Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/l3wWRMyjG3W1QX7dbEGnQyzn4DQ.asa
File: l3wWRMyjG3W1QX7dbEGnQyzn4DQ.asa (raw, json)
Hash identifier: dJ0GKezkrUxGMbcXzLA/azau3rHHQ9vRnc3uz/Z5/K0=
Subject key identifier: 97:7C:16:44:CC:A3:1B:75:B5:41:7E:DD:6C:41:A7:43:2C:E7:E0:34
Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Certificate serial: 019C3750DF249C202BDF33CBF76C365536B0
Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/l3wWRMyjG3W1QX7dbEGnQyzn4DQ.asa
Signing time: Sat 07 Feb 2026 08:56:12 +0000
ASPA not before: Sat 07 Feb 2026 08:56:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205941
Providers: AS: 20473
AS: 23507
AS: 44324
AS: 53356
AS: 57050
AS: 60602
AS: 60900
AS: 62553
AS: 207252
AS: 208453
AS: 210464
AS: 212271
AS: 212895
AS: 213413
AS: 213449
AS: 214480
AS: 214757
AS: 214762
AS: 214809
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:50:df:24:9c:20:2b:df:33:cb:f7:6c:36:55:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07
Validity
Not Before: Feb 7 08:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=977c1644cca31b75b5417edd6c41a7432ce7e034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:2c:81:ef:e4:22:ed:1f:e0:c3:9f:8f:50:
52:9f:00:f4:d0:25:1c:82:39:1a:d5:ba:3f:27:a8:
f5:b6:85:4d:2f:6d:f2:8d:20:0a:66:3a:0a:f9:51:
f2:47:7a:5e:9d:c8:dd:0b:41:47:fb:a2:82:29:b1:
95:a1:03:dc:81:0f:cb:38:a0:24:d6:8c:b9:a5:f1:
bd:69:96:a2:f2:77:cd:92:52:b6:58:ee:fd:d4:e7:
03:4d:5c:41:e8:23:33:ab:b2:a9:af:cb:16:01:b0:
1d:9f:e4:ac:f9:6c:3a:c4:64:af:fe:c9:d0:e2:2b:
c9:69:8f:5c:e1:3a:da:ce:0f:a9:02:23:2f:a7:48:
59:a8:1f:9a:fd:0a:08:64:d5:f9:96:79:6a:ae:bd:
c8:8d:61:69:6c:12:15:5b:a0:84:90:1a:af:26:01:
95:06:1a:bf:dd:dc:8b:23:b1:8a:9e:26:0e:81:ef:
b4:14:b8:bd:9e:8a:aa:23:a6:10:89:0e:ff:47:80:
18:9e:88:d6:62:25:fc:80:0c:82:f3:34:d5:38:1a:
36:f3:29:bb:26:a8:6c:9a:6f:56:58:9a:eb:67:a6:
6b:9b:0b:23:68:cc:1d:c6:b0:bb:64:b3:73:97:f8:
e8:c4:c0:5a:22:3a:b9:45:17:b9:fc:9c:37:58:93:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:16:44:CC:A3:1B:75:B5:41:7E:DD:6C:41:A7:43:2C:E7:E0:34
X509v3 Authority Key Identifier:
keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/l3wWRMyjG3W1QX7dbEGnQyzn4DQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205941
Signature Algorithm: sha256WithRSAEncryption
a6:5c:9d:53:4c:45:8e:e5:c0:01:c6:a4:65:cf:c4:9a:e3:1b:
0d:b5:a6:d4:8b:0f:98:56:97:51:be:9a:1d:2b:02:cc:04:22:
d5:fd:47:f9:da:c4:2a:0c:7b:a3:02:dc:98:d7:6a:34:55:44:
b5:5a:49:b9:08:a7:67:01:3e:18:bc:92:26:9d:80:19:d1:2a:
b2:c3:33:45:57:33:e1:e8:7e:17:52:6e:59:f3:22:02:a7:59:
ac:6a:9d:8c:a6:1e:8e:7d:8c:a6:ca:69:88:ee:86:fc:8e:06:
d4:9e:bc:10:60:a7:53:cb:1f:0f:e9:b3:9b:92:0c:bb:67:a3:
06:80:04:87:ca:6e:a1:14:66:44:da:a6:c1:eb:d5:6d:c9:98:
8c:0e:de:aa:4a:a5:fe:ed:37:cc:63:9e:ea:5a:5d:56:9c:b4:
26:5c:c2:d8:ca:2b:08:40:f6:6a:ec:f2:f3:e4:86:85:68:2a:
7a:98:0e:db:89:b1:7d:a3:48:bf:ac:cb:be:c1:b3:84:c5:82:
ae:c2:c8:f2:cd:db:7f:c1:47:43:f9:1b:c1:aa:54:f6:7b:ea:
ed:38:ae:99:a5:25:c3:8b:54:57:de:28:50:26:67:88:31:31:
71:fb:51:68:83:d6:73:88:a1:7a:b3:72:54:fa:9d:fe:5b:3b:
26:1f:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:54 2026 by rpki-client