Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/VfqZdMoRpIE35tf8kQhe2jGnGIE.asa
File: VfqZdMoRpIE35tf8kQhe2jGnGIE.asa (raw, json)
Hash identifier: iQlE4HGCvRo8X4vnZHpUoRVxIqGCB+Rovyoe95ujbNs=
Subject key identifier: 55:FA:99:74:CA:11:A4:81:37:E6:D7:FC:91:08:5E:DA:31:A7:18:81
Certificate issuer: /CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Certificate serial: 019C814BAFA8C7863A4D9377455689D645E1
Authority key identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/VfqZdMoRpIE35tf8kQhe2jGnGIE.asa
Signing time: Sat 21 Feb 2026 17:42:26 +0000
ASPA not before: Sat 21 Feb 2026 17:42:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214933
Providers: AS: 17433
AS: 34927
AS: 44324
AS: 53808
AS: 151194
AS: 153376
AS: 154185
AS: 198025
AS: 203031
AS: 203168
AS: 204539
AS: 207303
AS: 210352
AS: 210440
AS: 212895
AS: 213605
AS: 214439
AS: 214955
AS: 215172
AS: 216211
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:4b:af:a8:c7:86:3a:4d:93:77:45:56:89:d6:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Validity
Not Before: Feb 21 17:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55fa9974ca11a48137e6d7fc91085eda31a71881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:4c:c5:37:c9:82:7c:02:6c:e6:91:24:b2:
a1:3f:c3:07:6d:56:20:54:0d:cf:fd:ac:19:cb:80:
e8:04:a3:dc:e0:6a:f4:90:51:68:1d:d2:ed:64:d9:
89:31:9a:8c:a0:49:90:c0:d1:68:d5:1e:4e:83:ed:
be:79:c3:0c:27:a0:63:ed:d6:e2:1d:61:53:64:eb:
28:af:66:53:41:3e:41:b6:b1:a4:77:37:fd:d1:c5:
a6:51:0e:37:3e:f5:ec:bb:15:21:65:2a:79:cd:3c:
d6:a2:83:c7:ae:7e:23:ae:2d:c2:44:2c:aa:3c:3e:
61:40:6f:18:e8:6a:d9:d2:42:90:a7:80:51:e4:8a:
0c:c4:f3:eb:90:a9:6b:32:15:ce:31:60:6a:de:8f:
82:00:63:e3:fd:63:2f:b4:7e:f8:05:8d:04:79:f0:
1d:ca:b1:2b:32:a3:f7:a3:20:ec:4b:c2:53:40:f3:
b8:de:6b:99:cb:97:5f:8b:2e:54:96:ea:cd:c9:9f:
ca:dc:f7:41:03:53:6c:4f:da:50:6d:e4:a5:02:26:
1a:f4:2a:fa:29:9e:bf:b4:13:6b:3e:c9:36:6e:64:
c5:a8:a7:ca:a4:71:25:1d:39:1a:05:77:56:66:d0:
28:bd:1c:c3:3f:f0:de:c5:82:44:34:04:15:a4:df:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FA:99:74:CA:11:A4:81:37:E6:D7:FC:91:08:5E:DA:31:A7:18:81
X509v3 Authority Key Identifier:
keyid:57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/VfqZdMoRpIE35tf8kQhe2jGnGIE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214933
Signature Algorithm: sha256WithRSAEncryption
88:84:1d:14:99:ec:01:3b:da:b4:c2:21:39:e4:7c:5a:93:24:
