Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/IcfmTS0CP6rB67CQkMANE7ZvrBE.asa
File: IcfmTS0CP6rB67CQkMANE7ZvrBE.asa (raw, json)
Hash identifier: qUGWiJdx4nnSTLe0cuj2ysRzudqP0tr7YNfjwXyCMjs=
Subject key identifier: 21:C7:E6:4D:2D:02:3F:AA:C1:EB:B0:90:90:C0:0D:13:B6:6F:AC:11
Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial: 019CDC95319B7B01AB242E542F5B292DE9D6
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/IcfmTS0CP6rB67CQkMANE7ZvrBE.asa
Signing time: Wed 11 Mar 2026 11:08:10 +0000
ASPA not before: Wed 11 Mar 2026 11:08:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 50338
Providers: AS: 16019
AS: 20473
AS: 47232
AS: 60068
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:95:31:9b:7b:01:ab:24:2e:54:2f:5b:29:2d:e9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Validity
Not Before: Mar 11 11:08:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c7e64d2d023faac1ebb09090c00d13b66fac11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:74:3f:57:a8:91:d7:28:5c:f9:14:58:86:
fe:a2:58:e8:40:91:73:6b:d0:f1:cd:89:e0:32:a2:
60:de:30:08:21:a1:68:e8:7c:41:e6:a7:89:cd:16:
b0:f4:06:90:7e:44:18:31:12:67:3d:76:55:9c:14:
e4:57:8b:fc:f8:85:c2:15:f3:0f:6a:61:bf:24:a6:
30:27:25:45:07:60:6a:1a:de:bb:bf:41:a6:00:d8:
ec:e6:c5:9f:21:2c:95:27:9a:fd:29:68:84:63:be:
60:db:f8:72:c0:9d:3d:01:d0:db:15:e2:58:ef:b8:
49:32:51:32:69:fd:e5:8b:55:d0:d5:16:9e:38:1a:
52:f7:a6:a8:26:21:66:41:39:47:a8:23:30:fb:f9:
8a:ee:76:4e:b3:bf:ca:79:52:e2:91:16:75:6e:0b:
0d:ed:63:59:bf:b0:68:b1:28:4d:75:e0:11:22:38:
a9:9a:7c:6a:7b:ee:93:0f:83:77:aa:b2:82:ac:c5:
68:53:2a:34:46:c0:b2:90:eb:e5:b4:2d:f9:b8:05:
b0:7a:de:49:27:27:3e:13:55:4e:a3:8b:02:58:30:
42:73:b1:c2:57:03:6c:e2:25:73:1f:28:98:d0:5e:
c2:80:a3:22:46:ac:c1:bf:6b:94:43:23:a2:8f:e9:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:E6:4D:2D:02:3F:AA:C1:EB:B0:90:90:C0:0D:13:B6:6F:AC:11
X509v3 Authority Key Identifier:
keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/IcfmTS0CP6rB67CQkMANE7ZvrBE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50338
Signature Algorithm: sha256WithRSAEncryption
16:49:bf:f2:76:53:1d:c2:50:14:3d:d8:95:83:e4:b6:73:17:
c1:34:9a:4f:72:8b:f9:bc:a4:d7:a1:e1:5c:f3:9a:68:f5:db:
27:e7:8f:fb:84:a8:8c:7e:4d:8a:c8:23:e4:cc:31:80:c1:ca:
2a:8d:81:2f:a0:5e:ea:d3:f1:2a:5f:41:c6:ba:3c:cb:e4:5d:
97:f8:18:c7:2a:64:7f:11:bc:18:7c:bb:8a:f6:09:f2:46:10:
af:9a:81:83:ec:b2:1a:be:34:f0:72:d1:8f:16:6a:ef:7a:f9:
80:91:75:14:6d:b3:a6:6a:e2:5a:34:9c:20:3d:2c:d2:0a:3f:
d9:20:8f:8b:d9:4a:3f:13:09:b7:65:a7:a6:9c:62:78:4c:17:
4a:22:d5:fb:de:7e:f4:a4:41:2c:9e:7f:ac:03:0a:82:ec:07:
98:1d:17:39:84:6e:0d:6a:5d:3d:3c:02:de:d5:cd:59:c6:01:
d2:52:52:73:7f:02:b2:6f:c2:90:9c:f2:12:37:c8:48:57:f7:
9d:72:01:14:48:28:3b:70:c4:5b:08:77:9e:b9:19:97:e0:ea:
e3:47:c6:6b:62:d8:53:58:bc:5e:44:2a:d6:48:c3:6a:d5:9e:
21:8c:ad:71:17:81:0b:11:88:41:d1:d2:34:26:14:32:cb:7f:
e2:47:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:54:14 2026 by rpki-client