Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/Zu0NNM9LW0_qKOEkPFOFwYsro28.asa
File: Zu0NNM9LW0_qKOEkPFOFwYsro28.asa (raw, json)
Hash identifier: xJ1I/gwQtV5C+82Ket3pblco0EI3111Sc/W6E6u6OIY=
Subject key identifier: 66:ED:0D:34:CF:4B:5B:4F:EA:28:E1:24:3C:53:85:C1:8B:2B:A3:6F
Certificate issuer: /CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
Certificate serial: 019F71CA24C4A48399C0EF865BC0B1572A00
Authority key identifier: E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/Zu0NNM9LW0_qKOEkPFOFwYsro28.asa
Signing time: Fri 17 Jul 2026 20:35:00 +0000
ASPA not before: Fri 17 Jul 2026 20:35:00 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 197324
Providers: AS: 11967
AS: 205941
AS: 213409
AS: 214757
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:ca:24:c4:a4:83:99:c0:ef:86:5b:c0:b1:57:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
Validity
Not Before: Jul 17 20:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66ed0d34cf4b5b4fea28e1243c5385c18b2ba36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:43:6e:41:55:f0:4c:54:6c:f5:65:c3:61:
ce:f9:fc:1c:f5:51:b6:eb:bd:bb:1e:04:79:1c:5c:
f3:ac:7d:0d:99:22:72:9d:25:3d:7b:ce:82:7f:5d:
9d:d2:65:b6:7d:f2:1f:53:94:ff:3d:d8:bc:6f:ca:
c1:c1:d2:f7:c6:91:45:40:fb:df:83:c5:07:52:1a:
b5:98:3c:67:0c:db:66:05:39:8f:37:f3:bc:84:c7:
e0:7f:db:d4:03:30:69:0f:e2:31:84:30:1f:2f:2f:
cf:be:26:ca:38:c0:b6:fa:2c:11:83:c7:3b:b0:89:
0d:f6:2a:df:d0:87:e3:4d:30:a6:b0:bc:45:59:db:
f6:e8:bf:54:a3:63:cf:8b:f2:f4:15:8b:ed:40:de:
d6:d6:c0:13:fd:3c:3c:88:0b:0e:3c:34:de:26:bd:
5f:74:f6:f5:3f:1c:f4:bc:f6:81:76:14:17:ac:b6:
0b:15:d2:21:d8:ca:c5:5d:a7:72:14:ac:af:9b:52:
ef:b4:46:b5:d8:02:e7:89:ca:f8:73:df:0c:75:2e:
b5:f8:95:cc:ac:56:6d:d0:69:58:39:6c:aa:fc:79:
05:a2:ad:fc:31:2c:73:7c:39:95:b0:5a:ef:0e:c9:
8c:bb:ac:23:90:c7:67:fe:79:c5:de:9f:ee:fa:bf:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:ED:0D:34:CF:4B:5B:4F:EA:28:E1:24:3C:53:85:C1:8B:2B:A3:6F
X509v3 Authority Key Identifier:
keyid:E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/Zu0NNM9LW0_qKOEkPFOFwYsro28.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197324
Signature Algorithm: sha256WithRSAEncryption
c2:14:e5:7d:66:a9:2d:f7:bc:c2:73:b6:c8:a8:79:4d:db:79:
de:9d:bb:38:20:e3:50:98:f2:b6:55:0f:ca:64:8e:0b:04:1b:
8a:51:41:05:c2:79:de:18:ed:91:ce:e5:ac:4c:cb:9c:4e:a7:
93:d5:1a:fd:d1:6c:10:6c:32:96:57:7b:8c:39:46:40:4d:9b:
56:42:5c:5b:d5:4b:43:87:eb:50:16:9a:79:2e:d8:15:2d:8b:
2e:0a:15:3a:7c:e2:95:81:59:71:1f:81:53:65:7f:37:de:38:
49:0f:5f:be:45:85:7c:a4:3f:bd:af:57:c7:75:7f:44:33:db:
33:43:9b:17:7b:97:23:95:1e:61:be:fa:f1:8a:d8:91:cf:7a:
eb:89:e1:8e:1c:85:37:b2:b4:7b:fb:6e:46:b3:a8:1a:ce:57:
8a:10:32:64:5b:9d:b2:49:ff:c8:e8:e4:d3:a7:52:df:6a:29:
b5:40:84:42:a5:34:c5:b8:39:44:9c:25:69:d2:de:59:d9:99:
a8:d1:2b:81:7e:5d:e4:10:bf:eb:19:09:bc:8a:57:e0:c8:87:
63:7b:9b:6f:51:9c:a5:82:ab:bb:d1:a3:08:d8:17:75:e6:80:
b8:d8:e1:91:bd:d3:34:01:30:ba:5f:cf:0f:5e:fa:e7:a3:cf:
d7:8b:39:12
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ9xyiTEpIOZwO+GW8CxVyoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjgwYzQ4NzFiMmJmOWFmYzMzNTFmZGY2YTU3ZGRmYTdk
YWY0OGMwHhcNMjYwNzE3MjAzNTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmVkMGQzNGNmNGI1YjRmZWEyOGUxMjQzYzUzODVjMThiMmJhMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrtDbkFV8ExUbPVlw2HO+fwc9VG2
6727HgR5HFzzrH0NmSJynSU9e86Cf12d0mW2ffIfU5T/Pdi8b8rBwdL3xpFFQPvf
g8UHUhq1mDxnDNtmBTmPN/O8hMfgf9vUAzBpD+IxhDAfLy/PvibKOMC2+iwRg8c7
sIkN9irf0IfjTTCmsLxFWdv26L9Uo2PPi/L0FYvtQN7W1sAT/Tw8iAsOPDTeJr1f
dPb1Pxz0vPaBdhQXrLYLFdIh2MrFXadyFKyvm1LvtEa12ALnicr4c98MdS61+JXM
rFZt0GlYOWyq/HkFoq38MSxzfDmVsFrvDsmMu6wjkMdn/nnF3p/u+r9YxQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGbtDTTPS1tP6ijhJDxThcGLK6NvMB8GA1UdIwQY
MBaAFOkoDEhxsr+a/DNR/falfd+n2vSMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNnTVNIR3l2NXI4TTFIOTlxVjkzNmZhOUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iOWQxOGItNTUzZC00Njc4LTgzMDct
MzM3NGRhMzQwMWYxLzEvWnUwTk5NOUxXMF9xS09Fa1BGT0Z3WXNybzI4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iOWQxOGItNTUzZC00Njc4LTgzMDctMzM3NGRhMzQwMWYx
LzEvNlNnTVNIR3l2NXI4TTFIOTlxVjkzNmZhOUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCzDANBgkqhkiG
9w0BAQsFAAOCAQEAwhTlfWapLfe8wnO2yKh5Tdt53p27OCDjUJjytlUPymSOCwQb
ilFBBcJ53hjtkc7lrEzLnE6nk9Ua/dFsEGwylld7jDlGQE2bVkJcW9VLQ4frUBaa
eS7YFS2LLgoVOnzilYFZcR+BU2V/N944SQ9fvkWFfKQ/va9Xx3V/RDPbM0ObF3uX
I5UeYb768YrYkc9664nhjhyFN7K0e/tuRrOoGs5XihAyZFudskn/yOjk06dS32op
tUCEQqU0xbg5RJwladLeWdmZqNErgX5d5BC/6xkJvIpX4MiHY3ubb1GcpYKru9Gj
CNgXdeaAuNjhkb3TNAEwul/PD17656PP14s5Eg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:41 2026 by rpki-client