Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/JIW91ppQFrOACtjn3f9ZCp12wgg.asa
File: JIW91ppQFrOACtjn3f9ZCp12wgg.asa (raw, json)
Hash identifier: C/yrhKJB+QdjcqMNi3etoGUrT4jwaUYzueXmwVYLCS8=
Subject key identifier: 24:85:BD:D6:9A:50:16:B3:80:0A:D8:E7:DD:FF:59:0A:9D:76:C2:08
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 01A05784226D916C292E6AA34348539352E9
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/JIW91ppQFrOACtjn3f9ZCp12wgg.asa
Signing time: Mon 31 Aug 2026 11:11:12 +0000
ASPA not before: Mon 31 Aug 2026 11:11:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212341
Providers: AS: 1299
AS: 3209
AS: 3320
AS: 6939
AS: 8881
AS: 33891
AS: 198930
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 16:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:84:22:6d:91:6c:29:2e:6a:a3:43:48:53:93:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Aug 31 11:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2485bdd69a5016b3800ad8e7ddff590a9d76c208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:3b:10:fd:aa:c1:32:2c:ec:44:27:e1:30:
51:98:d7:9f:3c:e6:83:86:c5:b3:38:af:2f:10:b0:
32:2a:08:0f:83:3b:81:27:34:bc:cd:d0:a8:4c:03:
17:76:b7:09:68:84:1c:02:a3:6f:c2:df:5d:f6:24:
ce:37:0f:e4:68:41:80:28:28:08:06:4e:bc:2b:bf:
f8:d6:1c:eb:14:8a:14:f3:48:c8:b2:62:3d:d0:be:
9b:34:79:9a:9d:e7:32:bf:cd:d7:9e:a5:45:69:66:
9e:d3:e4:37:8c:a7:74:2c:70:d4:07:77:67:a6:db:
c1:0e:f4:fb:11:7e:66:0d:b1:67:29:26:ab:9e:06:
b6:7a:ff:54:9f:a3:d7:c8:7e:e2:12:c6:f8:d0:89:
33:32:a1:8b:9c:a6:8e:e0:f1:32:ec:d4:2e:ac:03:
48:4f:d3:9d:e2:78:41:c9:74:09:46:a4:ba:e0:6f:
55:40:78:c3:52:e7:7e:56:cd:b6:b8:ba:1d:18:01:
c0:88:a4:5f:5a:fe:4c:fe:c7:6d:c9:a8:09:17:8d:
2d:01:aa:f0:f9:bb:45:18:05:1c:a4:64:ca:21:52:
7f:67:81:4a:9d:1f:e1:31:93:f9:9c:3a:79:fd:79:
0a:0f:b9:dd:4e:4b:bb:33:96:80:d4:62:37:57:3b:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:BD:D6:9A:50:16:B3:80:0A:D8:E7:DD:FF:59:0A:9D:76:C2:08
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/JIW91ppQFrOACtjn3f9ZCp12wgg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212341
Signature Algorithm: sha256WithRSAEncryption
68:de:58:8f:59:8c:76:84:a3:9f:d6:2e:0e:f5:7d:e7:51:68:
47:89:d6:0f:50:33:fd:bb:d2:c6:62:52:d2:65:68:58:e7:a6:
ef:b3:8b:f2:72:0d:dc:93:5c:d3:99:ac:5b:5a:97:2e:eb:1e:
14:73:85:c4:f5:0c:ef:c4:1d:6d:8f:1f:fd:c1:71:ab:66:dc:
e2:be:1b:13:bc:73:f5:c8:f3:37:cc:d4:25:09:54:05:84:ac:
88:2a:9b:6f:2d:fd:a1:88:e8:d8:22:53:b0:d8:49:fc:3f:68:
76:e1:43:d4:da:0e:4b:a6:ab:ad:c4:41:20:64:f5:49:d7:39:
47:09:43:df:12:49:15:57:64:07:3f:05:c7:f5:4d:6f:29:a2:
b5:d6:a2:4b:c9:bc:2e:4f:da:3e:1e:f6:9b:7e:93:a0:05:1e:
a4:c9:7d:6b:75:c1:0d:b5:cb:ad:0f:28:d6:c4:4a:ac:2a:6e:
43:ce:3d:75:f3:ee:d0:02:2a:be:b2:ac:43:0b:0f:a0:5b:5d:
49:19:e7:f7:aa:c2:56:fc:54:dc:f5:e1:91:2b:f1:63:15:51:
f0:eb:34:71:22:33:65:da:59:0f:b2:16:67:70:03:97:ba:53:
a5:7f:01:93:53:24:11:00:3c:1c:3a:b6:e5:c3:a9:99:b3:10:
e6:79:54:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 02:27:39 2026 by rpki-client