Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/xqAixzHxlN966fRenr5XBiPgZn8.asa
File: xqAixzHxlN966fRenr5XBiPgZn8.asa (raw, json)
Hash identifier: 5Xg49cf9RjMtXD/hwpV8EsDl4tWwJlu6vHXbTMSTy+8=
Subject key identifier: C6:A0:22:C7:31:F1:94:DF:7A:E9:F4:5E:9E:BE:57:06:23:E0:66:7F
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019FEA7A2E8601422DF88E813A288C9D97BC
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/xqAixzHxlN966fRenr5XBiPgZn8.asa
Signing time: Mon 10 Aug 2026 07:01:43 +0000
ASPA not before: Mon 10 Aug 2026 07:01:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209556
Providers: AS: 20473
AS: 41051
AS: 134666
AS: 212027
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:7a:2e:86:01:42:2d:f8:8e:81:3a:28:8c:9d:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Aug 10 07:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6a022c731f194df7ae9f45e9ebe570623e0667f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:78:13:24:06:87:c6:52:e7:fa:b7:e8:70:
7f:d4:fa:dc:61:b9:75:43:6d:56:80:ab:92:41:e6:
96:6b:39:7d:f8:2b:4c:56:9d:e4:09:a0:0d:0b:99:
db:34:0d:83:2a:09:94:6c:56:43:39:c8:5d:0c:a0:
12:ec:52:04:7b:65:3b:3b:b2:dd:54:89:82:f9:39:
f1:07:63:80:f1:ea:83:f4:1b:f1:f8:2d:15:58:40:
c2:80:ed:5e:c8:30:4f:3a:2b:90:01:12:99:a6:f6:
e7:7b:a6:51:c9:e2:12:5c:34:1c:a7:b3:e2:a9:8a:
48:f7:1b:52:03:4f:77:e9:cd:eb:c6:e6:2d:b6:a6:
fa:31:f0:ba:3c:45:9f:47:5f:94:c7:07:04:90:c7:
4f:a5:09:f9:c7:ae:c2:ae:a8:e2:b4:dd:56:62:0b:
db:59:45:b3:e2:02:b0:88:c4:e1:1e:d4:e2:cd:c3:
ba:ba:42:1d:5f:99:bc:b8:3a:3a:87:57:b4:5c:59:
0d:a9:30:7e:d4:e4:76:73:e6:53:82:0b:95:ec:9d:
07:2d:c6:44:1a:63:72:59:01:64:10:ea:2b:e4:82:
c1:8f:61:b5:78:2e:4e:c9:89:53:1d:2b:2c:b5:c3:
13:59:01:f2:4b:8b:e9:78:24:90:12:9c:d7:7a:68:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:22:C7:31:F1:94:DF:7A:E9:F4:5E:9E:BE:57:06:23:E0:66:7F
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/xqAixzHxlN966fRenr5XBiPgZn8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209556
Signature Algorithm: sha256WithRSAEncryption
7a:94:76:35:34:0e:97:9f:ce:e4:dc:71:8c:e6:e4:36:3e:69:
7e:fb:d3:8b:f1:9e:bf:02:40:2d:14:0a:6d:80:7f:9c:67:a5:
5f:f6:ad:25:0b:34:3b:17:7c:77:4e:41:14:61:e3:85:ea:38:
06:6f:be:3d:ca:71:10:dc:11:d4:21:b7:c1:d2:5c:d4:bd:51:
51:a5:73:a3:43:88:69:a3:25:9e:f5:73:c4:54:71:9e:b3:a7:
85:1d:95:32:3d:7e:c4:6f:dc:6e:f7:d9:d6:f4:b9:6f:08:a4:
a6:1d:ec:8c:81:bd:2a:ac:60:0f:e8:21:7c:29:01:ae:d7:9f:
cf:22:f9:d8:47:40:26:18:6e:9d:d1:83:cd:5d:46:4e:84:4c:
2c:de:df:82:bd:a7:8f:f6:a9:56:7a:f7:8f:77:9e:a0:8b:a5:
90:bd:cc:5c:d4:52:ee:54:6a:5c:16:21:32:45:af:df:8b:65:
00:c6:70:4d:3b:17:cf:c5:ec:3d:69:6e:4f:2f:b6:10:29:25:
2b:d8:7e:16:30:b6:c9:c1:7c:ab:63:1f:b8:5b:96:f9:39:9a:
8e:f4:b7:2c:47:f0:6e:93:ff:38:1d:59:cd:79:32:48:3f:15:
db:fd:1f:4a:a8:2b:c7:ce:0c:ee:ef:e8:22:66:79:60:d4:ff:
1a:7f:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:00 2026 by rpki-client