Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/8MEW4LhZnlTnZHpLLOu2i3k4f70.asa
File: 8MEW4LhZnlTnZHpLLOu2i3k4f70.asa (raw, json)
Hash identifier: xNoCB9vHOWlyJDRMNvsd28N7c1284wMKE2GDeG1Uj6c=
Subject key identifier: F0:C1:16:E0:B8:59:9E:54:E7:64:7A:4B:2C:EB:B6:8B:79:38:7F:BD
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 019CD2B82ADC6212553D0BEF6D6F62793998
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/8MEW4LhZnlTnZHpLLOu2i3k4f70.asa
Signing time: Mon 09 Mar 2026 13:10:10 +0000
ASPA not before: Mon 09 Mar 2026 13:10:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200625
Providers: AS: 212895
AS: 214677
AS: 215467
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:b8:2a:dc:62:12:55:3d:0b:ef:6d:6f:62:79:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Mar 9 13:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c116e0b8599e54e7647a4b2cebb68b79387fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:06:8e:05:ad:d4:32:12:11:e8:eb:ff:e2:
5f:fe:20:8c:fa:59:4a:de:d8:f8:08:e3:f1:39:b8:
a6:db:c2:d2:8e:f8:59:16:13:8b:25:62:6b:0b:f8:
b4:1b:06:63:66:d3:ea:84:2c:e7:6e:ec:64:ba:0e:
56:c2:f9:50:d8:d6:39:57:eb:20:29:c0:4c:19:08:
9c:16:5c:20:ab:35:e0:90:32:2b:05:9a:f6:b2:a4:
6c:73:b5:1e:21:77:d3:d7:07:82:68:17:51:1b:d1:
10:e6:90:86:f4:e8:c1:02:8d:09:d0:2d:c4:e7:14:
62:70:ac:dc:79:c0:81:8f:2e:f6:b3:a1:34:6c:c1:
ad:a1:37:56:70:33:7b:fd:1e:e8:12:89:a1:f5:ee:
89:34:dd:df:36:1d:95:0f:e2:66:bc:a6:56:5d:38:
02:ce:d7:c5:26:e9:81:15:b3:c2:bd:ab:e9:17:6a:
42:5c:a5:27:ce:aa:39:5a:54:f4:44:32:a9:63:a1:
8d:0b:de:ce:03:4b:9d:41:55:49:70:28:44:9b:b0:
b2:37:b9:23:c7:6b:48:d3:34:28:74:5d:8e:fa:ce:
7e:89:85:4f:49:19:9e:60:04:b2:ba:3f:68:19:71:
80:9f:a3:74:fe:4b:77:ca:31:9a:3a:96:42:b9:60:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:16:E0:B8:59:9E:54:E7:64:7A:4B:2C:EB:B6:8B:79:38:7F:BD
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/8MEW4LhZnlTnZHpLLOu2i3k4f70.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200625
Signature Algorithm: sha256WithRSAEncryption
45:75:c1:72:cd:0e:3a:8e:c6:f7:1d:7a:38:45:c7:d4:76:b8:
15:4a:4f:d3:5b:17:b6:a0:a2:e0:77:1d:90:f6:de:ec:35:22:
88:e4:8a:6f:ab:d6:73:37:c3:f1:fe:c7:2e:28:6b:f9:fd:ed:
23:20:03:41:0f:0c:0c:28:c9:89:69:d6:2e:72:48:13:60:2e:
db:9e:fa:dd:33:c0:09:18:ba:3a:d6:d7:dc:1f:5e:32:e7:ef:
4b:7f:60:32:14:b7:12:32:c8:bb:ee:35:a8:17:fc:28:82:73:
a0:30:fd:56:9d:f1:0f:fb:0e:36:f8:0c:c8:f8:eb:58:7b:87:
be:2d:d7:73:45:e6:d5:2d:ec:ac:90:93:01:5b:06:86:c3:17:
59:49:1b:2c:15:85:2d:0a:97:a0:97:22:65:f2:55:c3:5c:80:
82:f9:00:08:c8:ad:36:40:95:a1:f1:5d:25:02:fd:50:f3:18:
87:e6:7a:c8:a4:06:a3:e7:22:d3:a0:ee:a4:67:b9:03:20:28:
6b:64:88:4f:52:49:e9:db:4d:24:7e:40:4e:a0:2d:68:ef:b0:
62:8d:90:51:c3:fb:e4:54:27:6a:fe:60:99:87:f1:88:28:c5:
31:18:72:43:76:65:26:9a:32:da:89:5b:63:7f:7d:16:0c:40:
b9:7b:63:72
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZzSuCrcYhJVPQvvbW9ieTmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OGViNzQ2MDA5ZTE4MmMwOGVkODRmODE3N2QwMDA4YTY0
ODU4M2QwHhcNMjYwMzA5MTMxMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGMxMTZlMGI4NTk5ZTU0ZTc2NDdhNGIyY2ViYjY4Yjc5Mzg3ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGMGjgWt1DISEejr/+Jf/iCM+llK
3tj4COPxObim28LSjvhZFhOLJWJrC/i0GwZjZtPqhCznbuxkug5WwvlQ2NY5V+sg
KcBMGQicFlwgqzXgkDIrBZr2sqRsc7UeIXfT1weCaBdRG9EQ5pCG9OjBAo0J0C3E
5xRicKzcecCBjy72s6E0bMGtoTdWcDN7/R7oEomh9e6JNN3fNh2VD+JmvKZWXTgC
ztfFJumBFbPCvavpF2pCXKUnzqo5WlT0RDKpY6GNC97OA0udQVVJcChEm7CyN7kj
x2tI0zQodF2O+s5+iYVPSRmeYASyuj9oGXGAn6N0/kt3yjGaOpZCuWCS8wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPDBFuC4WZ5U52R6Syzrtot5OH+9MB8GA1UdIwQY
MBaAFESOt0YAnhgsCO2E+Bd9AAimSFg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83Yjk3NjYtNWQ4NS00N2Q3LTk3YWEt
NmRkODQ2Yjc0NTFhLzEvOE1FVzRMaFpubFRuWkhwTExPdTJpM2s0ZjcwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83Yjk3NjYtNWQ4NS00N2Q3LTk3YWEtNmRkODQ2Yjc0NTFh
LzEvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPsTANBgkqhkiG
9w0BAQsFAAOCAQEARXXBcs0OOo7G9x16OEXH1Ha4FUpP01sXtqCi4HcdkPbe7DUi
iOSKb6vWczfD8f7HLihr+f3tIyADQQ8MDCjJiWnWLnJIE2Au25763TPACRi6OtbX
3B9eMufvS39gMhS3EjLIu+41qBf8KIJzoDD9Vp3xD/sONvgMyPjrWHuHvi3Xc0Xm
1S3srJCTAVsGhsMXWUkbLBWFLQqXoJciZfJVw1yAgvkACMitNkCVofFdJQL9UPMY
h+Z6yKQGo+ci06DupGe5AyAoa2SIT1JJ6dtNJH5ATqAtaO+wYo2QUcP75FQnav5g
mYfxiCjFMRhyQ3ZlJpoy2olbY399FgxAuXtjcg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 17:05:36 2026 by rpki-client