Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/lqzrtwR3j5GXCFSvr2RgO97y_Qo.asa
File: lqzrtwR3j5GXCFSvr2RgO97y_Qo.asa (raw, json)
Hash identifier: Z3hbnquhs0cZKhSoRTMbH9SfDVtXpv+c4uHOJZDuM24=
Subject key identifier: 96:AC:EB:B7:04:77:8F:91:97:08:54:AF:AF:64:60:3B:DE:F2:FD:0A
Certificate issuer: /CN=4e430c003b000d355ed169e55d8ccf393837e20a
Certificate serial: 01A13B54272B7674FF8688757ACB6B471E87
Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/lqzrtwR3j5GXCFSvr2RgO97y_Qo.asa
Signing time: Wed 14 Oct 2026 16:52:13 +0000
ASPA not before: Wed 14 Oct 2026 16:52:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 207941
Providers: AS: 835
AS: 924
AS: 6939
AS: 8849
AS: 29632
AS: 31142
AS: 34927
AS: 37988
AS: 41051
AS: 47498
AS: 48646
AS: 53356
AS: 57369
AS: 61138
AS: 62513
AS: 63473
AS: 137933
AS: 202409
AS: 209762
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:54:27:2b:76:74:ff:86:88:75:7a:cb:6b:47:1e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a
Validity
Not Before: Oct 14 16:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96acebb704778f91970854afaf64603bdef2fd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:ad:76:45:b5:f2:f0:8a:c3:68:08:b5:84:
f9:6f:e8:97:b7:82:f3:64:b7:f2:46:ba:17:3d:0c:
f7:75:2d:06:97:bf:fc:c5:e9:18:95:72:04:e2:0f:
1f:48:d5:e1:2d:d0:c6:6e:6c:cb:39:08:3c:cd:27:
7d:25:b1:08:24:28:eb:71:2f:da:a1:38:2a:a3:c5:
bd:4d:66:57:e0:c5:aa:fd:c2:a5:82:00:d2:1a:c5:
7c:28:dd:d0:d6:56:94:f0:0b:37:30:0c:b0:b1:2b:
1a:fa:2c:41:d4:26:d8:d4:e8:95:03:61:d7:91:2a:
dc:38:96:8e:4d:49:67:eb:4e:0d:a6:ed:31:f1:12:
6a:52:a8:e6:d8:cd:d6:a0:2e:a1:d2:cc:22:2a:66:
a0:18:77:53:8b:d3:d7:02:f1:61:f0:ae:3c:ab:33:
3b:5d:e5:4b:7f:db:72:3c:95:11:da:65:5b:da:e1:
20:7d:b0:c1:e8:41:40:d8:e3:c5:dc:dc:f2:69:e1:
21:2e:8b:8b:6a:b3:a8:f7:c2:fd:3c:a4:e2:39:30:
20:ee:0a:0e:e4:42:34:a2:93:e2:0d:24:9e:1d:d3:
c9:91:6b:8c:a7:71:75:69:9d:a7:c0:64:bd:1b:bd:
a8:2a:ee:d0:a0:18:6e:5b:7e:d7:62:71:16:21:1b:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:EB:B7:04:77:8F:91:97:08:54:AF:AF:64:60:3B:DE:F2:FD:0A
X509v3 Authority Key Identifier:
keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/lqzrtwR3j5GXCFSvr2RgO97y_Qo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207941
Signature Algorithm: sha256WithRSAEncryption
24:a1:e6:06:1a:da:47:61:96:e7:d1:f5:0d:41:22:d5:9a:3f:
06:9a:58:e6:56:62:e3:8b:92:56:88:44:d2:60:63:2c:f4:f5:
1c:fc:e2:83:21:5b:e4:b2:61:df:f5:32:1f:67:0a:6e:8a:62:
41:3b:a6:68:b4:fc:56:d6:be:99:66:ea:8a:28:cc:92:55:91:
f8:74:c1:1b:72:ce:45:6b:e5:4f:9b:3f:03:98:ec:a5:b7:1a:
f1:9d:3a:f0:3f:27:93:be:e6:7f:2e:42:c8:3c:ec:7a:66:51:
5e:f1:29:45:d5:cd:d4:e7:47:dd:d6:67:fc:6e:51:76:8a:63:
ec:b1:27:cf:bc:74:9e:50:f0:7a:c8:85:bf:8b:91:83:38:db:
21:91:d9:7e:bf:4a:99:ec:74:78:b1:6f:2e:0a:80:dc:6d:ed:
9b:3b:0d:e4:6f:58:4d:7c:85:23:5c:60:04:b8:15:94:b2:ee:
01:cd:42:5b:91:18:9b:67:d0:35:c7:0e:cb:90:31:6c:c2:6d:
9d:f3:57:a9:3b:db:09:94:64:d9:d0:35:f7:57:ff:29:98:5c:
73:c4:fa:01:d3:2a:f7:d9:d0:65:2f:ec:d3:e3:12:9c:19:69:
d8:e9:b4:50:5b:d5:34:a9:35:9e:6e:a2:b9:bc:73:f8:5b:61:
b1:ee:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:52:16 2026 by rpki-client