
Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Sn0QHgY954LpBt8DtGcKjxR44Dg.asa
File: Sn0QHgY954LpBt8DtGcKjxR44Dg.asa (raw, json)
Hash identifier: 2M2BaxTHZl1fixS1P0qCYkfhEwbPQ8Y6PSqpN2/G+4w=
Subject key identifier: 4A:7D:10:1E:06:3D:E7:82:E9:06:DF:03:B4:67:0A:8F:14:78:E0:38
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019FDC172121D81EF6443BB71BF846BD4F77
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Sn0QHgY954LpBt8DtGcKjxR44Dg.asa
Signing time: Fri 07 Aug 2026 11:58:51 +0000
ASPA not before: Fri 07 Aug 2026 11:58:51 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211358
Providers: AS: 6204
AS: 6517
AS: 6939
AS: 8772
AS: 11967
AS: 16276
AS: 24482
AS: 29632
AS: 33387
AS: 34927
AS: 41051
AS: 52025
AS: 152565
AS: 200132
AS: 207841
AS: 209533
AS: 209735
AS: 211288
AS: 212895
AS: 215638
AS: 215828
AS: 216324
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:17:21:21:d8:1e:f6:44:3b:b7:1b:f8:46:bd:4f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Aug 7 11:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a7d101e063de782e906df03b4670a8f1478e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:18:f9:46:db:fb:54:69:f3:e6:cd:8a:d8:
84:a7:eb:6f:8c:89:de:98:ac:07:ce:d5:f6:36:dd:
21:6e:5c:fe:48:9d:c3:99:d2:fc:25:21:6e:eb:9d:
a3:a1:a4:f2:19:c2:ad:c5:2b:b7:f1:4b:66:56:22:
20:42:20:f0:3b:c5:86:0e:a6:7e:b2:cb:c7:13:c1:
b7:f8:1c:97:fe:6e:1d:f7:cb:63:34:09:c5:80:e8:
c8:90:c6:3e:5c:fa:66:ad:87:af:38:75:50:43:3f:
c8:38:c3:f5:2e:5f:00:ad:0d:a2:7f:2f:50:15:eb:
b6:d7:13:ec:de:ec:8c:92:85:03:a4:d9:38:5d:93:
89:4a:eb:64:80:26:40:b4:2d:8e:a4:51:c4:d3:69:
59:a3:e2:70:f7:5a:09:26:16:10:5b:eb:0a:a3:d2:
3f:c7:e4:57:5d:a4:29:b0:93:29:6c:b2:75:9f:84:
cc:13:7c:42:bd:7b:6c:1a:aa:7c:c7:6f:be:5d:85:
3e:dc:f4:1a:88:d3:58:98:34:0e:a6:2f:c3:85:27:
79:aa:a0:fe:ba:8c:e6:d1:84:3f:4d:bb:97:3d:6e:
a8:c2:b1:40:e5:29:62:fe:94:52:15:5e:b7:cb:10:
b1:8b:3e:d1:f9:16:82:2f:d8:9f:c7:60:05:60:03:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:10:1E:06:3D:E7:82:E9:06:DF:03:B4:67:0A:8F:14:78:E0:38
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Sn0QHgY954LpBt8DtGcKjxR44Dg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211358
Signature Algorithm: sha256WithRSAEncryption
c1:32:4f:a6:75:6b:a0:64:a3:ef:e8:15:a3:56:d9:a2:13:37:
6c:34:f2:76:07:6e:83:a3:32:13:ca:8b:7f:85:a3:25:ee:51:
