Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/xz923TuXOINB3WLY3XLk0pyQs6s.asa
File: xz923TuXOINB3WLY3XLk0pyQs6s.asa (raw, json)
Hash identifier: SGmXF+mIU3rmhMsPtkMgk1YdAxdF0xFT+cRVzGK/gGE=
Subject key identifier: C7:3F:76:DD:3B:97:38:83:41:DD:62:D8:DD:72:E4:D2:9C:90:B3:AB
Certificate issuer: /CN=3d0be4ae38735554cd11810a9c7d203019040198
Certificate serial: 019D70C7DF37A8379E76A76D682329E79E73
Authority key identifier: 3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/xz923TuXOINB3WLY3XLk0pyQs6s.asa
Signing time: Thu 09 Apr 2026 05:47:20 +0000
ASPA not before: Thu 09 Apr 2026 05:47:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215666
Providers: AS: 207252
AS: 213413
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:c7:df:37:a8:37:9e:76:a7:6d:68:23:29:e7:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0be4ae38735554cd11810a9c7d203019040198
Validity
Not Before: Apr 9 05:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c73f76dd3b97388341dd62d8dd72e4d29c90b3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:b9:ce:95:78:80:93:db:0a:28:02:b1:02:
85:14:26:92:63:c1:21:28:93:3a:36:0c:bd:27:5a:
fd:41:08:09:b5:a6:f5:6e:b2:95:3b:bd:f4:ac:b7:
99:aa:d7:fe:2c:ba:8e:48:28:5c:c3:b9:6b:a3:86:
e2:61:0c:ec:2e:d7:cb:c9:75:24:0b:cc:15:e1:12:
73:35:d7:96:9a:d5:ab:e4:d2:44:14:99:de:ce:01:
f6:40:7f:fd:a1:e9:3c:88:e9:76:4c:09:82:57:21:
93:5c:8d:07:70:2f:5f:24:ca:7e:2d:70:b6:c2:cb:
5c:eb:55:8b:fe:a9:21:13:f7:72:14:d3:7d:45:a3:
7c:2a:e3:36:88:c0:c0:9a:5a:1d:2f:cd:0a:76:17:
42:e3:39:c2:45:f2:ab:02:5f:a4:74:9f:cb:82:a9:
f4:09:cd:5e:d1:52:64:ab:0d:43:69:27:5d:17:bc:
4c:57:37:31:c6:3f:94:82:5a:fb:31:12:6d:db:2d:
c0:45:55:80:9b:8a:df:c5:bb:55:61:a2:27:18:c2:
90:39:bd:49:2d:64:95:49:a4:52:c5:5b:ed:11:53:
13:6d:09:9c:1c:f0:02:b6:9a:25:53:f5:26:8d:3d:
5c:d3:62:fc:53:eb:ea:66:ff:6b:53:b9:ef:5a:a3:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:76:DD:3B:97:38:83:41:DD:62:D8:DD:72:E4:D2:9C:90:B3:AB
X509v3 Authority Key Identifier:
keyid:3D:0B:E4:AE:38:73:55:54:CD:11:81:0A:9C:7D:20:30:19:04:01:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQvkrjhzVVTNEYEKnH0gMBkEAZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/xz923TuXOINB3WLY3XLk0pyQs6s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d404a0-780d-43c8-b721-fd2eb5497b5c/1/PQvkrjhzVVTNEYEKnH0gMBkEAZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215666
Signature Algorithm: sha256WithRSAEncryption
b0:18:11:06:11:87:1a:9e:e8:ad:a8:2f:3f:4c:26:39:27:50:
b4:9e:b7:58:a4:81:6c:5f:98:31:0b:99:40:d1:ec:dc:c7:da:
e0:e2:5b:2e:6d:cf:82:92:99:ae:92:ec:70:ec:01:7a:b2:24:
2d:80:92:df:9a:e8:98:d7:e2:49:8b:57:88:ca:5e:66:17:68:
2f:4c:7d:e2:85:e4:ca:e4:0c:d3:e9:a9:37:a2:1d:cb:82:64:
21:28:46:42:17:69:7c:e9:23:3a:0a:40:c9:28:ee:01:54:c9:
3d:be:65:47:05:d5:87:ce:a1:d8:4b:7a:77:2d:ae:12:55:3c:
dc:29:33:5e:32:fa:72:cb:d3:be:56:1b:09:1a:7d:13:cc:c6:
33:cb:11:f9:1b:5e:1e:c1:22:d4:1b:a3:9d:a9:aa:4a:a2:ac:
c5:63:17:8e:29:9b:a8:18:97:ce:f4:c8:cd:64:41:cc:b2:96:
98:00:f3:01:b3:d3:bc:45:67:10:11:eb:51:6e:b2:4a:02:77:
83:cb:fa:dc:fd:10:42:86:d6:bc:1c:c6:4a:56:98:6c:25:67:
b5:21:0d:a9:5b:c6:13:28:5e:3e:31:6a:a3:1f:fa:b4:e9:df:
51:dd:d2:92:b8:22:83:a8:de:ac:91:fc:04:39:fb:f0:8e:f0:
98:16:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:49 2026 by rpki-client