2a:22:64:77:b1:f2:fa:4b:65:de:61:25:e3:ef:9a:a9:27:26:
22:3b:5b:14:b0:84:b2:2d:1e:eb:d6:06:8e:ec:c8:8e:da:70:
78:c8:ad:9e:99:a9:25:94:33:25:78:af:04:bb:cf:d4:9f:3d:
3a:1b:47:8d:99:5e:e1:8d:b4:88:f4:54:dd:25:82:c3:8b:6a:
d8:78:02:fc:a1:07:d3:56:38:6b:8b:07:a5:05:ca:25:07:a6:
69:e3:0d:9c:8d:de:9b:cd:fe:38:cf:59:d6:dd:cc:1e:eb:af:
15:d2:63:f7:07:5f:67:be:86:72:23:0d:16:db:d7:eb:63:c6:
be:4b:14:76:b7:53:ca:6c:76:9f:1a:ce:fc:6c:44:be:95:b4:
bc:e7:bd:eb:e0:8c:78:1f:7a:93:44:fc:9f:69:fb:6d:9d:20:
18:09:a5:a5:15:20:77:f2:73:81:ac:d3:32:be:95:43:28:38:
61:ab:b9:a4:e2:8d:b5:81:38:37:0b:62:4d:6e:81:d4:b1:12:
04:af:a2:42:42:f3:bb:93:0e:ca:b5:d8:dd:d8:ca:e3:49:aa:
e7:ca:9c:a0:0c:02:5a:9b:ae:1d:65:72:e9:6d:a3:af:ba:3f:
41:20:fe:96
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyBS6+ox4Y6TZN3RVaJ1kXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTk1M2U5MTdiYTk1YjdhYWMyZDIzYmVlYmMxN2YyNGM2
ZjdmNjkwHhcNMjYwMjIxMTc0MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWZhOTk3NGNhMTFhNDgxMzdlNmQ3ZmM5MTA4NWVkYTMxYTcxODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9VMxTfJgnwCbOaRJLKhP8MHbVYg
VA3P/awZy4DoBKPc4Gr0kFFoHdLtZNmJMZqMoEmQwNFo1R5Og+2+ecMMJ6Bj7dbi
HWFTZOsor2ZTQT5BtrGkdzf90cWmUQ43PvXsuxUhZSp5zTzWooPHrn4jri3CRCyq
PD5hQG8Y6GrZ0kKQp4BR5IoMxPPrkKlrMhXOMWBq3o+CAGPj/WMvtH74BY0EefAd
yrErMqP3oyDsS8JTQPO43muZy5dfiy5UlurNyZ/K3PdBA1NsT9pQbeSlAiYa9Cr6
KZ6/tBNrPsk2bmTFqKfKpHElHTkaBXdWZtAovRzDP/DexYJENAQVpN84SQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFX6mXTKEaSBN+bX/JEIXtoxpxiBMB8GA1UdIwQY
MBaAFFfpU+kXupW3qsLSO+68F/JMb39pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83ZDkzNDktMzYwMy00NjA1LWIxNGYt
YTBlYmRjOTZiNTMzLzEvVmZxWmRNb1JwSUUzNXRmOGtRaGUyakduR0lFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83ZDkzNDktMzYwMy00NjA1LWIxNGYtYTBlYmRjOTZiNTMz
LzEvVi1sVDZSZTZsYmVxd3RJNzdyd1g4a3h2ZjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHlTANBgkqhkiG
9w0BAQsFAAOCAQEAiIQdFJnsATvatMIhOeR8WpMkKiJkd7Hy+ktl3mEl4++aqScm
IjtbFLCEsi0e69YGjuzIjtpweMitnpmpJZQzJXivBLvP1J89OhtHjZle4Y20iPRU
3SWCw4tq2HgC/KEH01Y4a4sHpQXKJQemaeMNnI3em83+OM9Z1t3MHuuvFdJj9wdf
Z76GciMNFtvX62PGvksUdrdTymx2nxrO/GxEvpW0vOe96+CMeB96k0T8n2n7bZ0g
GAmlpRUgd/JzgazTMr6VQyg4Yau5pOKNtYE4NwtiTW6B1LESBK+iQkLzu5MOyrXY
3djK40mq58qcoAwCWpuuHWVy6W2jr7o/QSD+lg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:44 2026 by rpki-client