Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/nfdpyeKlCuQOx7_W49-x6O8ih_s.asa
File: nfdpyeKlCuQOx7_W49-x6O8ih_s.asa (raw, json)
Hash identifier: HMOJp4h10Y4D9hDQRuGq2+JTFg3aBr1LYBivU1L3FOs=
Subject key identifier: 9D:F7:69:C9:E2:A5:0A:E4:0E:C7:BF:D6:E3:DF:B1:E8:EF:22:87:FB
Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial: 019F81126567AC5ABBC10AA00AF54633C728
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/nfdpyeKlCuQOx7_W49-x6O8ih_s.asa
Signing time: Mon 20 Jul 2026 19:48:14 +0000
ASPA not before: Mon 20 Jul 2026 19:48:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214205
Providers: AS: 6939
AS: 11967
AS: 34927
AS: 199829
AS: 205941
AS: 206604
AS: 214331
AS: 214757
AS: 215638
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:12:65:67:ac:5a:bb:c1:0a:a0:0a:f5:46:33:c7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Validity
Not Before: Jul 20 19:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9df769c9e2a50ae40ec7bfd6e3dfb1e8ef2287fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:d7:5d:8b:ef:cb:6e:da:cf:eb:74:b1:ed:
eb:33:53:79:0f:f6:14:54:ea:69:72:4f:19:f8:eb:
3f:27:87:23:2a:b9:20:f2:33:14:13:40:10:68:84:
a8:fc:52:e9:8d:81:a4:8a:63:61:b6:e6:e1:78:69:
52:71:cd:b4:5d:a7:b0:65:0a:3e:0f:a1:8f:ff:88:
f0:ac:18:90:ef:25:66:55:b5:e1:70:c0:fb:39:2f:
f3:64:b2:03:63:fc:d7:c5:19:3d:f2:b2:0a:2e:23:
10:d0:83:aa:ee:54:5c:8d:f9:bf:13:8c:94:25:0b:
49:76:c0:09:9e:d2:d4:83:a6:cf:da:b9:b5:be:75:
aa:03:dc:76:9f:4f:b0:0f:39:9a:f3:76:fd:ef:24:
04:4c:8c:8f:25:86:26:85:bb:39:bd:12:15:48:0f:
41:5a:c5:7c:a4:ce:e7:64:2e:04:a2:5c:cd:7c:ac:
51:22:2d:5a:99:08:68:ba:16:17:bd:5a:4d:a9:8a:
f5:3a:60:47:7c:dc:a5:0f:2c:82:5b:cf:5a:52:70:
89:7b:40:cb:df:5a:81:59:b5:d2:d6:8f:97:aa:84:
a3:28:fd:14:e0:4f:86:27:86:48:e3:f3:63:be:1b:
8c:33:5c:65:c7:7a:98:7d:0c:07:bc:0c:b3:21:ea:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:69:C9:E2:A5:0A:E4:0E:C7:BF:D6:E3:DF:B1:E8:EF:22:87:FB
X509v3 Authority Key Identifier:
keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/nfdpyeKlCuQOx7_W49-x6O8ih_s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214205
Signature Algorithm: sha256WithRSAEncryption
04:a3:61:80:dd:99:43:50:df:0f:47:3e:de:33:d0:0f:da:26:
33:e4:21:60:c4:31:7e:af:6f:6c:25:ed:f1:05:e4:b7:22:6d:
88:cc:ce:21:a6:1e:0e:2b:08:65:b8:e1:54:1e:97:01:2a:ca:
84:9d:12:6c:78:35:a8:9d:25:0f:58:d9:af:28:d8:84:6d:a8:
c1:5d:42:5d:d5:7e:6a:a5:3a:bd:4e:9d:3d:36:b8:30:dc:c1:
21:cd:ac:cb:a7:5c:25:76:e1:44:79:df:5b:b7:0a:ff:c6:8d:
0f:b0:0b:9e:a2:54:36:9a:73:75:6d:f0:81:b5:27:3f:ad:74:
b1:5b:be:1f:a5:44:4f:bb:92:47:8f:b1:02:4c:ad:17:46:6b:
7d:10:85:cc:6d:79:a7:d0:b7:c9:2d:ac:2e:5a:8a:fe:07:4e:
a0:45:cb:eb:e6:0e:85:3d:dc:88:8f:ad:31:7b:a6:2c:73:bb:
88:a6:27:39:35:40:d2:9c:19:0c:80:3c:af:c9:ac:09:3e:8a:
4c:b4:69:c5:66:73:49:fa:09:de:2a:55:f7:9b:b3:d2:b3:66:
cf:36:39:71:c3:d6:87:98:83:29:d9:b9:3d:f0:a6:4a:15:ab:
21:f8:64:27:94:6f:21:35:61:f6:40:d9:1a:fc:3a:ec:18:04:
dd:91:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:33:45 2026 by rpki-client