Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/fOZ6kY7go8H3U7EGMazIlVOf4S8.asa
File: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (raw, json)
Hash identifier: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=
Subject key identifier: 7C:E6:7A:91:8E:E0:A3:C1:F7:53:B1:06:31:AC:C8:95:53:9F:E1:2F
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 019CB32A0A5F489EB9B78CAE38D51E33AF2C
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/fOZ6kY7go8H3U7EGMazIlVOf4S8.asa
Signing time: Tue 03 Mar 2026 10:06:42 +0000
ASPA not before: Tue 03 Mar 2026 10:06:42 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 206215
Providers: AS: 49600
AS: 59432
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:2a:0a:5f:48:9e:b9:b7:8c:ae:38:d5:1e:33:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: Mar 3 10:06:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce67a918ee0a3c1f753b10631acc895539fe12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:d1:37:99:df:4d:eb:72:d9:e0:6d:a1:e8:
20:c0:86:a3:d9:1f:c8:3b:df:6a:d9:eb:28:72:05:
bd:60:f9:ef:2a:1b:e3:8f:24:67:8f:28:c6:96:c7:
2d:60:24:23:5d:06:37:a3:57:6b:de:63:4c:67:23:
d8:1d:ef:bf:f7:97:5f:dc:e4:24:fa:93:84:b1:40:
5c:07:6f:73:75:ba:59:ab:a6:dd:cf:93:05:a9:9e:
7f:65:2f:74:b4:f4:46:42:74:fb:93:c4:6d:94:a7:
6e:83:52:96:7b:ab:c0:3d:97:51:ff:c4:6e:c9:9f:
e5:90:63:04:3d:8a:04:40:67:d7:24:cd:19:d2:e4:
1a:3c:49:1b:a5:cf:9a:71:8a:6b:6d:2a:e7:cd:22:
25:75:37:45:0c:81:e5:03:ef:25:67:18:05:11:6a:
d8:59:bc:2c:d9:8f:af:69:45:eb:fd:9a:f1:fa:28:
11:11:c5:13:d1:c5:02:14:2d:97:69:ac:9c:e4:7e:
0f:ac:5d:07:c6:50:6f:79:c0:ce:87:82:4a:38:5f:
9b:fd:5b:f0:d6:34:51:1f:1f:de:35:36:e2:e7:ac:
74:da:b2:f9:36:db:38:bf:77:00:73:0f:5d:53:ea:
ca:15:db:8f:ae:cb:a1:5b:d4:e8:e2:ac:89:94:a5:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:7A:91:8E:E0:A3:C1:F7:53:B1:06:31:AC:C8:95:53:9F:E1:2F
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/fOZ6kY7go8H3U7EGMazIlVOf4S8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206215
Signature Algorithm: sha256WithRSAEncryption
33:41:5c:e2:e2:52:16:85:ce:22:3c:43:91:1c:61:5e:3b:73:
4f:17:ff:4c:9d:30:98:87:93:24:e1:08:d3:b3:c6:02:d1:5e:
f6:72:ab:3d:e6:f9:20:00:7c:6a:12:0a:e8:c1:15:42:43:71:
7b:e7:b8:c6:16:73:22:35:2c:cf:f9:d1:eb:fa:65:13:ea:85:
45:e6:1c:78:2b:03:94:f6:a2:33:88:07:64:47:75:fc:aa:27:
ee:88:1f:bb:68:2c:e8:96:d3:b4:9b:ce:b5:9d:b0:e1:75:68:
cf:58:57:e2:c0:26:e8:d1:0f:26:fc:0c:67:88:ee:fd:9d:ac:
b2:6a:77:4f:a8:47:dc:5e:35:27:ae:a5:34:67:56:bc:5c:46:
5c:68:47:0e:9c:c7:df:2d:a9:48:1c:4c:8d:b1:2e:c5:cb:71:
82:3e:f7:24:27:47:6e:57:77:fb:a2:37:d5:57:b7:4d:b3:12:
3a:3a:f3:ff:9f:f9:84:c8:2b:13:1a:f1:89:43:f5:04:00:e4:
7b:cf:b1:32:c4:06:7e:b1:7d:65:fa:77:7d:71:7e:eb:cf:32:
3c:23:23:4f:2a:b3:15:e5:b1:98:eb:9a:ad:45:f4:57:3c:17:
28:60:d1:0b:0c:c7:19:a2:88:dc:e1:41:17:d7:c0:63:99:d3:
3d:d2:f1:0d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyzKgpfSJ65t4yuONUeM68sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZGM1ZDRlOWM5MDU3M2M2ZGRmN2QwMGNiZThiMmVkYTQx
M2ZjODYwHhcNMjYwMzAzMTAwNjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2U2N2E5MThlZTBhM2MxZjc1M2IxMDYzMWFjYzg5NTUzOWZlMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS/RN5nfTety2eBtoeggwIaj2R/I
O99q2esocgW9YPnvKhvjjyRnjyjGlsctYCQjXQY3o1dr3mNMZyPYHe+/95df3OQk
+pOEsUBcB29zdbpZq6bdz5MFqZ5/ZS90tPRGQnT7k8RtlKdug1KWe6vAPZdR/8Ru
yZ/lkGMEPYoEQGfXJM0Z0uQaPEkbpc+acYprbSrnzSIldTdFDIHlA+8lZxgFEWrY
Wbws2Y+vaUXr/Zrx+igREcUT0cUCFC2Xaayc5H4PrF0HxlBvecDOh4JKOF+b/Vvw
1jRRHx/eNTbi56x02rL5Nts4v3cAcw9dU+rKFduPrsuhW9To4qyJlKWjUwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHzmepGO4KPB91OxBjGsyJVTn+EvMB8GA1UdIwQY
MBaAFFPcXU6ckFc8bd99AMvosu2kE/yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTl4ZFRweVFWenh0MzMwQXktaXk3YVFUX0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NmVjZjEtOGFhZi00NmM2LTk1MWQt
YWQ2NjcyMmQzNDllLzEvZk9aNmtZN2dvOEgzVTdFR01heklsVk9mNFM4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84NmVjZjEtOGFhZi00NmM2LTk1MWQtYWQ2NjcyMmQzNDll
LzEvVTl4ZFRweVFWenh0MzMwQXktaXk3YVFUX0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMlhzANBgkqhkiG
9w0BAQsFAAOCAQEAM0Fc4uJSFoXOIjxDkRxhXjtzTxf/TJ0wmIeTJOEI07PGAtFe
9nKrPeb5IAB8ahIK6MEVQkNxe+e4xhZzIjUsz/nR6/plE+qFReYceCsDlPaiM4gH
ZEd1/Kon7ogfu2gs6JbTtJvOtZ2w4XVoz1hX4sAm6NEPJvwMZ4ju/Z2ssmp3T6hH
3F41J66lNGdWvFxGXGhHDpzH3y2pSBxMjbEuxctxgj73JCdHbld3+6I31Ve3TbMS
Ojrz/5/5hMgrExrxiUP1BADke8+xMsQGfrF9Zfp3fXF+688yPCMjTyqzFeWxmOua
rUX0VzwXKGDRCwzHGaKI3OFBF9fAY5nTPdLxDQ==
-----END CERTIFICATE-----
Generated at Fri Mar 6 09:54:37 2026 by rpki-client