Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa
File: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (raw, json)
Hash identifier: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=
Subject key identifier: 37:18:52:52:F7:CE:5D:71:05:6D:F6:4F:1A:E0:23:B2:31:C1:BA:80
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019C710053AAEB1CC77A7DD2B23A09A7140C
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa
Signing time: Wed 18 Feb 2026 13:46:12 +0000
ASPA not before: Wed 18 Feb 2026 13:46:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201741
Providers: AS: 210574
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:00:53:aa:eb:1c:c7:7a:7d:d2:b2:3a:09:a7:14:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: Feb 18 13:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37185252f7ce5d71056df64f1ae023b231c1ba80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:15:53:d7:62:22:86:f8:c2:8a:6f:6b:c1:
e4:3f:39:08:78:eb:54:56:28:69:4a:ab:ac:61:32:
2b:40:e3:1e:e0:3d:18:c0:a3:92:f9:46:d0:ef:ab:
38:0d:f8:16:9f:16:89:af:6e:06:4c:45:09:4b:e9:
ec:41:58:34:9a:fd:41:5a:b8:67:71:e3:1e:ce:62:
51:82:8a:e9:3d:d1:70:e6:b4:e0:c9:c7:c2:77:43:
cc:d6:b3:80:02:82:7a:d8:ef:45:17:f8:16:97:46:
54:ed:e3:2e:e9:85:cc:0b:d1:f2:d3:c4:48:d7:78:
8a:c1:e5:15:f8:70:ce:d4:a9:52:76:2f:6d:7a:7c:
3a:a8:98:8d:55:22:5b:d1:b6:57:4e:da:f6:41:09:
ea:a4:5b:cb:2d:67:78:75:bf:d1:78:4b:5f:d9:45:
5b:25:c0:a5:d3:04:59:90:5f:e0:26:af:de:33:6e:
51:d2:53:a1:05:56:e0:a7:1d:8c:67:a3:68:12:35:
dc:ca:a6:3d:9c:7d:1b:6c:7d:e7:cc:0e:02:18:5b:
53:6a:5b:68:31:3d:23:8e:36:f9:94:4f:6e:2a:72:
61:40:42:cc:51:91:59:7a:02:11:50:bc:ad:ef:77:
52:5a:f3:75:70:ff:88:0b:88:32:6a:4d:47:fa:12:
28:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:52:52:F7:CE:5D:71:05:6D:F6:4F:1A:E0:23:B2:31:C1:BA:80
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201741
Signature Algorithm: sha256WithRSAEncryption
52:04:7a:b0:f0:c4:8d:ea:9b:4b:09:d5:1b:54:fa:b9:44:f6:
03:42:9c:67:26:73:82:5e:d0:98:b7:94:da:c4:e6:7e:d5:12:
3f:08:23:e5:f4:4f:41:9d:95:dc:0b:4e:d6:b9:40:b4:ac:a9:
f6:42:6c:6c:1d:49:c1:83:8f:1d:f4:63:13:c3:20:d8:41:65:
39:84:9e:63:b6:dc:57:11:c5:ee:0c:0b:8d:e6:d4:b7:3f:23:
d3:37:6e:4a:46:d9:8c:dc:4c:aa:a9:18:fc:37:95:b2:3d:bd:
de:e7:9e:09:77:82:9d:dc:96:0b:09:ef:86:f6:9d:a9:17:75:
80:3e:1b:55:34:41:41:f2:80:3a:a2:42:59:aa:c3:7c:7b:0b:
9c:38:81:32:33:c1:e3:4c:ed:21:1b:4e:f6:52:ca:6a:b4:a0:
1a:bc:5c:0f:94:8a:2d:de:6e:7e:95:9e:c1:a1:04:04:e3:04:
d2:de:95:cb:a1:de:d4:d0:90:af:5b:d8:c2:2f:d4:49:b9:da:
4f:d9:74:58:01:11:fc:64:4a:c0:52:39:40:7d:cc:55:85:06:
55:62:f5:2d:c1:f6:bd:1a:61:fd:f4:dc:66:d8:bb:7c:d0:0c:
18:8b:1a:0b:22:1a:0e:1b:37:f1:da:2f:99:80:30:1f:7f:08:
69:ae:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:23 2026 by rpki-client