Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/DBqM2rKGn9TkbKEbcMQU0HoxyDs.asa
File: DBqM2rKGn9TkbKEbcMQU0HoxyDs.asa (raw, json)
Hash identifier: 4s6LJxOtpE78lCi1aRhGXY83NHgQ3fwl3zQWL679DpA=
Subject key identifier: 0C:1A:8C:DA:B2:86:9F:D4:E4:6C:A1:1B:70:C4:14:D0:7A:31:C8:3B
Certificate issuer: /CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Certificate serial: 01A0681C9BAA308084E1127BA8CB9525E00F
Authority key identifier: DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/DBqM2rKGn9TkbKEbcMQU0HoxyDs.asa
Signing time: Thu 03 Sep 2026 16:31:40 +0000
ASPA not before: Thu 03 Sep 2026 16:31:40 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 218811
Providers: AS: 153996
AS: 209533
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:1c:9b:aa:30:80:84:e1:12:7b:a8:cb:95:25:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2d1f2ced34dc76dbf47dbdcb01a2adedfa6363
Validity
Not Before: Sep 3 16:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c1a8cdab2869fd4e46ca11b70c414d07a31c83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:cd:c6:01:3e:60:2d:25:65:14:3f:46:9c:
db:23:ad:1e:a5:c8:ef:c3:c3:d5:b6:11:b0:0b:56:
4c:a7:32:73:b0:36:1e:e9:ac:c7:ff:10:02:ed:cd:
39:dd:e8:52:6d:a2:dd:ab:ec:34:bc:de:aa:da:2c:
a6:e7:d7:94:b6:3d:54:a3:46:02:d7:86:d1:fa:a9:
fd:a1:29:82:72:36:11:55:1b:7f:2c:f9:a8:f2:d7:
e0:79:fb:49:06:71:d0:94:1c:1e:f5:4d:d2:fd:1e:
63:8f:5d:15:05:fd:1f:26:70:ca:11:e8:29:23:7f:
6d:4d:2f:5a:56:7f:72:4b:99:56:1b:50:09:93:71:
e2:ee:3c:ac:e2:c2:53:ec:14:62:bd:ef:e2:87:16:
fe:66:0b:73:eb:b4:64:5a:a3:2f:b8:2e:97:7a:e7:
89:b6:b4:83:80:fb:97:dc:a0:83:99:07:53:a7:16:
f0:63:44:56:6d:72:bc:65:b5:9b:d3:d8:4a:99:0d:
be:31:2a:2a:ba:d0:fb:7e:7f:79:61:60:50:ff:78:
34:06:ac:0a:45:24:24:0f:07:8a:e7:b7:73:4e:9e:
ec:35:9f:06:b2:a2:56:bb:8a:03:b7:40:fb:1c:11:
b8:cb:15:cf:44:04:38:ee:b4:ba:3c:e0:fa:29:19:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:8C:DA:B2:86:9F:D4:E4:6C:A1:1B:70:C4:14:D0:7A:31:C8:3B
X509v3 Authority Key Identifier:
keyid:DC:2D:1F:2C:ED:34:DC:76:DB:F4:7D:BD:CB:01:A2:AD:ED:FA:63:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C0fLO003Hbb9H29ywGire36Y2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/DBqM2rKGn9TkbKEbcMQU0HoxyDs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3d2974-9ee7-4122-b6a7-3ce9d1446ff9/1/3C0fLO003Hbb9H29ywGire36Y2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218811
Signature Algorithm: sha256WithRSAEncryption
bd:c4:89:78:ec:f0:ce:fc:0d:60:d3:3b:f1:c2:dd:99:b4:5c:
12:ba:0d:52:83:07:e5:dd:5f:54:ac:15:71:83:f9:bd:bf:83:
65:ad:66:8b:92:74:af:70:00:aa:67:d1:34:0d:0b:d4:df:a6:
54:ce:17:42:9f:48:01:95:bf:50:9a:a6:ab:dd:3a:c4:4e:d6:
09:6d:a9:23:3e:87:51:47:e4:db:54:b9:fd:73:1b:b9:f3:3a:
a4:e8:fd:94:dd:f0:74:8c:cd:fd:55:62:7b:53:a1:0b:62:3d:
eb:ab:a7:7c:64:64:d3:3a:9e:ae:d9:5d:40:c9:37:a5:d8:60:
a9:33:14:c4:bd:ae:f1:b3:09:7a:be:9c:97:33:0a:e6:75:09:
d0:47:ea:e0:54:56:fc:c1:f7:1b:81:7a:6a:71:70:d2:ac:fd:
a2:dc:05:ae:fb:cd:7e:d6:fa:02:6b:4a:e8:c1:29:ca:b5:0e:
97:df:32:cf:33:08:cc:65:f0:9e:f0:d9:b4:4b:6a:a4:fb:ee:
c5:6a:7a:58:6c:bf:7d:f4:41:d3:f2:fc:93:01:33:09:04:7a:
24:dc:21:bb:5c:da:50:16:81:4e:be:9c:e7:a3:2c:c2:e5:90:
9b:31:47:91:d7:28:3d:c5:68:19:28:f5:e5:fd:94:5f:9e:6c:
f8:e4:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:36 2026 by rpki-client