
Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/tZXFhCda9QhyEl0l4dUGgw3-aFI.asa
File: tZXFhCda9QhyEl0l4dUGgw3-aFI.asa (raw, json)
Hash identifier: ojPBN8xQtJDNsaPuMNz7OBORmpao2SEolkZFks4hcs8=
Subject key identifier: B5:95:C5:84:27:5A:F5:08:72:12:5D:25:E1:D5:06:83:0D:FE:68:52
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 01A00A9934BCB1492CEA83DE92AA415F9D9C
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/tZXFhCda9QhyEl0l4dUGgw3-aFI.asa
Signing time: Sun 16 Aug 2026 12:43:27 +0000
ASPA not before: Sun 16 Aug 2026 12:43:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208694
Providers: AS: 11967
AS: 34927
AS: 41051
AS: 212895
AS: 214675
AS: 215828
AS: 400818
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:99:34:bc:b1:49:2c:ea:83:de:92:aa:41:5f:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Aug 16 12:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b595c584275af50872125d25e1d506830dfe6852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:16:95:1f:65:8e:70:81:cf:2e:81:4f:86:
a1:ae:fc:85:9b:f7:f5:c2:57:10:cc:c0:f1:7c:f4:
1c:f1:71:6f:3a:34:f6:11:4e:13:f8:fc:df:be:34:
37:b9:8b:ef:74:ac:d6:f5:58:8f:bf:fb:e0:f7:56:
a1:68:01:20:4d:de:b4:e4:81:fc:45:f0:92:c0:6a:
37:53:4e:c0:8b:0c:af:8b:a9:ea:0e:8d:85:63:2f:
4a:94:4c:a2:68:de:d0:f5:25:a6:00:78:33:94:7c:
69:ac:4d:7b:cb:ad:4f:c6:ca:6b:01:e5:da:b0:fb:
17:3a:9a:b6:c3:94:69:3f:71:19:6f:82:de:0b:9b:
ba:c1:9c:78:df:2e:e9:ed:1c:d9:d9:f5:43:b5:d9:
c6:71:e6:4c:f7:4e:24:f5:14:e2:df:cd:97:bd:11:
0b:e0:d3:8e:b4:4e:e7:c2:bc:d0:bd:5c:4c:3a:c4:
17:83:7f:9d:8a:8b:cf:4d:dd:33:9b:4d:73:11:32:
0e:0d:5f:cd:59:d4:20:89:b2:5f:75:76:94:96:36:
e0:2a:dc:1d:e7:6d:8a:1f:37:28:f4:6e:19:38:e3:
f5:97:d2:18:95:89:9e:e5:06:17:8a:3a:eb:82:5c:
40:b9:a3:b1:6a:16:61:17:6f:0f:3a:36:94:81:52:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:95:C5:84:27:5A:F5:08:72:12:5D:25:E1:D5:06:83:0D:FE:68:52
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/tZXFhCda9QhyEl0l4dUGgw3-aFI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208694
Signature Algorithm: sha256WithRSAEncryption
96:b1:31:1c:a5:c2:9c:5e:d5:3d:23:ba:79:a2:7f:fb:98:5f:
6b:a4:0d:03:35:df:de:7d:1a:f2:ee:da:0a:ae:b2:c7:45:66:
c5:28:55:df:95:26:8c:4b:d3:9a:d7:14:a3:6b:c1:3d:39:8e:
b2:9a:b2:3a:d0:6a:a3:b6:e8:4f:30:4b:9d:7b:29:6f:50:8b:
bc:d1:8d:14:c1:c1:0b:e6:5e:ea:fe:0b:58:62:c6:94:a7:6e:
44:1a:10:2c:8b:a9:12:f0:87:cb:c3:92:a2:13:ba:24:d8:37:
2b:8e:3c:2d:57:4b:0e:75:21:8b:71:95:d3:89:2c:43:a3:4f:
89:f0:f8:e2:16:32:7c:7e:82:ed:0c:22:48:a0:e6:89:6b:6d:
4b:1c:43:cc:24:06:30:2d:da:c8:d7:20:1f:b4:15:ad:40:6d:
19:12:9e:30:d0:4b:87:66:06:ed:7b:87:dd:b6:c4:40:eb:92:
42:c7:e0:8a:c8:b8:81:ae:77:48:2f:6c:32:a2:4f:6b:a5:d3:
2d:43:eb:54:67:68:1e:17:76:3b:fa:3b:f6:6b:a2:e7:b9:5e:
3a:d2:ba:11:84:10:03:07:38:88:8f:01:a5:bd:af:8c:b4:2d:
6e:39:37:5f:95:e1:00:e7:0f:77:e4:de:44:23:5a:1c:e9:8b:
c2:12:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:19:46 2026 by rpki-client