Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/lFpP2edtZbeiimHGLzmvkcEN-mg.asa
File: lFpP2edtZbeiimHGLzmvkcEN-mg.asa (raw, json)
Hash identifier: K6iJU79abc3heTHJ4tesdUEWhmfGUsJIrOPm/MA1KBg=
Subject key identifier: 94:5A:4F:D9:E7:6D:65:B7:A2:8A:61:C6:2F:39:AF:91:C1:0D:FA:68
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 01A03287FD4F873F79C92581BEFCFB2074BB
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/lFpP2edtZbeiimHGLzmvkcEN-mg.asa
Signing time: Mon 24 Aug 2026 06:49:28 +0000
ASPA not before: Mon 24 Aug 2026 06:49:28 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208487
Providers: AS: 8772
AS: 11967
AS: 24381
AS: 29632
AS: 35708
AS: 41051
AS: 137933
AS: 152565
AS: 199829
AS: 207841
AS: 209533
AS: 209735
AS: 209762
AS: 210464
AS: 211358
AS: 211509
AS: 212895
AS: 213449
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:87:fd:4f:87:3f:79:c9:25:81:be:fc:fb:20:74:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Aug 24 06:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=945a4fd9e76d65b7a28a61c62f39af91c10dfa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:21:76:9c:95:25:52:bc:7a:db:d0:79:12:
47:b1:75:66:81:05:4e:ef:98:39:bf:b5:d5:d4:a1:
f6:12:f7:31:f3:12:99:73:da:a5:ec:3b:10:f7:e2:
f5:91:eb:71:a1:35:a3:50:e4:d0:47:c4:3f:53:c4:
6f:3f:45:80:97:f5:14:62:59:18:9a:5c:2a:8e:ee:
37:43:1b:3f:48:3f:ff:e9:7d:fa:bb:2d:32:87:65:
fa:8f:91:49:e2:fc:9f:ff:9e:a3:b0:7f:2c:ed:ba:
16:45:10:40:9b:dc:b1:d7:0d:84:29:06:c4:07:74:
cb:ad:12:6d:13:ef:a4:c2:93:34:93:fe:95:71:29:
79:83:0a:22:ea:23:0f:08:70:0b:ec:41:42:83:67:
58:cc:a4:4e:b2:2d:ab:63:e0:58:01:0f:6b:be:a4:
91:0e:ce:db:71:65:a8:4d:d3:52:72:9e:c4:7d:51:
f2:6a:37:27:09:bc:14:00:5c:3b:f2:af:b9:7d:ce:
68:76:21:56:d4:6c:f3:af:8b:ed:a0:0f:0d:9c:48:
b5:b7:2a:2f:08:3e:fb:ab:98:6d:55:d5:0e:3f:b8:
86:0c:d4:fd:bf:48:94:05:8c:b4:71:48:a4:d6:b0:
61:80:d2:a8:73:cb:45:dd:e5:cc:c1:b0:57:71:d0:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5A:4F:D9:E7:6D:65:B7:A2:8A:61:C6:2F:39:AF:91:C1:0D:FA:68
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/lFpP2edtZbeiimHGLzmvkcEN-mg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208487
Signature Algorithm: sha256WithRSAEncryption
6c:03:dc:b0:f1:3f:46:d4:02:b9:43:49:8d:b1:12:c7:da:98:
fc:f1:75:b7:18:be:0c:99:db:de:73:1d:cc:c6:d4:ef:f4:11:
be:b3:db:1f:d6:fe:93:5b:3f:d9:11:c4:36:5c:99:28:14:3a:
32:5c:de:d0:9a:03:24:de:96:7d:50:69:de:52:a0:7b:f2:f0:
38:be:f4:c0:d6:08:df:15:c9:ea:23:21:d8:0b:49:29:e8:af:
6b:e8:eb:bf:a6:90:2b:62:74:e0:eb:36:27:27:59:99:87:a2:
90:7a:6f:e6:93:f4:a1:05:88:ef:86:f4:22:97:df:e5:f5:9e:
fb:d2:36:79:40:e8:51:11:9c:ea:58:26:9e:e1:97:e8:03:20:
0d:70:f6:aa:37:e4:79:f7:9f:62:5e:fb:3f:4b:c7:d4:04:54:
e3:1a:2c:09:8d:1f:5a:c5:f0:b2:14:de:ed:41:8e:ce:80:45:
5b:f1:6a:5d:00:cf:df:92:d2:dc:18:cf:e5:20:7e:4e:23:ec:
ad:8d:6f:4b:cd:77:57:d1:fd:fe:c3:55:a0:b4:fa:6d:68:af:
09:9d:36:ce:66:a0:f9:68:a7:cf:1d:d2:3f:5c:34:e1:13:b7:
40:c6:22:95:84:83:48:95:9d:b9:ea:b2:7a:ff:54:d1:74:0b:
74:ee:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:35 2026 by rpki-client