Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa
File: ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa (raw, json)
Hash identifier: oRmCnqZJex+p+VhWAUp4LwTMwfCm/4vGc6Wx1HLZbm4=
Subject key identifier: CA:54:D4:8B:1D:27:64:26:C1:18:D6:BA:CB:16:CC:27:7A:5B:24:34
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01A09E2347C2E926474ED51691087FC5FC77
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa
Signing time: Mon 14 Sep 2026 04:18:27 +0000
ASPA not before: Mon 14 Sep 2026 04:18:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214640
Providers: AS: 3399
AS: 42532
AS: 208453
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:23:47:c2:e9:26:47:4e:d5:16:91:08:7f:c5:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Sep 14 04:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca54d48b1d276426c118d6bacb16cc277a5b2434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:48:30:cb:77:b8:17:43:8c:30:7b:04:f1:
ee:61:69:54:34:40:f5:d3:13:bf:68:48:25:47:18:
8e:2a:0c:64:58:7d:88:db:33:c8:8e:6c:e7:6e:57:
a5:f0:af:cb:81:2f:8e:bd:e9:c2:0c:e9:f0:85:96:
ae:fc:a9:64:e8:ca:79:a5:61:41:a9:ef:5c:7a:a4:
fe:6a:4f:10:3a:49:23:25:20:99:61:aa:a3:3f:6a:
6f:0a:46:3b:cd:6f:3e:12:68:d3:bd:87:24:c2:ff:
d0:94:f2:f9:d7:6a:18:ad:58:87:90:07:71:2d:21:
7c:08:5c:a7:44:bf:61:9b:2b:5f:22:28:fc:cf:d4:
6b:4f:39:1b:2a:06:0b:42:92:13:0c:bd:ab:59:a1:
f7:ed:71:6e:de:f5:8c:d5:cb:19:99:93:9c:82:a0:
df:a1:26:96:63:70:e6:cb:ff:17:32:85:c8:e5:fe:
bd:02:af:07:40:61:2b:ac:8f:00:72:88:42:cc:05:
df:60:09:5a:69:17:07:1e:a3:97:8d:6d:08:cb:7a:
b1:16:af:61:bf:dc:48:48:49:44:bc:1b:3f:61:15:
bc:92:e6:51:c1:8d:41:18:6d:b6:6e:80:4c:32:e6:
f0:48:91:b0:6b:76:67:62:a9:b0:48:14:64:53:17:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:D4:8B:1D:27:64:26:C1:18:D6:BA:CB:16:CC:27:7A:5B:24:34
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/ylTUix0nZCbBGNa6yxbMJ3pbJDQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214640
Signature Algorithm: sha256WithRSAEncryption
25:b9:b4:e1:d1:8e:15:28:2b:10:46:bc:b6:d1:e1:ea:ab:6a:
73:50:20:5f:fd:65:84:a8:7a:68:35:32:63:44:29:b0:49:18:
ea:54:6a:e1:e7:aa:16:c1:27:81:53:4a:06:e3:f5:ba:1a:0e:
0e:62:b5:2f:9d:74:bc:32:7e:8a:24:e9:c2:50:18:80:21:8f:
39:a7:83:96:a8:6d:38:bf:66:a3:fa:a3:8a:8f:4d:a4:dc:05:
22:e5:25:8c:1e:93:7c:a7:cd:d5:00:a3:8f:b5:48:a0:1c:eb:
68:78:8d:21:35:d8:a6:b0:4e:85:bc:80:c5:52:cf:7b:61:58:
91:2c:26:0f:73:60:3e:9d:d1:22:c8:c6:da:52:f7:71:e3:3c:
38:5d:65:5d:0d:c2:7f:a2:80:dd:6d:c2:98:eb:ea:72:d5:6f:
ff:05:5c:00:8e:c1:7e:2e:28:16:aa:d8:a1:47:b7:52:9e:d4:
e1:21:b8:f3:21:86:ba:58:16:85:91:24:60:68:bd:1a:ac:ab:
6c:cc:1a:7e:ff:64:3d:cb:2b:77:ec:40:e9:39:f8:d4:ba:cf:
90:7a:a1:ec:14:0f:20:73:8a:ab:0d:21:43:7d:a7:ce:7d:41:
6b:6e:56:19:27:bd:34:d8:c2:be:68:93:c7:d6:58:fb:a3:00:
8e:40:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:25:50 2026 by rpki-client