Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/cST23LuN3w66sBxb_OXZ1pkXIXo.asa
File: cST23LuN3w66sBxb_OXZ1pkXIXo.asa (raw, json)
Hash identifier: lZY1PDiHURGQ7ogGrBkQN7dp4ASP3/4zd1S0cXWBhGA=
Subject key identifier: 71:24:F6:DC:BB:8D:DF:0E:BA:B0:1C:5B:FC:E5:D9:D6:99:17:21:7A
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 019CC2C8D27C3A82982DA4AF323971415CA7
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/cST23LuN3w66sBxb_OXZ1pkXIXo.asa
Signing time: Fri 06 Mar 2026 10:54:26 +0000
ASPA not before: Fri 06 Mar 2026 10:54:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200561
Providers: AS: 2914
AS: 5405
AS: 50629
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:c8:d2:7c:3a:82:98:2d:a4:af:32:39:71:41:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Mar 6 10:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7124f6dcbb8ddf0ebab01c5bfce5d9d69917217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:f4:66:c7:cb:fd:f6:cb:3e:90:d1:79:65:
ea:59:90:07:65:49:54:76:61:3d:18:5f:8e:38:7c:
dc:ff:17:cd:79:c0:f9:1f:c2:03:96:2f:2d:b0:01:
9d:7a:cd:e6:ad:4f:86:08:18:a2:55:98:e4:50:4f:
12:62:31:76:b4:28:cb:55:a6:4b:50:fb:cd:c1:32:
b7:23:b9:43:54:34:5c:f9:b3:e0:2d:ef:b8:dc:ad:
97:13:4e:48:c6:17:3c:d4:a0:b0:d1:b2:a8:41:95:
29:ce:98:56:a6:06:73:cd:72:8a:e8:ad:e9:35:a1:
cf:5c:b9:a4:fc:8e:db:a8:68:a3:2a:e9:4b:4e:84:
3f:7c:e7:a3:1e:42:53:61:e5:51:80:16:7a:41:7b:
99:43:21:38:ff:a2:57:e7:45:c6:e2:da:21:17:27:
c8:e7:b2:17:42:59:fd:3b:69:25:65:0d:85:1d:ca:
d4:84:3a:23:11:be:ca:ae:f8:e2:af:97:d2:dd:3a:
84:53:c6:2e:a3:3b:61:16:bf:1e:c1:20:98:32:1a:
0d:58:52:35:b7:1b:a9:e7:9c:9f:d7:e6:88:51:90:
07:35:4e:b4:12:08:97:37:e9:49:2a:95:d4:6d:50:
a5:4c:8d:21:e2:7c:86:bf:76:15:12:30:86:7e:c0:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:F6:DC:BB:8D:DF:0E:BA:B0:1C:5B:FC:E5:D9:D6:99:17:21:7A
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/cST23LuN3w66sBxb_OXZ1pkXIXo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200561
Signature Algorithm: sha256WithRSAEncryption
36:65:ba:c7:97:2a:85:ca:db:f5:32:30:08:94:57:0b:94:17:
f4:4f:01:fe:e4:ed:f1:42:db:b0:e4:dd:8d:d9:d1:2e:76:5b:
58:75:3f:47:eb:28:8f:d6:86:18:76:8e:c7:1b:f5:6e:88:cc:
e8:85:43:ee:ee:66:47:0c:90:8b:c9:95:31:0d:8f:da:c9:42:
fd:2f:40:4f:83:b0:c2:13:e1:35:1b:b8:96:14:08:43:b4:9c:
19:be:8b:c2:9d:26:1a:14:7c:76:a2:ed:19:15:76:43:6b:2e:
30:1d:c0:46:22:75:ae:88:54:97:9b:47:93:db:3e:07:0f:64:
0d:c7:bb:f9:f3:ee:e4:d8:e0:4c:b1:f9:ea:63:9f:75:ba:ec:
80:af:9c:b1:0d:64:b6:6b:a1:b2:87:6b:b2:b4:e5:17:32:6c:
65:34:bb:eb:da:f0:1b:fd:af:6c:cd:43:59:fc:68:56:18:40:
5f:a7:b9:48:b5:05:69:a3:e4:aa:f9:02:46:c8:fe:0a:f5:f8:
70:8c:ed:e2:65:1f:d5:f5:1a:17:5e:8b:8a:12:c6:43:ff:d6:
11:81:c4:13:ae:eb:74:b8:45:7d:a7:3e:0a:1a:4e:69:f0:d0:
66:96:7a:14:3e:70:e5:c2:31:f9:02:d5:e8:66:a9:b3:c0:a9:
69:43:d4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:45 2026 by rpki-client