Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/BNfWhef-AH3Hj51_e3WKaO0eMGc.asa
File: BNfWhef-AH3Hj51_e3WKaO0eMGc.asa (raw, json)
Hash identifier: u14YsvwGhBCXtoL/jKVRUWsIFwxVP+jxqzPXhU4hG6g=
Subject key identifier: 04:D7:D6:85:E7:FE:00:7D:C7:8F:9D:7F:7B:75:8A:68:ED:1E:30:67
Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial: 019D2BE05DE66FC75B874C1C324C74FBF6DC
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/BNfWhef-AH3Hj51_e3WKaO0eMGc.asa
Signing time: Thu 26 Mar 2026 20:40:17 +0000
ASPA not before: Thu 26 Mar 2026 20:40:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 206604
Providers: AS: 8772
AS: 20473
AS: 29632
AS: 34927
AS: 201269
AS: 201279
AS: 203534
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:e0:5d:e6:6f:c7:5b:87:4c:1c:32:4c:74:fb:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Validity
Not Before: Mar 26 20:40:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04d7d685e7fe007dc78f9d7f7b758a68ed1e3067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9c:d0:92:3f:78:41:a5:38:f4:d1:9c:88:e1:
70:89:cb:44:1f:0f:f8:ae:d6:e5:37:a6:7b:40:48:
f0:5f:8e:ca:fc:78:ae:14:1f:83:5b:28:90:09:3d:
93:fe:25:70:b5:09:00:84:bd:d8:24:1c:99:a0:7b:
25:6b:38:13:ca:44:d3:b6:3c:66:7a:18:a7:9f:f8:
a7:1a:2a:ac:3f:00:9d:da:52:90:02:32:6a:3c:81:
cf:34:49:fc:03:1b:75:da:10:c2:5d:c9:57:6d:38:
ed:e3:e6:2f:38:1e:e1:13:2f:d2:80:38:0c:cd:6d:
44:2a:2e:05:9e:22:be:bd:6a:37:61:93:b0:10:f2:
05:6b:87:77:67:b8:75:5b:83:32:06:7c:6c:67:7e:
4f:df:c8:19:27:18:44:63:7c:c6:5e:68:c0:dc:93:
e7:41:55:4e:bb:b7:9e:a4:11:0e:dd:ee:4b:c6:13:
d2:1b:58:57:79:59:88:f7:fe:79:ca:7b:71:b7:64:
3f:55:bb:17:54:25:25:94:76:89:3b:8c:94:b5:ce:
ba:de:55:8a:94:30:73:a3:cb:a6:c6:f8:31:f7:db:
86:97:f3:dd:cc:ad:ca:4c:68:ea:ec:e2:5c:5f:d4:
af:d5:7a:09:57:7b:ee:ad:21:fc:c9:47:c0:52:09:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:D6:85:E7:FE:00:7D:C7:8F:9D:7F:7B:75:8A:68:ED:1E:30:67
X509v3 Authority Key Identifier:
keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/BNfWhef-AH3Hj51_e3WKaO0eMGc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206604
Signature Algorithm: sha256WithRSAEncryption
51:69:2e:1c:ac:90:d1:2b:0e:be:93:5f:a3:a7:d9:c8:73:64:
f3:34:df:1d:e1:f3:9d:98:d2:40:ad:34:f9:23:5a:d1:c9:3e:
5c:06:10:c4:9e:c9:7e:10:66:7f:fd:d2:e5:f2:d2:16:b5:77:
84:b8:ca:aa:14:27:44:35:62:54:8c:b2:a0:3d:93:bf:81:bf:
b6:3d:19:f0:02:d8:80:a6:e1:20:34:63:3b:58:90:b1:53:b3:
95:36:7a:de:f8:cd:4a:4a:52:c5:e8:a4:fa:15:dd:97:05:26:
24:a6:1d:df:e1:a1:fb:4b:44:e6:97:04:8d:26:8a:0a:95:5d:
a7:eb:7e:ed:ea:b5:c9:1f:be:36:f8:73:2c:9b:12:eb:1f:3a:
fb:cf:62:a3:eb:49:6d:5c:e4:84:55:43:14:c4:e0:5b:35:1c:
25:2f:ec:16:cd:b0:d4:da:3d:9c:90:99:6e:ca:90:3b:8e:62:
ff:1d:49:ea:9d:df:78:7f:d8:89:78:37:43:13:26:47:1a:0c:
20:dc:c6:7b:3d:ff:fb:c5:5a:dd:b3:6e:68:82:64:4d:bd:13:
17:b8:e9:39:e3:ca:7d:d0:e1:cd:65:fa:da:90:34:85:fa:52:
ab:9d:f7:bc:4f:b7:f4:f4:8a:55:2b:41:6d:f7:a0:d5:bc:0c:
25:14:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:42:38 2026 by rpki-client