Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/oEXJmfilftDc5eLAiDDdhGooeOM.asa
File: oEXJmfilftDc5eLAiDDdhGooeOM.asa (raw, json)
Hash identifier: VMaKcmh6u+YdbkAXZopwkYC2wQOBV5z+0rVIgehqv7Q=
Subject key identifier: A0:45:C9:99:F8:A5:7E:D0:DC:E5:E2:C0:88:30:DD:84:6A:28:78:E3
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019DBA5FB1A54A68AC26F84242485046C86F
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/oEXJmfilftDc5eLAiDDdhGooeOM.asa
Signing time: Thu 23 Apr 2026 12:45:26 +0000
ASPA not before: Thu 23 Apr 2026 12:45:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215172
Providers: AS: 174
AS: 3204
AS: 6939
AS: 7720
AS: 17408
AS: 34927
AS: 44324
AS: 53356
AS: 199310
AS: 199605
AS: 203168
AS: 206069
AS: 206216
AS: 209565
AS: 213605
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:5f:b1:a5:4a:68:ac:26:f8:42:42:48:50:46:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 23 12:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a045c999f8a57ed0dce5e2c08830dd846a2878e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:fd:9f:87:f9:4f:c7:01:b9:d6:59:3d:3e:
86:a2:48:4a:94:9c:38:fa:a0:80:7e:7f:cd:59:6e:
24:42:50:10:45:ed:d2:fd:1d:24:10:30:39:ba:d3:
e2:62:37:3b:fa:ef:44:36:44:1b:50:36:af:08:de:
33:60:42:52:db:bc:20:ac:21:d9:30:3e:06:ed:a0:
f3:f3:e1:f7:d3:b8:be:55:c9:d0:54:48:9f:4e:d9:
f2:8f:ef:dd:b4:cc:aa:8e:07:6e:b5:8f:23:23:95:
da:e6:15:11:64:f2:a8:23:14:82:5e:9b:a6:9d:fe:
49:1e:d9:d5:6d:a0:01:36:c5:64:08:cc:03:16:96:
3b:1e:dc:d5:fb:27:66:a3:3f:56:31:76:f3:f3:f1:
4e:33:19:b4:71:35:9c:d2:bc:8a:1d:23:c9:f1:76:
9e:16:85:63:73:65:80:d1:b4:58:27:cb:7f:ff:c5:
87:8a:c4:fc:c5:db:d0:a1:eb:3d:c9:15:1b:c7:50:
d9:d0:08:97:10:e5:10:7e:c0:33:0d:b8:a0:34:e3:
a3:da:c1:0c:1e:3b:65:56:33:a6:91:53:c1:98:97:
e8:b6:0e:bf:84:e7:70:69:03:7d:fa:07:f5:8a:4c:
e5:b4:cb:9b:2c:96:a7:e6:84:b0:84:b6:10:90:3a:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:C9:99:F8:A5:7E:D0:DC:E5:E2:C0:88:30:DD:84:6A:28:78:E3
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/oEXJmfilftDc5eLAiDDdhGooeOM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215172
Signature Algorithm: sha256WithRSAEncryption
9e:42:8a:6d:5b:86:b9:05:60:60:c9:99:fd:81:7f:00:95:00:
45:c7:46:4d:de:bf:67:7f:56:85:30:3c:38:6f:c0:88:31:4b:
ea:8e:57:53:df:bf:57:a1:40:29:d7:07:bf:95:89:77:8d:e4:
cf:cf:e0:11:05:2a:b5:88:67:2a:7d:ea:7e:61:45:2d:fb:34:
2b:f0:ec:02:db:87:3f:06:64:c7:c7:3f:98:e5:56:80:05:47:
99:78:2b:d8:ec:7f:0f:e7:c0:a4:bc:f2:15:05:84:b7:63:8f:
57:d9:dd:7c:32:b6:ed:cb:b7:c0:ce:27:a4:f8:05:06:a4:05:
9b:86:a8:fb:74:b2:8a:3f:66:4a:d5:ad:f6:82:9a:20:44:36:
dd:8f:59:64:82:6e:a8:a4:dc:73:86:9d:88:c6:79:15:66:be:
a5:8c:0d:42:a4:25:ee:6a:d2:30:1a:12:33:65:ca:ce:f0:b3:
ab:09:86:a8:8c:84:da:05:b6:f8:3c:ea:89:3d:ca:93:b5:1c:
53:2c:ae:1f:21:a3:91:ff:02:16:28:5c:26:b6:82:b5:70:b7:
88:8b:b2:d0:96:21:d7:0c:38:21:e7:2d:fb:80:d4:08:9a:a3:
2d:1d:7b:86:e1:da:fc:82:dc:f7:d4:37:80:84:24:f3:95:96:
8e:19:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:03:18 2026 by rpki-client