Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/PXY3zQ3AKL0Pl1Ux64jmhLVruNo.asa
File: PXY3zQ3AKL0Pl1Ux64jmhLVruNo.asa (raw, json)
Hash identifier: lk4BAlTulflpzKrffnB3booQ3BkUu3mNAwOujXHKN1E=
Subject key identifier: 3D:76:37:CD:0D:C0:28:BD:0F:97:55:31:EB:88:E6:84:B5:6B:B8:DA
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019CACE5CB5D163A331CE9CCE46EFBE5A853
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/PXY3zQ3AKL0Pl1Ux64jmhLVruNo.asa
Signing time: Mon 02 Mar 2026 04:54:26 +0000
ASPA not before: Mon 02 Mar 2026 04:54:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 216096
Providers: AS: 174
AS: 1299
AS: 3257
AS: 6939
AS: 16509
AS: 21700
AS: 21738
AS: 34872
AS: 34927
AS: 44901
AS: 52025
AS: 58057
AS: 61138
AS: 214354
AS: 215638
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:e5:cb:5d:16:3a:33:1c:e9:cc:e4:6e:fb:e5:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Mar 2 04:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d7637cd0dc028bd0f975531eb88e684b56bb8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:b4:03:9c:98:31:2d:dc:3a:57:19:69:78:
10:60:3c:97:0a:d9:6c:79:df:2d:cf:83:e0:dd:d3:
d2:bf:e5:2b:9a:3e:b5:ca:17:c8:61:4d:a7:f6:3b:
3f:89:8e:37:ee:a1:f8:28:3f:c4:9e:7e:c9:4a:cf:
3f:9e:13:88:5b:c1:54:2e:70:6f:d1:cd:79:87:a7:
da:b6:70:0f:a4:36:35:f5:98:6e:6e:48:bf:6b:98:
c8:6e:a8:7e:16:d0:4c:b1:8c:a6:69:ef:f9:b2:61:
3d:d7:19:52:61:94:f8:bf:99:a1:c3:27:e9:9a:b6:
9c:bc:6e:48:97:ed:71:01:77:2b:40:03:ba:e8:cd:
83:61:c4:72:f6:8d:b0:82:5a:9d:34:83:a4:64:d7:
b9:f8:46:b1:96:95:53:b5:37:9b:d8:2b:dc:18:c2:
2f:63:ab:4b:4b:cf:43:68:69:10:57:65:f8:39:4a:
95:bd:33:c3:d7:15:4b:d5:c9:e6:75:a7:89:f8:d1:
7f:88:6c:ce:af:f2:9a:c3:64:d9:ac:07:e6:f0:17:
00:38:e1:1c:b9:47:b8:28:53:00:15:d7:c8:e2:dd:
40:90:78:fb:8a:a6:08:e5:7a:d2:ef:4e:82:48:ba:
71:78:2c:04:06:a1:25:e7:d3:a2:04:dc:dd:7f:8f:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:37:CD:0D:C0:28:BD:0F:97:55:31:EB:88:E6:84:B5:6B:B8:DA
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/PXY3zQ3AKL0Pl1Ux64jmhLVruNo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216096
Signature Algorithm: sha256WithRSAEncryption
6a:83:45:34:ca:24:11:34:7c:f6:94:7c:9f:87:20:b6:d3:76:
84:7b:fa:40:ee:cd:48:9b:67:e5:47:ef:f9:cd:0d:68:16:3a:
ac:81:2d:13:f0:51:c0:72:77:a1:c9:40:52:4a:a0:10:33:fc:
5a:84:de:70:4f:25:e7:14:6f:c0:48:ff:5d:b2:46:3e:93:3f:
66:8a:18:8a:ec:6e:1e:ab:30:5a:3c:b6:3f:91:8a:60:80:a5:
26:2d:bb:9d:71:8e:bf:29:55:a0:62:46:b9:10:42:f4:ed:12:
85:4c:d8:e6:a3:f0:f0:82:76:54:59:f1:af:3f:dc:ba:46:d6:
fa:63:dd:36:99:29:c2:5d:a1:1f:61:d2:8b:e6:76:60:48:62:
e5:56:7f:2f:8b:01:b9:23:60:a4:a3:7e:79:d7:93:b3:d2:0c:
67:87:5c:67:92:87:75:e8:96:cf:ff:2c:cd:9a:76:5e:76:9a:
7b:34:c6:db:65:e9:31:44:96:c1:67:d7:e8:bf:0f:46:6a:cd:
a4:e9:98:a4:4a:1d:a4:59:30:4e:58:b8:41:27:a3:7f:e0:7e:
05:59:b6:84:48:a3:a1:e8:69:36:9a:ac:85:aa:a1:ea:1e:ab:
90:2f:1f:c1:a6:fb:b3:4e:1e:cf:35:84:79:4e:e1:27:04:39:
ec:6f:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:32:18 2026 by rpki-client