Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/PbtQDuKZp0O2kz7TTK14r259s3k.asa
File: PbtQDuKZp0O2kz7TTK14r259s3k.asa (raw, json)
Hash identifier: QfB1dzSrPtkL8Nvbpv6So5aDe6/g0K32d303HcFgmB4=
Subject key identifier: 3D:BB:50:0E:E2:99:A7:43:B6:93:3E:D3:4C:AD:78:AF:6E:7D:B3:79
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019CECCF396F814AFEA9473F3F236C776FEB
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/PbtQDuKZp0O2kz7TTK14r259s3k.asa
Signing time: Sat 14 Mar 2026 14:45:29 +0000
ASPA not before: Sat 14 Mar 2026 14:45:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 216096
Providers: AS: 174
AS: 1299
AS: 3257
AS: 5494
AS: 6939
AS: 8330
AS: 8550
AS: 8714
AS: 16509
AS: 21700
AS: 21738
AS: 31561
AS: 34307
AS: 34872
AS: 34927
AS: 44901
AS: 47498
AS: 50952
AS: 52025
AS: 57369
AS: 58057
AS: 59678
AS: 61138
AS: 62768
AS: 150784
AS: 202409
AS: 206221
AS: 209643
AS: 214354
AS: 215638
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:cf:39:6f:81:4a:fe:a9:47:3f:3f:23:6c:77:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Mar 14 14:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dbb500ee299a743b6933ed34cad78af6e7db379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:b7:7f:4e:38:0c:b2:14:c8:5c:14:db:f4:
78:31:84:80:10:fb:85:a4:82:5f:43:ec:69:d1:14:
48:45:26:40:b4:1c:1d:72:d0:19:e7:23:6f:eb:31:
a6:9d:6b:d6:cd:4d:99:fc:2f:9a:04:32:dc:d8:eb:
d8:42:f8:ed:8a:63:78:5d:e2:35:42:b4:a0:41:2a:
69:22:19:1e:38:ce:c1:ad:c4:44:60:9b:b4:0d:33:
b1:5b:1f:8b:f5:5b:af:9a:7c:4d:a6:b9:71:fa:76:
92:25:f3:ff:d1:9a:6d:14:0b:57:08:10:88:a3:2b:
a6:d7:60:78:dd:be:3f:de:0c:49:a8:04:53:5b:0e:
12:7b:89:90:45:33:c0:fd:94:41:87:f4:0d:b4:11:
87:60:1a:3f:4b:aa:c0:a3:66:2f:2c:ac:fe:db:42:
7e:69:e4:9b:4e:a2:4f:3c:fb:44:f9:53:7d:e8:74:
04:b9:24:e5:24:da:6b:78:3d:5e:dd:58:8a:fd:07:
7b:8f:2c:35:9c:da:7e:c9:45:a4:6c:00:09:4b:a1:
23:92:a9:46:68:8a:af:fa:84:ea:8b:9d:d8:eb:81:
94:6b:34:3a:a5:ea:1d:f0:b9:fe:3d:6c:b0:85:b7:
f1:06:1d:11:46:d1:a3:df:1a:7c:da:44:29:3a:d3:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:50:0E:E2:99:A7:43:B6:93:3E:D3:4C:AD:78:AF:6E:7D:B3:79
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/PbtQDuKZp0O2kz7TTK14r259s3k.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216096
Signature Algorithm: sha256WithRSAEncryption
6b:ff:0b:68:7f:34:f4:8f:15:2e:d5:81:2a:a4:fc:34:6f:e9:
db:23:86:2f:cd:d2:d8:fa:d3:6c:d7:b9:ac:df:0a:65:e3:75:
fc:14:9e:1a:a6:22:a3:8a:f7:7d:9e:5f:92:1c:7d:fa:45:74:
34:d9:02:e0:f1:06:d2:bf:1d:f7:4e:a2:25:bb:95:8a:ba:88:
70:d8:27:7a:b4:5c:35:af:f2:5c:95:d2:80:79:3c:f8:62:c8:
35:dd:23:4c:aa:e3:b8:c4:f1:40:11:a5:6c:9b:49:ec:f7:66:
65:0f:7d:c4:da:cf:10:b9:18:c8:98:de:9b:b1:36:49:19:ac:
60:8a:8a:25:f5:32:7c:6e:18:34:10:1a:69:b5:a4:f7:be:33:
6d:e9:46:52:59:61:dc:14:ea:d4:38:36:70:c9:1a:c2:e3:bf:
36:99:c5:90:46:4a:9e:7c:7b:b5:4a:e0:a3:b0:8d:e6:78:62:
6d:2a:33:0f:51:c2:34:cd:3a:4d:01:7e:2b:96:be:c6:f4:c1:
f5:0f:b0:5d:2f:d1:61:08:c7:4a:f9:a8:c4:e0:7b:b8:79:73:
3c:3f:ac:51:09:b3:1f:db:34:07:14:1a:f6:ca:84:37:e0:9d:
e5:fb:e1:cc:46:5b:92:cd:63:5a:c3:6e:c1:bf:f4:1f:18:90:
46:27:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:54:14 2026 by rpki-client