Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/1-avwUbYkGWAbngQUmLKtkGb0vQk.asa
File: 1-avwUbYkGWAbngQUmLKtkGb0vQk.asa (raw, json)
Hash identifier: gdrOpGIWUMbLTjKVbOlssgFFN+ZM/6btb14hBTqgj4E=
Subject key identifier: F9:AB:F0:51:B6:24:19:60:1B:9E:04:14:98:B2:AD:90:66:F4:BD:09
Certificate issuer: /CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Certificate serial: 019FEBD1019B794B042713C7744953A442E9
Authority key identifier: 43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/1-avwUbYkGWAbngQUmLKtkGb0vQk.asa
Signing time: Mon 10 Aug 2026 13:16:10 +0000
ASPA not before: Mon 10 Aug 2026 13:16:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199890
Providers: AS: 18403
AS: 24381
AS: 41051
AS: 207841
AS: 209735
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:d1:01:9b:79:4b:04:27:13:c7:74:49:53:a4:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cc4e0b56c40cee32d515f13e9ad72526a106be
Validity
Not Before: Aug 10 13:16:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9abf051b62419601b9e041498b2ad9066f4bd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:92:52:6f:cd:76:45:b0:35:ba:74:23:97:
b8:37:16:9b:ee:e5:6a:a5:a4:e5:73:35:16:9f:cf:
7a:76:d0:b0:9b:6d:a8:7f:a3:e0:7e:29:6b:51:26:
bd:dc:39:ee:84:82:35:e6:00:9d:1f:ce:74:ba:1d:
6b:e7:8d:00:79:25:e0:47:fc:ab:43:6a:82:b3:f5:
49:d3:79:49:cf:b3:30:40:f6:06:09:f6:00:74:f3:
a2:5a:97:2f:38:12:88:34:8d:71:e6:10:27:4a:a5:
44:3f:66:42:a8:82:02:6b:b7:3c:38:ac:a0:6e:b5:
5a:bf:69:b2:a6:f4:77:fd:66:70:11:b8:c6:1f:f8:
4a:48:55:57:cf:2c:44:28:69:ea:b9:16:fe:21:07:
dd:b2:a3:ea:7d:25:54:b1:24:50:95:ff:54:69:9f:
f4:88:e8:9a:8b:da:e3:5b:b4:c4:d4:42:ab:4d:8a:
ce:b8:86:4c:ff:0c:53:d4:c7:05:d1:1e:08:c6:c1:
a1:97:65:34:00:cf:97:64:2b:47:3a:38:1a:f9:46:
e2:34:8e:6f:95:d3:4d:0a:d5:74:11:0a:3e:19:57:
50:c2:9a:4f:ee:ae:c8:dd:9f:36:69:b4:4d:0f:12:
cc:5b:8a:61:42:cb:43:54:4d:26:c3:1e:8b:7e:b8:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:F0:51:B6:24:19:60:1B:9E:04:14:98:B2:AD:90:66:F4:BD:09
X509v3 Authority Key Identifier:
keyid:43:CC:4E:0B:56:C4:0C:EE:32:D5:15:F1:3E:9A:D7:25:26:A1:06:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8xOC1bEDO4y1RXxPprXJSahBr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/1-avwUbYkGWAbngQUmLKtkGb0vQk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ec430f-7b70-49d7-8e81-6dab2a4b2a6e/1/Q8xOC1bEDO4y1RXxPprXJSahBr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199890
Signature Algorithm: sha256WithRSAEncryption
37:bc:d9:b5:cf:5a:68:b1:ec:71:07:89:8e:d8:17:da:c3:48:
80:ea:2e:bd:b3:58:4d:d8:03:34:43:2e:f5:70:de:84:7b:31:
c9:f6:1a:90:44:fc:4c:63:19:88:ec:54:a8:55:53:6b:42:8c:
2e:45:6a:53:83:d1:c3:4b:97:e2:d3:31:c1:45:f9:8b:76:43:
de:35:82:5f:3f:e7:19:4f:25:b8:aa:cb:a7:4a:f1:63:60:43:
ae:9b:06:29:49:36:f7:60:38:56:b6:ca:42:0c:3f:c3:f2:8d:
da:a1:02:43:2b:70:78:4f:10:b3:6b:f9:fb:a2:d4:22:0f:04:
18:d2:5f:c3:62:7d:02:b3:cd:13:42:e5:44:29:56:af:21:04:
87:94:22:53:c4:e8:12:db:dc:73:88:60:10:82:86:2e:f6:a2:
18:13:8c:81:7f:26:74:f7:19:35:2e:09:7d:a1:f1:eb:7e:ff:
21:5a:0e:ee:56:18:58:b8:95:24:53:dd:bb:e0:c3:82:07:ea:
7e:32:20:a6:9b:2d:95:e9:e0:e0:5b:54:d7:29:a0:00:f9:fd:
cb:08:98:7c:4c:81:ed:ef:e4:bc:df:a8:b9:53:7c:b9:fb:79:
8d:24:4c:36:bf:9b:62:05:e7:26:2d:d9:d6:78:bd:08:70:43:
71:b0:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:40:05 2026 by rpki-client