Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/vZ76MzTutA9h8TjLG2CmYL50980.asa
File: vZ76MzTutA9h8TjLG2CmYL50980.asa (raw, json)
Hash identifier: tORdkyvpxtXpQRLaJtpkfrPDjc0NvG7YKt8jh4XCvXo=
Subject key identifier: BD:9E:FA:33:34:EE:B4:0F:61:F1:38:CB:1B:60:A6:60:BE:74:F7:CD
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019CBE286F44972B045B20B3DB6E15009F94
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/vZ76MzTutA9h8TjLG2CmYL50980.asa
Signing time: Thu 05 Mar 2026 13:20:46 +0000
ASPA not before: Thu 05 Mar 2026 13:20:46 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215172
Providers: AS: 6939
AS: 7720
AS: 34927
AS: 44324
AS: 53356
AS: 199310
AS: 203168
AS: 206216
AS: 213605
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:28:6f:44:97:2b:04:5b:20:b3:db:6e:15:00:9f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Mar 5 13:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd9efa3334eeb40f61f138cb1b60a660be74f7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:70:59:66:19:51:59:bc:5c:ce:09:f9:36:
cb:60:e3:7a:7f:a8:3a:ec:61:9e:cd:16:36:1e:9b:
9d:86:a0:81:85:fb:01:db:6e:ae:f7:c9:ea:61:f1:
ea:ac:cd:5f:ae:c1:6d:eb:eb:9b:a7:38:82:ff:1b:
a9:0b:9e:8e:9f:a1:f6:29:f8:27:40:5a:d0:90:bf:
1e:ed:eb:ae:9e:5c:82:b2:15:26:b3:36:38:97:4f:
c3:b0:78:fb:83:e4:15:67:10:0c:ce:bb:f6:cb:b8:
7f:d3:06:44:a2:37:d2:af:e0:cc:ee:20:0f:e7:61:
06:ad:2a:d6:7e:36:ef:f5:b8:a6:37:17:86:bf:b0:
51:ec:b3:39:a1:51:2f:de:69:51:8b:3c:25:5e:3d:
52:f9:11:55:f0:f1:d0:45:24:5b:86:dc:20:d1:e6:
ad:a0:0e:c2:13:9c:2b:5e:e4:aa:8b:fd:fd:a1:9c:
9d:db:f7:8e:4c:ea:7c:97:0c:89:8a:9a:fb:75:ff:
4a:25:ad:5e:b5:87:05:6e:91:76:c4:e2:5d:9b:00:
62:03:1c:9b:a8:d0:fd:ca:f9:d4:11:c6:e6:c0:2b:
19:77:97:06:dd:ee:fd:e1:3d:3e:97:db:fb:fe:23:
23:77:8f:f0:9c:ad:db:dc:9b:6e:a7:c8:70:7c:1e:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:FA:33:34:EE:B4:0F:61:F1:38:CB:1B:60:A6:60:BE:74:F7:CD
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/vZ76MzTutA9h8TjLG2CmYL50980.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215172
Signature Algorithm: sha256WithRSAEncryption
8c:04:77:f5:37:0f:28:44:98:07:bd:22:74:2e:4d:42:a8:15:
76:f0:26:0d:b6:4f:cd:4a:a3:77:a2:0a:bf:12:29:63:1a:07:
43:27:5f:6e:05:d5:1c:99:0d:9c:f3:81:9b:ba:aa:d7:ba:32:
67:b3:32:81:27:08:fe:db:9b:38:06:75:4d:2f:67:85:70:cd:
9c:2e:04:ed:d9:05:f4:72:92:ef:05:fc:e8:30:5b:46:69:31:
a8:88:00:93:35:7e:ad:32:a8:f6:8b:d9:7a:bb:c6:6f:93:51:
81:18:d5:e0:da:d8:98:b3:7c:7d:bd:e0:f4:69:d7:f6:1e:d6:
a2:59:4d:3d:7d:6c:01:1b:6b:a3:4f:c2:fd:f9:d3:6b:b2:96:
22:fe:12:cb:18:d6:08:55:7b:81:3d:5e:28:ba:b8:6b:4f:db:
e6:94:6c:f4:19:fe:19:a9:e0:32:cf:e2:c7:79:3d:71:3a:2e:
02:c7:f3:7e:82:99:17:58:8a:8d:87:20:ba:81:75:e3:a5:de:
b6:2b:f6:fc:9f:95:c0:10:b1:21:4a:e1:a6:6d:0b:6a:bd:46:
d6:f6:8c:c1:e8:15:95:5e:19:7e:b0:70:ef:d7:8c:f1:55:43:
c2:2a:db:7e:3f:f5:26:06:46:74:5e:9a:0c:0b:ce:c5:39:ad:
cd:80:7a:6e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZy+KG9ElysEWyCz224VAJ+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzN2U1NzA3NDQ0YTE2YzY4ZTFhMWM1MmFjNDkwOWQwYmRj
YTYyYWUwHhcNMjYwMzA1MTMyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDllZmEzMzM0ZWViNDBmNjFmMTM4Y2IxYjYwYTY2MGJlNzRmN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzJwWWYZUVm8XM4J+TbLYON6f6g6
7GGezRY2HpudhqCBhfsB226u98nqYfHqrM1frsFt6+ubpziC/xupC56On6H2Kfgn
QFrQkL8e7euunlyCshUmszY4l0/DsHj7g+QVZxAMzrv2y7h/0wZEojfSr+DM7iAP
52EGrSrWfjbv9bimNxeGv7BR7LM5oVEv3mlRizwlXj1S+RFV8PHQRSRbhtwg0eat
oA7CE5wrXuSqi/39oZyd2/eOTOp8lwyJipr7df9KJa1etYcFbpF2xOJdmwBiAxyb
qND9yvnUEcbmwCsZd5cG3e794T0+l9v7/iMjd4/wnK3b3Jtup8hwfB7AYwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFL2e+jM07rQPYfE4yxtgpmC+dPfNMB8GA1UdIwQY
MBaAFBN+VwdEShbGjhocUqxJCdC9ymKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYt
YzBkMjA3YzAyZDI3LzEvdlo3Nk16VHV0QTloOFRqTEcyQ21ZTDUwOTgwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82ZWFlYWUtZjQ1Yy00MzU1LTkzMmYtYzBkMjA3YzAyZDI3
LzEvRTM1WEIwUktGc2FPR2h4U3JFa0owTDNLWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIhDANBgkqhkiG
9w0BAQsFAAOCAQEAjAR39TcPKESYB70idC5NQqgVdvAmDbZPzUqjd6IKvxIpYxoH
QydfbgXVHJkNnPOBm7qq17oyZ7MygScI/tubOAZ1TS9nhXDNnC4E7dkF9HKS7wX8
6DBbRmkxqIgAkzV+rTKo9ovZervGb5NRgRjV4NrYmLN8fb3g9GnX9h7WollNPX1s
ARtro0/C/fnTa7KWIv4SyxjWCFV7gT1eKLq4a0/b5pRs9Bn+GangMs/ix3k9cTou
AsfzfoKZF1iKjYcguoF146Xetiv2/J+VwBCxIUrhpm0Lar1G1vaMwegVlV4ZfrBw
79eM8VVDwirbfj/1JgZGdF6aDAvOxTmtzYB6bg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 19:54:22 2026 by rpki-client