Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iUgIL2GwyRGFEienEBgIEt798i4.asa
File: iUgIL2GwyRGFEienEBgIEt798i4.asa (raw, json)
Hash identifier: ieqz7wRFE6LNG8n/Kh77pXIrxnks0PgI9byxX9BgnDg=
Subject key identifier: 89:48:08:2F:61:B0:C9:11:85:12:27:A7:10:18:08:12:DE:FD:F2:2E
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019C74ECAA65AA987E4AAD090FB3BAD0250B
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iUgIL2GwyRGFEienEBgIEt798i4.asa
Signing time: Thu 19 Feb 2026 08:03:13 +0000
ASPA not before: Thu 19 Feb 2026 08:03:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209396
Providers: AS: 43289
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:ec:aa:65:aa:98:7e:4a:ad:09:0f:b3:ba:d0:25:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Feb 19 08:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8948082f61b0c911851227a710180812defdf22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:1e:c2:00:b4:ff:e1:28:8c:ff:32:6b:d0:
f9:c2:39:7a:08:a4:36:b1:e7:21:05:41:96:eb:ca:
d4:7f:96:28:fe:27:b0:8f:b3:9d:0e:a7:72:ac:69:
26:9f:63:43:ab:d4:bc:28:04:4b:22:d7:ad:82:18:
91:77:5f:d5:20:7e:4d:5d:9a:0a:f1:70:92:3b:b4:
7a:73:18:44:69:25:fd:03:e6:f7:d2:64:1e:49:f0:
8b:d5:e7:b3:fc:b9:87:dc:68:ad:9f:e2:40:0d:cd:
7a:56:01:f8:91:a8:60:f3:e0:74:07:ae:48:ce:23:
9a:e1:a6:55:7c:e1:f1:1f:30:de:f8:e0:b5:1f:92:
31:bb:59:ba:e0:2b:b4:6b:43:ac:e4:54:20:fc:2a:
dd:e7:ac:88:44:23:ea:4c:53:08:cb:ce:e5:bf:71:
8c:a8:9d:6b:f2:b6:8b:e6:cc:2d:0f:80:4c:2a:e9:
57:37:57:e5:e5:91:61:02:12:3e:a8:78:96:3f:c6:
6f:20:89:14:68:ea:04:40:10:8d:7b:57:d4:3e:1a:
70:d0:d6:21:50:f0:cd:7c:18:34:9c:fb:c9:16:e6:
2f:f3:17:fd:cb:8d:46:77:5a:ab:b6:1a:7f:9b:a7:
7d:48:26:70:85:90:a6:6b:a4:e7:16:1a:f4:00:37:
37:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:08:2F:61:B0:C9:11:85:12:27:A7:10:18:08:12:DE:FD:F2:2E
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/iUgIL2GwyRGFEienEBgIEt798i4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209396
Signature Algorithm: sha256WithRSAEncryption
66:37:fe:90:b5:9f:dc:fa:61:4d:bb:75:7e:af:d3:25:e8:bb:
c7:f5:ee:de:48:fc:87:e7:b8:53:4d:76:bb:60:61:e8:d8:d3:
a9:de:3e:9e:9b:f6:f3:fa:99:76:58:8e:84:38:ba:5b:88:48:
e2:ac:a4:04:e9:15:64:89:c1:f4:0b:fd:3a:b5:96:dd:1d:80:
57:67:07:fb:b4:c9:a2:41:91:e9:c5:8a:2a:09:3e:9e:66:6a:
8f:b9:f0:4b:6a:bb:1b:9f:b0:a7:d2:cb:ea:c7:4b:6f:55:d2:
6f:96:72:0e:7f:c7:9f:22:05:c4:2d:79:40:f1:fe:5a:bf:0b:
71:d6:83:45:0d:07:c2:d7:20:98:e9:bc:e9:20:9a:ff:48:6c:
20:dc:9b:48:c7:82:b6:f2:d6:be:63:3a:be:73:c3:7d:87:92:
97:e1:01:e3:45:85:98:ba:fc:15:ce:45:cb:98:6c:9b:5e:81:
0a:55:a6:e2:87:fc:1f:77:10:4c:a5:fc:d0:0b:34:66:a5:3e:
9b:a7:06:e8:93:47:be:f2:45:09:d8:ac:36:c4:77:d1:bf:a4:
38:e2:a0:de:fd:ab:05:80:9a:58:7c:04:a9:41:37:72:f9:15:
d0:28:71:c6:21:90:73:b8:6f:a5:f2:bf:43:48:ad:43:89:9d:
8d:79:41:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:55 2026 by rpki-client