Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/cxjELaT0WCjtaN4sGX4948W7xbk.asa
File: cxjELaT0WCjtaN4sGX4948W7xbk.asa (raw, json)
Hash identifier: Vw2huYoyG/CVguO2nHKNfN8ze7h37LUsryBRjZyzwBs=
Subject key identifier: 73:18:C4:2D:A4:F4:58:28:ED:68:DE:2C:19:7E:3D:E3:C5:BB:C5:B9
Certificate issuer: /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial: 019FC7EAB69F936DE60282AC2C7E8A2C5B09
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/cxjELaT0WCjtaN4sGX4948W7xbk.asa
Signing time: Mon 03 Aug 2026 13:57:55 +0000
ASPA not before: Mon 03 Aug 2026 13:57:55 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213576
Providers: AS: 6204
AS: 6939
AS: 8283
AS: 11967
AS: 34872
AS: 34927
AS: 41051
AS: 52025
AS: 56655
AS: 137409
AS: 209022
AS: 212396
AS: 212514
AS: 214757
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:ea:b6:9f:93:6d:e6:02:82:ac:2c:7e:8a:2c:5b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Validity
Not Before: Aug 3 13:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7318c42da4f45828ed68de2c197e3de3c5bbc5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:34:62:0f:b4:b8:5a:9a:5d:cf:a0:85:69:
da:38:27:1f:77:b7:54:da:13:0a:76:c7:6a:5e:5d:
b1:d9:92:1c:7a:f6:ce:e6:32:72:a8:10:4c:b9:55:
cc:8c:24:2d:36:32:da:60:8f:06:1b:d4:f3:5f:66:
5f:85:df:58:6c:d8:12:95:1c:68:91:02:17:bb:b6:
d9:b2:d0:ef:0f:20:ff:86:26:1e:63:bf:af:e8:c3:
2d:02:ed:b3:d0:cb:58:10:20:f8:f7:45:3f:ba:b4:
f5:c4:c9:3b:6d:13:93:24:bf:41:e1:d5:f0:18:a4:
14:5f:05:8b:6f:93:f0:89:82:88:50:69:72:72:ee:
9f:2b:64:7b:5d:09:78:24:16:1e:36:63:7a:6d:88:
14:f1:ba:ce:8b:da:25:40:35:f0:3a:09:6e:b2:52:
0a:b1:e8:ea:c5:29:c9:f3:f0:ba:c5:47:11:3d:89:
99:71:ff:3f:b8:05:9a:29:1d:11:d4:df:5b:c4:b2:
d1:98:fd:28:a0:17:2d:bc:00:b1:89:38:8a:45:ad:
2e:34:d2:41:0e:dc:82:81:20:22:ac:44:c2:3a:02:
1c:ed:b9:0e:a1:bd:be:50:7a:52:a6:3f:d9:5b:51:
5e:78:4a:8b:79:2e:c1:7e:c5:e5:d7:ec:ef:81:68:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:C4:2D:A4:F4:58:28:ED:68:DE:2C:19:7E:3D:E3:C5:BB:C5:B9
X509v3 Authority Key Identifier:
keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/cxjELaT0WCjtaN4sGX4948W7xbk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213576
Signature Algorithm: sha256WithRSAEncryption
18:e5:eb:9c:f7:47:ea:59:2f:ba:d7:22:f5:4b:39:73:e9:ca:
12:49:da:ce:8d:de:53:0d:75:11:45:09:07:c7:5d:16:72:b6:
e1:5c:7e:58:bf:62:5a:34:68:3e:01:37:69:32:ca:7c:e4:51:
b8:67:4f:f7:80:52:5a:9e:dd:e4:98:ef:59:fe:7f:b4:f2:c8:
49:bb:1a:c9:37:bc:24:4e:ed:4e:57:c2:28:84:26:8b:bc:ee:
76:c9:d3:9d:9d:0b:11:75:0d:c2:4d:16:81:74:7b:3f:99:ca:
be:91:1c:6e:4d:2e:c9:1b:b4:5b:5d:56:31:88:3f:88:08:2b:
48:6f:6d:75:fd:10:47:bc:8e:79:a6:85:a9:a4:7f:02:79:8e:
17:04:26:0f:2a:af:0e:73:2e:ae:9c:73:85:7b:e5:6a:4b:2d:
77:a9:e9:4f:54:25:6f:97:fa:fb:96:bb:5b:26:3e:23:c7:e5:
1f:8b:bb:d6:66:82:46:63:f8:5b:9e:c0:22:ef:6c:8d:c2:7c:
4d:03:a7:0d:d2:d3:d2:b4:24:70:a7:11:2f:5d:78:45:83:93:
e7:5d:af:7c:a9:7b:6a:5c:78:80:93:57:a5:c9:a0:b8:89:23:
b7:ea:7a:22:b7:5d:38:7b:6f:ad:c8:8d:8b:49:db:41:79:f9:
5e:e0:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:03 2026 by rpki-client