Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/itlXqJc3U1HM0l_aHUwuocZIOgY.asa
File: itlXqJc3U1HM0l_aHUwuocZIOgY.asa (raw, json)
Hash identifier: jvgVkcjLMzzXYl6tKUWEg66gAP/y82yjskFxO+g+mRo=
Subject key identifier: 8A:D9:57:A8:97:37:53:51:CC:D2:5F:DA:1D:4C:2E:A1:C6:48:3A:06
Certificate issuer: /CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Certificate serial: 01A13A96A41C586EFA8E4EEB16C2DAD001B4
Authority key identifier: 14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/itlXqJc3U1HM0l_aHUwuocZIOgY.asa
Signing time: Wed 14 Oct 2026 13:25:13 +0000
ASPA not before: Wed 14 Oct 2026 13:25:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 198138
Providers: AS: 917
AS: 16276
AS: 49418
AS: 57695
AS: 58212
AS: 137409
AS: 218914
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:96:a4:1c:58:6e:fa:8e:4e:eb:16:c2:da:d0:01:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ac20acf2902071e72f67ca06b09cda38247b2b
Validity
Not Before: Oct 14 13:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ad957a897375351ccd25fda1d4c2ea1c6483a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:9e:7b:1d:fe:80:fa:bd:8c:74:ef:3f:97:
7d:73:5a:be:37:42:cd:d8:4b:eb:40:f9:be:b2:4d:
3e:86:bc:1a:c0:eb:89:07:81:1b:bc:73:01:85:6f:
df:2b:66:ba:16:ad:2b:e0:0e:c2:1f:26:49:16:c2:
b5:64:0f:07:25:2d:9c:34:84:2f:dd:95:b5:b4:ad:
c7:42:c3:86:bc:ab:a4:21:0c:22:57:57:29:8a:55:
cf:07:3c:bf:30:08:23:c4:9c:87:a3:5a:46:b8:f0:
6e:fc:44:c6:85:96:98:8f:ff:e8:bd:60:c9:47:dc:
d8:18:76:da:d1:c4:d9:ca:be:ca:9f:d0:85:f4:7a:
fd:8e:a4:12:f0:34:21:7c:af:bb:d1:b1:c5:87:63:
fe:ba:5a:2d:f1:92:16:dc:16:eb:e1:86:1c:71:8b:
4a:d3:1d:0e:be:8a:91:6f:38:6d:2c:ec:f0:41:e1:
c8:bb:38:3d:92:a6:ee:05:db:1f:ee:48:7b:2b:cb:
75:e6:42:22:8f:1f:37:df:00:25:4e:60:53:3f:26:
c2:08:bf:f6:ad:06:2f:c6:1a:50:a1:c2:5c:1d:05:
9f:bd:84:ea:e1:30:8a:16:cc:5a:2c:3d:0d:23:43:
0b:be:f9:8d:d6:3a:56:e5:dc:9a:6f:48:f7:e5:fd:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:57:A8:97:37:53:51:CC:D2:5F:DA:1D:4C:2E:A1:C6:48:3A:06
X509v3 Authority Key Identifier:
keyid:14:AC:20:AC:F2:90:20:71:E7:2F:67:CA:06:B0:9C:DA:38:24:7B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKwgrPKQIHHnL2fKBrCc2jgkeys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/itlXqJc3U1HM0l_aHUwuocZIOgY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/99c6eb-ca62-4613-a5db-6491484e79da/1/FKwgrPKQIHHnL2fKBrCc2jgkeys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198138
Signature Algorithm: sha256WithRSAEncryption
af:7a:f5:41:d7:f4:da:88:e3:7a:7d:51:8c:6e:3a:e7:49:f8:
d3:14:17:3e:46:c0:56:6e:36:19:4c:12:ba:cf:22:3f:61:52:
00:b0:35:91:cc:a4:c1:a6:ed:b8:4f:21:1b:97:fa:c3:09:7d:
7b:21:5e:cb:46:1e:8f:4f:1e:03:a1:57:2e:b2:f4:a6:1d:9e:
94:ce:96:ee:79:a3:12:78:3c:20:0d:c5:1b:af:5b:8f:3b:08:
6b:40:df:21:ab:f4:e6:b0:62:c9:cd:6b:4b:62:31:55:74:88:
fd:d0:74:2e:7e:8a:32:22:35:de:f1:ec:a8:ba:cd:10:ad:71:
ed:b9:5f:e7:4a:2e:52:8c:bf:a1:97:49:fa:10:76:87:f1:9a:
06:e4:44:26:63:fd:b3:f5:83:62:34:d0:6d:16:24:c6:80:82:
62:98:44:50:91:7b:7c:67:99:b6:67:7f:38:30:e1:e0:6b:f6:
42:b3:e8:c7:f9:96:06:e4:e9:1e:0a:da:20:16:13:01:9b:5b:
35:d6:3f:4f:9a:5d:e9:48:25:96:4e:ca:7d:37:30:71:fb:a1:
60:68:21:da:cc:59:6a:c5:f7:5a:54:b9:79:50:31:27:77:2a:
ec:2b:d0:87:31:a6:20:9f:dc:d2:d8:f0:69:50:01:6b:53:73:
25:7b:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 16:27:14 2026 by rpki-client