3e:1b:ef:50:83:11:c5:8f:32:05:
88:4b:05:e3:15:d4:f5:4d:cc:85:5f:bb:36:dd:8d:
3e:b9:6c:32:06:d8:c0:0a:1b:c9:3c:46:86:83:b3:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:A6:97:08:61:5C:5A:C2:1F:5E:F4:81:EB:62:E7:9B:8C:D3:8E
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ojqmlwhhXFrCH170geti55uM044.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204943
Signature Algorithm: sha256WithRSAEncryption
61:ea:9c:94:69:44:a4:10:b0:87:47:a0:2a:11:34:6f:64:ee:
30:3b:49:aa:47:f1:a3:07:46:10:fa:43:17:eb:01:77:90:60:
67:5b:e9:90:3b:10:d7:e4:a0:5d:40:6e:e5:de:9c:8a:83:23:
d5:9a:50:a4:fb:c6:8d:3b:2f:34:bd:cc:6d:9a:70:e1:ac:04:
7d:fd:6a:c4:87:c6:5d:92:f2:96:c7:8a:a3:c0:3e:83:7f:27:
52:40:9b:8a:4a:74:34:69:49:41:bb:72:7a:d4:db:32:1e:b7:
c6:90:52:e3:1b:49:f8:b1:ef:45:9a:66:f3:85:ce:21:c9:2c:
05:c7:ea:5f:e4:36:10:45:cc:d5:8c:ed:1d:56:58:96:cf:74:
ef:18:94:e3:49:7d:44:f6:5a:73:e7:ec:c9:2f:4b:a4:f2:89:
66:20:c1:94:1c:7b:de:a3:ce:cf:fe:42:99:f0:aa:c4:cf:4d:
9d:e5:83:a1:79:07:62:32:1e:7b:9b:0f:4e:c6:2c:b7:34:cc:
99:67:88:42:55:51:40:71:8c:ef:d3:3d:79:f8:d4:71:16:f6:
79:8e:ee:91:94:e0:2a:69:72:91:be:9d:5c:1c:04:06:ec:34:
af:7c:14:9a:39:b6:d0:49:15:04:40:8d:d5:b5:23:60:fd:fd:
8e:2e:98:5d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzEdyAvsD03xkHhOw8bVN3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmJmODJmZGEyOGUwOGY2MjI5NDYwYmEyZTI0MTQxNDY0
MzMxZTUwHhcNMjYwMzA2MTg0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjNhYTY5NzA4NjE1YzVhYzIxZjVlZjQ4MWViNjJlNzliOGNkMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28InH4BB1ACwn4UQjH6zBFqBoyGh
thbC4YTTFkGAv5D1WNCtkbRxxz4nRqAJNPnjFUdvxJ39r9Z9J0bXo1n5537sXdBx
DoGiNaNO17KgpWFoT9R+7tAU8v6cpqbTn+6SfsCkNYMNlVHV7LmvbvkWsSin4ipm
jUwHMkv43Ry7TYlnuvFaPYz3FEPCuG7rWYq9Wo35y3dxoiqEh3FFSw+WtrKQJsen
M/q1/LgmvmsuFhRp0EEmfDpNi4gqZpVHVEWxn7dUEdpADNoMLQlpoaBHvO34LyHA
NT4b71CDEcWPMgWISwXjFdT1TcyFX7s23Y0+uWwyBtjAChvJPEaGg7N2TwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKI6ppcIYVxawh9e9IHrYuebjNOOMB8GA1UdIwQY
MBaAFK8r+C/aKOCPYilGC6LiQUFGQzHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYt
YmRmMzkxN2E5MjY3LzEvb2pxbWx3aGhYRnJDSDE3MGdldGk1NXVNMDQ0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYtYmRmMzkxN2E5MjY3
LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMgjzANBgkqhkiG
9w0BAQsFAAOCAQEAYeqclGlEpBCwh0egKhE0b2TuMDtJqkfxowdGEPpDF+sBd5Bg
Z1vpkDsQ1+SgXUBu5d6cioMj1ZpQpPvGjTsvNL3MbZpw4awEff1qxIfGXZLylseK
o8A+g38nUkCbikp0NGlJQbtyetTbMh63xpBS4xtJ+LHvRZpm84XOIcksBcfqX+Q2
EEXM1YztHVZYls907xiU40l9RPZac+fsyS9LpPKJZiDBlBx73qPOz/5CmfCqxM9N
neWDoXkHYjIee5sPTsYstzTMmWeIQlVRQHGM79M9efjUcRb2eY7ukZTgKmlykb6d
XBwEBuw0r3wUmjm20EkVBECN1bUjYP39ji6YXQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:49:40 2026 by rpki-client