Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/1Z0gHou-ynxGM9GYOa-zov0qgzA.asa
File: 1Z0gHou-ynxGM9GYOa-zov0qgzA.asa (raw, json)
Hash identifier: jtfR814LdlSxFZRgys0rHTbiwVWqqrwEA763k+1BWpQ=
Subject key identifier: D5:9D:20:1E:8B:BE:CA:7C:46:33:D1:98:39:AF:B3:A2:FD:2A:83:30
Certificate issuer: /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial: 01A10CA6F5B73C8D68F8615849E412054099
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/1Z0gHou-ynxGM9GYOa-zov0qgzA.asa
Signing time: Mon 05 Oct 2026 15:20:30 +0000
ASPA not before: Mon 05 Oct 2026 15:20:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219421
Providers: AS: 6939
AS: 11967
AS: 31898
AS: 41051
AS: 47272
AS: 52025
AS: 209533
AS: 212895
AS: 214205
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:a6:f5:b7:3c:8d:68:f8:61:58:49:e4:12:05:40:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Validity
Not Before: Oct 5 15:20:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59d201e8bbeca7c4633d19839afb3a2fd2a8330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:ff:37:81:02:04:70:c8:a5:18:7d:90:7d:
ae:f8:55:b9:32:64:50:6a:38:35:4f:ce:1a:ac:0e:
73:d8:82:52:dd:13:bd:ed:1c:0b:a7:c1:86:b6:18:
82:e4:d8:a4:4f:3c:04:be:a8:79:9a:59:b3:e5:b3:
ec:ac:84:99:24:7e:45:68:76:bb:a3:18:e2:00:cc:
e8:b0:f3:1d:9b:3b:88:07:53:28:da:c4:ce:2d:49:
29:c4:bb:84:39:24:99:c9:c1:8e:b2:2e:9b:8b:8c:
62:21:75:36:d7:31:70:8a:69:c1:ab:43:33:64:2d:
36:f6:55:5f:dc:c0:ec:20:9d:62:44:f1:52:66:9e:
e2:bc:60:ef:bc:f3:4e:55:23:77:8e:c1:6a:59:5e:
fc:3d:d2:11:b7:a5:c9:c8:81:49:ed:95:59:57:de:
2e:ed:49:9f:83:74:0f:4e:29:08:6b:59:86:41:44:
78:75:86:5d:96:3a:3d:7b:0b:d9:77:fa:b0:a8:98:
ae:1f:c3:68:d5:a3:7c:f3:e8:cf:75:6e:bc:80:22:
d5:bb:f7:a1:6a:1d:9e:0d:d9:be:8d:5f:09:d2:9c:
3c:0b:ef:ea:c2:c0:4a:a6:f3:7e:a7:57:cd:30:af:
81:c1:a6:53:b0:11:db:f9:d8:6e:b8:bb:eb:e8:56:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:20:1E:8B:BE:CA:7C:46:33:D1:98:39:AF:B3:A2:FD:2A:83:30
X509v3 Authority Key Identifier:
keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/1Z0gHou-ynxGM9GYOa-zov0qgzA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219421
Signature Algorithm: sha256WithRSAEncryption
49:9c:80:47:fa:34:fa:45:73:f1:1e:f6:d9:df:2b:ad:5d:6f:
cd:d1:6e:71:f8:19:d3:60:57:de:8d:c0:ff:dd:7d:a7:23:43:
57:ac:3a:e0:0e:32:9c:51:4e:7a:b4:04:6a:e6:88:a6:12:c4:
78:f2:0b:f1:9f:d9:a2:78:41:f9:22:ab:aa:9a:01:7c:94:02:
92:b5:7b:58:15:ca:ac:f1:c7:23:66:65:c5:d3:07:6b:f3:26:
e9:9b:27:c9:65:13:aa:86:b9:72:37:9c:c0:fa:4f:48:81:14:
86:f7:52:10:6e:bb:3d:4c:d2:b9:5f:a5:09:fb:6b:ff:98:d3:
cf:db:e8:6f:18:86:4b:94:10:66:b0:d0:59:1d:19:83:f8:40:
77:da:91:61:a1:bb:05:46:10:a7:13:81:5d:d2:0b:2e:30:ea:
c5:35:dd:dd:00:c1:c5:a3:e7:ec:d9:9d:90:91:f2:fe:da:6e:
b2:fe:f2:96:cb:42:f8:b3:de:d4:f3:4d:9c:de:b9:5c:00:34:
85:38:64:a5:0e:11:0e:88:c7:be:d7:e4:22:3c:27:7b:d2:0c:
0a:cf:c1:04:68:8e:3d:88:c7:6c:b1:f7:66:d4:40:e1:c4:07:
32:64:b5:43:b0:53:f3:85:5e:d5:b0:bb:b1:f5:4f:67:b9:98:
87:cf:1c:6b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaEMpvW3PI1o+GFYSeQSBUCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjFmYzBmMTY1YjQ2NDhiNzVmZGZhMzgwZDIzNzg5Yjk2
ZmViNTIwHhcNMjYxMDA1MTUyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTlkMjAxZThiYmVjYTdjNDYzM2QxOTgzOWFmYjNhMmZkMmE4MzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh//N4ECBHDIpRh9kH2u+FW5MmRQ
ajg1T84arA5z2IJS3RO97RwLp8GGthiC5NikTzwEvqh5mlmz5bPsrISZJH5FaHa7
oxjiAMzosPMdmzuIB1Mo2sTOLUkpxLuEOSSZycGOsi6bi4xiIXU21zFwimnBq0Mz
ZC029lVf3MDsIJ1iRPFSZp7ivGDvvPNOVSN3jsFqWV78PdIRt6XJyIFJ7ZVZV94u
7Umfg3QPTikIa1mGQUR4dYZdljo9ewvZd/qwqJiuH8No1aN88+jPdW68gCLVu/eh
ah2eDdm+jV8J0pw8C+/qwsBKpvN+p1fNMK+BwaZTsBHb+dhuuLvr6FYpAwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNWdIB6Lvsp8RjPRmDmvs6L9KoMwMB8GA1UdIwQY
MBaAFIth/A8WW0ZIt1/fo4DSN4m5b+tSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJIOER4WmJSa2kzWDktamdOSTNpYmx2NjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iODI3NDctNzBhZi00ZDgwLWE4MWYt
YjZlMTg1ZTE1NWE5LzEvMVowZ0hvdS15bnhHTTlHWU9hLXpvdjBxZ3pBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iODI3NDctNzBhZi00ZDgwLWE4MWYtYjZlMTg1ZTE1NWE5
LzEvaTJIOER4WmJSa2kzWDktamdOSTNpYmx2NjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNZHTANBgkqhkiG
9w0BAQsFAAOCAQEASZyAR/o0+kVz8R722d8rrV1vzdFucfgZ02BX3o3A/919pyND
V6w64A4ynFFOerQEauaIphLEePIL8Z/ZonhB+SKrqpoBfJQCkrV7WBXKrPHHI2Zl
xdMHa/Mm6ZsnyWUTqoa5cjecwPpPSIEUhvdSEG67PUzSuV+lCftr/5jTz9vobxiG
S5QQZrDQWR0Zg/hAd9qRYaG7BUYQpxOBXdILLjDqxTXd3QDBxaPn7NmdkJHy/tpu
sv7ylstC+LPe1PNNnN65XAA0hThkpQ4RDojHvtfkIjwne9IMCs/BBGiOPYjHbLH3
ZtRA4cQHMmS1Q7BT84Ve1bC7sfVPZ7mYh88caw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:43:59 2026 by rpki-client