Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nEDut5LTJkkjT3fCHDDKd8oRG1o.asa
File: nEDut5LTJkkjT3fCHDDKd8oRG1o.asa (raw, json)
Hash identifier: 3M5YYDK2peJ3dR9EWIqHKIEnFeLvjFWOITnvrRxqie0=
Subject key identifier: 9C:40:EE:B7:92:D3:26:49:23:4F:77:C2:1C:30:CA:77:CA:11:1B:5A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019C74ECABF74CB4024D75531E72D51CD397
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nEDut5LTJkkjT3fCHDDKd8oRG1o.asa
Signing time: Thu 19 Feb 2026 08:03:13 +0000
ASPA not before: Thu 19 Feb 2026 08:03:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209961
Providers: AS: 43289
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:ec:ab:f7:4c:b4:02:4d:75:53:1e:72:d5:1c:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Feb 19 08:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c40eeb792d32649234f77c21c30ca77ca111b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:0c:71:c7:d0:54:28:7f:68:b3:79:7c:63:
8e:f0:70:6a:bc:59:33:ea:8c:b1:72:8e:25:fb:3e:
fd:4b:2e:2b:f0:b1:b7:5a:79:94:af:9d:5a:3c:4e:
1f:94:af:27:7d:02:f1:21:d6:07:a3:e1:df:b8:79:
a2:77:ee:dd:65:41:f6:52:7d:f2:60:e5:fb:6c:98:
9c:21:bb:88:78:04:80:4e:e9:8f:09:77:fd:67:64:
ab:0b:c1:29:7c:cd:fe:e5:38:e7:6f:60:72:73:17:
a6:a1:96:e1:07:fe:b9:20:f2:3e:45:7f:aa:b2:e2:
9c:37:0d:b1:54:a5:13:94:b8:1b:12:99:a0:5c:bf:
23:47:e0:4c:d8:95:db:41:4c:28:b1:dd:28:f2:1b:
3f:17:bf:11:76:cb:a8:1b:3c:b1:5d:7c:33:5e:dc:
96:d4:04:22:ab:ca:85:d1:b7:e6:90:87:c5:c4:b7:
bf:45:c6:4d:02:e3:c9:36:88:d8:d2:a0:66:0f:71:
ec:07:be:95:34:12:4e:cc:bb:65:67:29:fb:37:cc:
6b:6b:78:3f:8a:fe:60:fc:d9:bf:cc:af:da:dc:1a:
f5:d0:ab:5f:45:82:e1:94:4e:00:df:f3:3b:dd:cc:
7f:8e:a7:06:b0:b8:b6:df:fe:1c:e2:49:be:c6:38:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:EE:B7:92:D3:26:49:23:4F:77:C2:1C:30:CA:77:CA:11:1B:5A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/nEDut5LTJkkjT3fCHDDKd8oRG1o.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209961
Signature Algorithm: sha256WithRSAEncryption
1a:c2:de:e0:62:2c:cc:ba:45:e2:e7:fd:79:ab:45:f1:65:4a:
d0:fa:07:bc:a0:ef:d2:c0:f7:0b:a2:e0:34:67:ae:52:1b:c5:
f0:5a:b2:81:3d:95:7e:9d:dd:be:73:6f:44:88:9d:46:a3:2d:
5f:b8:b6:d1:ae:fd:cc:42:19:ea:60:23:db:22:f9:58:bc:5f:
05:99:e6:ef:4d:dc:bc:dd:dc:15:4a:ee:fa:23:97:7f:eb:41:
6b:1d:30:68:6a:4d:54:98:d0:19:8a:6c:66:88:2d:8d:90:44:
a0:ed:27:15:ec:c7:99:66:43:ff:dc:c2:3d:d7:a3:48:98:5a:
7e:c7:ae:b1:a9:43:b2:ba:53:1d:1d:4d:31:0e:f9:22:b2:26:
27:ac:5a:98:64:d7:54:82:9a:2b:c3:9d:89:c2:2c:46:6b:75:
42:2a:9c:ae:76:25:b5:3c:38:a1:73:0c:fd:4f:5a:03:db:13:
04:73:7e:fc:2b:2c:c8:c6:39:16:59:50:5a:a7:b8:b8:05:a4:
a9:29:e9:c7:3b:2b:ac:d8:9e:7f:d6:b7:ba:fe:1a:28:28:a7:
df:3a:0a:a1:23:0b:1c:e1:da:5a:80:92:78:c1:d8:e5:cf:6a:
5b:4a:2c:02:1e:3b:16:48:76:47:77:c3:02:70:3a:00:a9:07:
3b:21:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:41 2026 by rpki-client