
Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa
File: 1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa (raw, json)
Hash identifier: iEXTilkRCMqep8ohagVKxx8QP/pOQ0cevjMJdBDrx64=
Subject key identifier: FA:83:12:98:7F:C0:69:12:98:DC:F6:25:73:1F:93:11:65:DD:CD:B5
Certificate issuer: /CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Certificate serial: 01A0B7EBEC24E81225CEF2BDEBB0B9CEAC6C
Authority key identifier: CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa
Signing time: Sat 19 Sep 2026 04:28:06 +0000
ASPA not before: Sat 19 Sep 2026 04:28:06 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202831
Providers: AS: 6939
AS: 30823
AS: 31500
AS: 49581
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:eb:ec:24:e8:12:25:ce:f2:bd:eb:b0:b9:ce:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cffcb388d15b34201e3f90dc2bbc7129a841492d
Validity
Not Before: Sep 19 04:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa8312987fc0691298dcf625731f931165ddcdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:83:50:ae:80:4c:7a:bf:0f:e0:8c:02:3b:
1a:e3:44:4d:03:a5:b6:7a:5d:8c:e6:04:01:59:26:
d5:3d:bb:9f:62:ce:b5:1e:73:5f:1b:b3:d4:90:17:
88:1a:47:88:4a:a0:94:8c:84:29:1d:03:65:9c:38:
ae:3a:70:75:86:9c:96:9d:99:92:4c:2c:7b:55:04:
ab:1b:19:66:a9:25:b7:ac:7e:1a:b9:55:f2:ba:fa:
5c:33:5b:66:55:89:97:94:58:2d:3d:46:5e:39:b9:
1b:78:88:ea:e5:83:1b:0f:49:04:72:a4:da:20:4a:
9d:0b:b1:ab:09:fa:90:9e:e0:50:61:81:fc:3c:5b:
a0:0b:76:76:76:1c:b3:d6:23:e6:73:e7:9c:69:84:
a2:d2:57:d7:0f:86:52:c2:bd:98:c9:66:59:79:0b:
68:da:56:46:a4:1e:d5:14:d8:15:76:bc:a4:e8:dd:
7b:2f:af:54:31:0a:86:fa:f2:d3:e8:63:56:c5:c0:
a9:04:5d:4f:84:89:09:17:16:a1:cc:1b:33:db:7e:
75:62:fe:e1:6a:2e:f1:e5:f2:b7:58:f3:4d:d1:e5:
a3:4b:78:2e:4b:a0:e2:a2:16:fc:d4:83:71:86:39:
63:66:0d:fb:5b:84:da:83:9e:f6:a7:66:99:4c:fd:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:83:12:98:7F:C0:69:12:98:DC:F6:25:73:1F:93:11:65:DD:CD:B5
X509v3 Authority Key Identifier:
keyid:CF:FC:B3:88:D1:5B:34:20:1E:3F:90:DC:2B:BC:71:29:A8:41:49:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_yziNFbNCAeP5DcK7xxKahBSS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/1-oMSmH_AaRKY3PYlcx-TEWXdzbU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/97f970-f725-48e0-b449-4670405a38ea/1/z_yziNFbNCAeP5DcK7xxKahBSS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202831
Signature Algorithm: sha256WithRSAEncryption
60:ba:98:36:71:ef:a0:28:ee:57:fa:ce:bd:84:e6:45:c4:31:
bf:be:45:3a:50:1f:fb:d1:7c:fb:13:22:b9:40:97:91:e1:1e:
74:e7:72:07:e8:5a:e3:54:45:7b:59:7d:d8:88:f9:c9:6e:fa:
31:17:8b:49:84:48:43:21:e5:dd:b6:23:dd:4c:00:e1:0d:fd:
28:da:62:f7:7d:05:7b:21:5d:c7:68:92:71:93:9f:28:c5:ce:
32:7f:c8:dd:6a:28:a9:ee:e4:5b:26:d4:3e:17:ce:87:f5:ee:
b5:ad:0b:af:fc:ed:88:c0:5c:5a:df:45:38:c0:ca:14:4c:f2:
8e:5e:a3:26:48:54:af:53:9d:d2:d9:76:17:6c:6d:01:69:85:
60:ca:4a:a6:20:2c:a3:e2:d0:2b:a2:52:b6:ab:74:22:44:2d:
49:2a:1b:59:39:bf:b4:dd:6d:26:ce:33:37:da:68:b8:ed:32:
a5:42:2c:04:6c:4b:cc:7e:ad:74:0a:db:4f:3d:09:7e:79:73:
1e:4c:2f:74:28:04:e2:4e:4c:ff:98:19:e7:df:d7:26:c3:7e:
02:a9:23:3e:ad:a5:df:c0:29:b4:05:8d:be:0f:02:07:8c:3a:
60:16:81:9b:87:b2:7e:ea:77:c0:ef:78:c0:65:c0:ff:c6:ec:
32:dc:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:23:40 2026 by rpki-client