Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/o1gfxD9uB6dijfjwREKMVnXFymQ.asa
File: o1gfxD9uB6dijfjwREKMVnXFymQ.asa (raw, json)
Hash identifier: vbDHhE0GLzvSumxqvz1chGV9yQc+GPUXmwB/dlI8WzU=
Subject key identifier: A3:58:1F:C4:3F:6E:07:A7:62:8D:F8:F0:44:42:8C:56:75:C5:CA:64
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019CD7D1B5E63BE79238B681F1F65B582EFA
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/o1gfxD9uB6dijfjwREKMVnXFymQ.asa
Signing time: Tue 10 Mar 2026 12:56:10 +0000
ASPA not before: Tue 10 Mar 2026 12:56:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209565
Providers: AS: 201944
AS: 203168
AS: 215172
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:d1:b5:e6:3b:e7:92:38:b6:81:f1:f6:5b:58:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Mar 10 12:56:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3581fc43f6e07a7628df8f044428c5675c5ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:9b:43:31:45:74:d9:77:fd:00:9f:8b:16:
b3:1d:1a:0e:e2:f3:10:5f:dd:c4:fc:da:d3:fe:a2:
f5:69:7e:4b:a0:b0:09:f9:dc:9e:21:ac:66:e2:ae:
12:a9:24:5c:6b:77:cf:2a:dc:9b:7b:98:58:b8:8b:
68:32:e7:75:66:c9:e4:61:e7:63:c4:f6:17:44:11:
e1:96:96:3e:89:f0:30:8b:47:23:a8:a1:22:e8:98:
5f:5b:7b:91:48:fd:ba:d9:f8:ca:a3:79:f1:aa:65:
a3:5e:cf:1d:a6:fe:26:6b:04:b0:b3:4c:bf:1d:31:
65:ee:57:7c:ac:4e:35:21:d3:52:79:c5:9e:a9:6c:
c0:b0:a9:b9:2d:6c:9a:99:53:30:4e:6f:3c:23:41:
42:13:bf:ed:70:38:bb:f2:af:f5:d4:25:3b:15:d9:
71:cf:8a:ef:70:11:d7:b5:cf:a8:8a:5f:0e:53:8c:
41:9a:c6:46:6d:1c:c1:28:dd:5e:85:6d:a1:23:24:
f7:3b:33:50:b9:0d:da:0a:31:de:a2:ba:7e:b8:50:
70:03:a5:81:3b:ea:5b:b6:d9:39:fa:8f:48:58:9c:
df:49:36:83:0e:c3:a1:5c:97:3c:f0:e6:78:68:7a:
7c:24:91:30:88:fc:79:8d:c3:57:67:4a:44:b9:65:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:1F:C4:3F:6E:07:A7:62:8D:F8:F0:44:42:8C:56:75:C5:CA:64
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/o1gfxD9uB6dijfjwREKMVnXFymQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209565
Signature Algorithm: sha256WithRSAEncryption
8c:71:f6:3a:6e:87:46:46:ae:58:22:b8:7a:9b:85:36:2c:ed:
99:89:ac:07:a0:de:f8:55:7f:17:3f:17:9d:52:b8:f8:f4:16:
58:48:bd:b0:3f:8f:c0:17:5a:c3:f0:35:db:dc:86:4d:6a:94:
62:de:a6:e2:c1:6f:3c:91:bd:83:32:6a:e7:ac:e8:69:fd:19:
c7:01:c2:34:7e:7d:c8:0a:d5:de:54:1f:84:08:35:ba:cb:80:
13:27:69:b4:00:da:9f:38:b8:ed:10:00:45:92:38:7d:12:28:
9a:5c:5b:7c:7e:b1:76:41:68:d8:7d:6f:97:94:fb:fc:8a:68:
db:b1:06:78:46:b7:4c:5d:4c:55:b3:9a:d9:0a:fb:a9:db:aa:
2d:7b:8b:e5:7b:eb:74:f8:c6:4c:22:a7:76:bb:34:61:a6:fa:
e3:68:28:1b:fe:9d:62:6f:11:b8:ab:47:a8:9d:76:1f:b7:46:
72:26:a1:63:66:13:8d:b7:e6:6a:42:b4:a2:2e:6b:37:bb:11:
32:78:5d:39:f2:14:27:9e:cd:ae:62:9f:fc:de:33:c0:df:88:
98:31:fa:67:25:15:b4:72:df:50:f6:2c:d5:0b:7b:1e:0d:58:
2f:23:eb:32:ca:cd:b3:9b:83:58:26:7a:e7:93:db:92:ff:3e:
dd:9f:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:54:22 2026 by rpki-client