Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/cxthpIxAJ0t8g8uY1fmyY51mwq4.asa
File: cxthpIxAJ0t8g8uY1fmyY51mwq4.asa (raw, json)
Hash identifier: y6YFNdrsS1fYRFOmL44biRYoIX5/YkuFrg98pxmQVnw=
Subject key identifier: 73:1B:61:A4:8C:40:27:4B:7C:83:CB:98:D5:F9:B2:63:9D:66:C2:AE
Certificate issuer: /CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Certificate serial: 019D3F1116D3EAFB3E7E3BE7A8528C7ADCDB
Authority key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/cxthpIxAJ0t8g8uY1fmyY51mwq4.asa
Signing time: Mon 30 Mar 2026 14:06:17 +0000
ASPA not before: Mon 30 Mar 2026 14:06:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208226
Providers: AS: 49434
AS: 60068
AS: 62000
AS: 203446
AS: 212477
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:11:16:d3:ea:fb:3e:7e:3b:e7:a8:52:8c:7a:dc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Validity
Not Before: Mar 30 14:06:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=731b61a48c40274b7c83cb98d5f9b2639d66c2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:d3:73:b0:0c:df:c8:9d:48:ea:b1:18:5f:
df:23:24:58:71:2c:1c:5d:59:ab:a9:cd:83:2f:7e:
ca:e0:90:e1:80:86:20:88:ca:d0:79:9c:48:ee:42:
c1:6c:11:5b:66:01:46:10:0b:21:a7:d9:ec:ee:79:
62:c8:ef:14:e8:b5:0f:50:9d:b5:06:33:a5:c3:b0:
a0:cb:a5:20:d7:12:2f:a9:fb:a5:26:04:9a:35:42:
40:b5:66:6c:bd:18:d4:08:d2:82:43:b1:c4:d3:ed:
39:8d:4a:38:cd:9e:7a:18:b1:39:29:df:19:e9:e1:
35:ac:c4:b7:b9:69:9a:90:86:e9:4a:09:dd:c3:9a:
5d:be:2f:f9:ef:7c:ed:63:89:77:f1:42:89:c7:ae:
d9:29:35:ec:d0:79:e0:56:ff:fd:94:38:18:0e:31:
cf:1e:5a:cc:4a:7e:20:69:a4:2a:33:0e:47:a2:16:
d1:6e:25:5f:f3:de:16:c1:65:55:6e:c6:b0:91:30:
ff:50:f5:11:53:b5:5b:e4:f1:70:d7:3f:a8:20:00:
6c:57:a2:4d:0a:69:4f:7f:47:f9:55:4f:3b:af:d7:
df:ae:10:08:45:1b:d2:57:c6:5a:ce:15:27:7f:a0:
ce:e0:3a:cd:2e:af:11:a4:33:cc:4c:67:12:51:51:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:61:A4:8C:40:27:4B:7C:83:CB:98:D5:F9:B2:63:9D:66:C2:AE
X509v3 Authority Key Identifier:
keyid:06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/cxthpIxAJ0t8g8uY1fmyY51mwq4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208226
Signature Algorithm: sha256WithRSAEncryption
8f:ef:c7:da:a3:7b:c1:ce:5a:cc:98:8e:ee:f2:df:a8:ba:d8:
c8:2f:7a:b2:b8:3a:e4:13:8d:c1:66:41:97:7d:09:a3:fe:b4:
64:65:06:75:2f:2a:65:30:28:a5:34:fa:4a:5b:09:02:aa:27:
c4:20:a3:46:67:9b:fb:d9:e2:cf:69:94:cb:68:30:32:7d:79:
69:bf:f1:99:8a:4a:95:be:83:ab:dd:e1:02:c2:84:69:7a:ba:
b6:90:23:b6:94:90:a6:79:82:ba:36:70:db:58:34:f1:67:1c:
3c:e3:b3:d7:74:b7:a1:a8:1a:a3:33:9f:42:3e:58:88:8b:49:
b0:67:03:45:61:b9:d9:94:a3:fe:38:eb:0a:7e:e0:6f:99:40:
a2:30:3e:d0:70:e9:8b:63:ff:71:03:84:66:56:7a:aa:66:ff:
d9:3e:48:c3:14:a1:a1:24:8e:ed:f2:14:37:19:a2:c5:ca:32:
24:b4:75:64:34:a4:45:2e:f5:72:25:f9:5b:31:4d:8a:b9:72:
26:76:1f:1d:7d:23:4e:55:d2:ff:70:e6:95:81:91:ca:ce:84:
40:9b:70:1f:6d:0a:0e:c7:3f:58:7c:84:e8:84:93:0a:64:f8:
25:3b:c2:66:03:f8:6c:42:89:0d:54:be:f6:eb:68:25:1e:73:
b0:4d:0b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:37 2026 by rpki-client