04:69:f7:90:6f:3a:10:41:4f:16:42:bc:85:38:44:b4:8f:6e:
0f:f5:5a:95:03:7b:75:6b:fe:83:0e:58:58:fb:e7:a5:f6:f2:
de:cb:2f:1b:c2:39:7b:a8:aa:32:2e:26:a1:36:4a:9d:13:61:
79:cc:15:ca:b4:5b:19:8e:45:da:11:d6:d8:69:84:ca:66:d3:
10:80:0a:6b:1d:fc:0e:0f:75:f1:4c:c2:0f:fb:b0:15:32:37:
52:45:4d:fe:15:5a:31:3e:be:a8:1a:40:34:cb:37:2b:4a:25:
02:a0:80:1f:c1:6d:06:3a:a1:73:49:1f:f2:25:8a:47:6c:f8:
e8:6d:09:a5:f3:8e:95:72:b6:aa:c2:81:37:7e:ae:fb:db:d9:
e9:60:ba:60:ed:d3:43:c7:9c:1f:54:59:3b:e5:ae:bd:72:da:
4e:ac:b6:34:da:be:b8:61:e5:bd:c0:b9:73:71:90:bd:70:93:
16:88:db:59:a0:39:b2:37:77:56:10:d8:79:4f:c1:31:07:26:
71:69:4a:6e:2b:6d:a2:93:4c:67:d4:59:aa:67:02:9c:cf:73:
d0:19:46:ca
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ/cFyEh2B72RDu3G/hGvU93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmRhYTZmODUwNDE0YTEzZjY1MGRmMDk0NTA2NjI4YTQ2
ZGMxMmYwHhcNMjYwODA3MTE1ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTdkMTAxZTA2M2RlNzgyZTkwNmRmMDNiNDY3MGE4ZjE0NzhlMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk0Y+Ubb+1Rp8+bNitiEp+tvjIne
mKwHztX2Nt0hblz+SJ3DmdL8JSFu652joaTyGcKtxSu38UtmViIgQiDwO8WGDqZ+
ssvHE8G3+ByX/m4d98tjNAnFgOjIkMY+XPpmrYevOHVQQz/IOMP1Ll8ArQ2ify9Q
Feu21xPs3uyMkoUDpNk4XZOJSutkgCZAtC2OpFHE02lZo+Jw91oJJhYQW+sKo9I/
x+RXXaQpsJMpbLJ1n4TME3xCvXtsGqp8x2++XYU+3PQaiNNYmDQOpi/DhSd5qqD+
uozm0YQ/TbuXPW6owrFA5Sli/pRSFV63yxCxiz7R+RaCL9ifx2AFYAN0MQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEp9EB4GPeeC6QbfA7RnCo8UeOA4MB8GA1UdIwQY
MBaAFLVtqm+FBBShP2UN8JRQZiikbcEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFcycWI0VUVGS0VfWlEzd2xGQm1LS1J0d1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmVlMDEtMWZiOC00N2UyLWI3NjYt
ZmUwYTJhYzA4NjlmLzEvU24wUUhnWTk1NExwQnQ4RHRHY0tqeFI0NERnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmVlMDEtMWZiOC00N2UyLWI3NjYtZmUwYTJhYzA4Njlm
LzEvdFcycWI0VUVGS0VfWlEzd2xGQm1LS1J0d1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5njANBgkqhkiG
9w0BAQsFAAOCAQEAwTJPpnVroGSj7+gVo1bZohM3bDTydgdug6MyE8qLf4WjJe5R
BGn3kG86EEFPFkK8hThEtI9uD/ValQN7dWv+gw5YWPvnpfby3ssvG8I5e6iqMi4m
oTZKnRNhecwVyrRbGY5F2hHW2GmEymbTEIAKax38Dg918UzCD/uwFTI3UkVN/hVa
MT6+qBpANMs3K0olAqCAH8FtBjqhc0kf8iWKR2z46G0JpfOOlXK2qsKBN36u+9vZ
6WC6YO3TQ8ecH1RZO+WuvXLaTqy2NNq+uGHlvcC5c3GQvXCTFojbWaA5sjd3VhDY
eU/BMQcmcWlKbittopNMZ9RZqmcCnM9z0BlGyg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:27 2026 by rpki-client