Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/kaxHiJceCX5MRmmaSrEPOBR1S3w.asa
File: kaxHiJceCX5MRmmaSrEPOBR1S3w.asa (raw, json)
Hash identifier: yOMn1M55cDOGZfGLWtj3Jah45GON2jw1EnfnlhUzW24=
Subject key identifier: 91:AC:47:88:97:1E:09:7E:4C:46:69:9A:4A:B1:0F:38:14:75:4B:7C
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019C74EBC0892E6D748D7F02E08979B34544
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/kaxHiJceCX5MRmmaSrEPOBR1S3w.asa
Signing time: Thu 19 Feb 2026 08:02:13 +0000
ASPA not before: Thu 19 Feb 2026 08:02:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 49443
Providers: AS: 43289
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:eb:c0:89:2e:6d:74:8d:7f:02:e0:89:79:b3:45:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Feb 19 08:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91ac4788971e097e4c46699a4ab10f3814754b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:a7:55:ac:8c:35:83:3c:8b:fb:46:7a:96:
5b:20:6b:13:e3:c6:c3:21:ba:e3:e9:1e:30:05:c4:
59:92:17:f6:d3:ff:78:cc:28:75:c1:49:7a:e2:48:
38:23:f7:40:9b:69:54:f9:85:d5:9f:0e:e6:d6:35:
15:bc:b2:ab:76:c5:e9:0d:4e:33:91:32:a8:39:64:
47:a1:2e:e6:1d:94:11:9e:a2:99:61:b2:ae:80:25:
f2:00:b1:93:18:07:8a:82:7e:30:71:2d:18:f5:2b:
fd:5b:ca:58:c0:94:63:20:8b:66:3d:0c:d7:07:1a:
9e:cf:f2:f7:2c:ff:43:30:85:a9:8e:85:41:a7:97:
37:cc:2e:10:1b:fc:ad:04:01:c3:17:55:3b:0c:51:
53:26:ea:e3:29:1d:d1:75:e6:23:be:8f:85:ab:4e:
aa:78:01:2d:ab:47:cc:e3:21:4a:cc:0b:db:d8:0b:
c3:84:20:57:c4:56:b2:e9:06:a7:1f:e0:67:d7:1c:
f1:f6:bc:c3:08:23:43:7c:3f:57:27:4f:d0:6d:fa:
a6:87:c7:29:05:6c:4d:35:61:2a:4c:0b:e5:d4:b2:
93:62:8f:a4:13:d6:90:aa:a9:df:3b:6e:92:3f:bd:
8e:67:1a:40:21:f8:8e:10:01:ca:0e:30:1e:99:45:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:47:88:97:1E:09:7E:4C:46:69:9A:4A:B1:0F:38:14:75:4B:7C
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/kaxHiJceCX5MRmmaSrEPOBR1S3w.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49443
Signature Algorithm: sha256WithRSAEncryption
59:02:d5:4c:11:73:2a:18:9c:a7:3b:a2:8f:ae:4c:50:1d:0c:
e4:90:1e:db:42:fe:1b:00:55:5e:4b:dc:2b:d7:a8:0e:3b:6b:
9e:9d:76:74:8a:cd:82:45:f1:c6:70:61:52:d4:7c:f3:2e:98:
72:aa:5b:10:4a:91:74:f1:55:1e:32:85:0b:3c:46:cb:b7:ef:
83:f1:51:f6:55:40:36:73:3c:4a:5b:52:97:d7:fc:bb:66:cb:
ba:1f:16:60:e6:99:82:1d:97:66:db:ca:4c:b8:38:af:73:02:
82:67:62:e5:76:a3:9f:bc:46:a3:00:c0:f9:0e:da:c2:27:ce:
bb:36:02:20:b7:72:a9:2d:40:0b:63:30:70:3d:17:b3:d2:0b:
cd:e5:1f:fb:22:a5:e4:99:53:b5:71:5e:60:78:4c:93:0c:a3:
bb:25:26:c5:a8:0d:e9:0b:df:a8:7b:4b:04:46:fc:8f:a0:72:
ab:59:31:82:40:0f:e8:b9:3b:70:3d:d4:9a:39:d2:22:23:76:
a9:9a:81:28:54:b4:1d:28:4d:a7:37:5f:c1:9b:0b:f4:98:9c:
b0:fd:5f:aa:09:d6:1a:da:74:23:11:8e:5b:9b:7f:51:f5:16:
f2:99:5b:b3:94:b3:2f:c0:62:c6:d6:7c:bc:f9:de:db:be:8b:
42:4a:66:50
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZx068CJLm10jX8C4Il5s0VEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwMjE5MDgwMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWFjNDc4ODk3MWUwOTdlNGM0NjY5OWE0YWIxMGYzODE0NzU0YjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIenVayMNYM8i/tGepZbIGsT48bD
Ibrj6R4wBcRZkhf20/94zCh1wUl64kg4I/dAm2lU+YXVnw7m1jUVvLKrdsXpDU4z
kTKoOWRHoS7mHZQRnqKZYbKugCXyALGTGAeKgn4wcS0Y9Sv9W8pYwJRjIItmPQzX
Bxqez/L3LP9DMIWpjoVBp5c3zC4QG/ytBAHDF1U7DFFTJurjKR3RdeYjvo+Fq06q
eAEtq0fM4yFKzAvb2AvDhCBXxFay6QanH+Bn1xzx9rzDCCNDfD9XJ0/Qbfqmh8cp
BWxNNWEqTAvl1LKTYo+kE9aQqqnfO26SP72OZxpAIfiOEAHKDjAemUXjDwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJGsR4iXHgl+TEZpmkqxDzgUdUt8MB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEva2F4SGlKY2VDWDVNUm1tYVNyRVBPQlIxUzN3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDBIzANBgkqhkiG
9w0BAQsFAAOCAQEAWQLVTBFzKhicpzuij65MUB0M5JAe20L+GwBVXkvcK9eoDjtr
np12dIrNgkXxxnBhUtR88y6YcqpbEEqRdPFVHjKFCzxGy7fvg/FR9lVANnM8SltS
l9f8u2bLuh8WYOaZgh2XZtvKTLg4r3MCgmdi5Xajn7xGowDA+Q7awifOuzYCILdy
qS1AC2MwcD0Xs9ILzeUf+yKl5JlTtXFeYHhMkwyjuyUmxagN6QvfqHtLBEb8j6By
q1kxgkAP6Lk7cD3UmjnSIiN2qZqBKFS0HShNpzdfwZsL9JicsP1fqgnWGtp0IxGO
W5t/UfUW8plbs5SzL8BixtZ8vPne276LQkpmUA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:22 2026 by rpki-client