Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/fnZsGtHZZ57ibD1bgR7D-kx03A8.asa
File: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (raw, json)
Hash identifier: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=
Subject key identifier: 7E:76:6C:1A:D1:D9:67:9E:E2:6C:3D:5B:81:1E:C3:FA:4C:74:DC:0F
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 019C49B0D9DFFDF7986980AE8173EC204D5A
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/fnZsGtHZZ57ibD1bgR7D-kx03A8.asa
Signing time: Tue 10 Feb 2026 22:34:12 +0000
ASPA not before: Tue 10 Feb 2026 22:34:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214453
Providers: AS: 9002
AS: 61049
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:49:b0:d9:df:fd:f7:98:69:80:ae:81:73:ec:20:4d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Feb 10 22:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e766c1ad1d9679ee26c3d5b811ec3fa4c74dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:71:6e:ab:a9:81:d2:7b:a0:dc:cb:77:7e:
c6:f1:79:7b:85:c3:1e:51:0b:8b:2f:2f:c0:da:0d:
40:02:e2:76:71:53:b0:50:cc:ce:75:1f:60:72:2e:
48:9d:3c:90:bc:42:44:16:05:cc:d1:e4:29:50:ed:
34:88:da:d7:a4:16:4b:44:db:bd:a4:9c:01:05:ec:
e1:98:7c:0b:26:a1:d3:d9:82:57:2d:e2:c5:e0:3d:
32:4a:f8:fa:34:c3:dd:c1:fa:3c:5c:5b:3a:24:67:
91:2b:01:ef:ae:1d:60:b7:c4:c1:8c:26:fe:7b:72:
29:f6:d4:5a:53:d2:5f:ba:b9:13:d8:46:50:57:25:
61:46:e4:34:f7:85:c6:53:bd:f8:a0:94:b4:80:6e:
4b:61:fb:ef:0f:6d:34:46:5c:72:30:56:74:52:d2:
15:d6:c4:be:71:15:fb:2c:c2:88:20:55:ee:ec:25:
a5:6c:ac:b9:70:49:30:b8:3d:fe:3b:c7:6f:12:cc:
4b:e8:77:33:41:8e:22:a1:fb:76:2b:b8:c3:eb:12:
56:65:f6:04:f1:86:77:1d:ad:d6:51:26:9e:5e:ba:
0c:e0:03:ef:35:1a:e9:7d:87:ad:b6:91:0d:64:44:
4a:5f:6a:c1:08:c5:58:32:f3:da:5c:c0:46:a6:bf:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:76:6C:1A:D1:D9:67:9E:E2:6C:3D:5B:81:1E:C3:FA:4C:74:DC:0F
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/fnZsGtHZZ57ibD1bgR7D-kx03A8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214453
Signature Algorithm: sha256WithRSAEncryption
9d:5b:a2:09:a5:1a:15:96:ce:e0:de:5f:f1:c4:2d:f0:05:a1:
49:8c:74:20:ea:ed:2b:79:f2:30:de:d3:bf:8f:57:da:20:01:
05:48:a4:21:76:b8:b5:51:d1:73:22:1b:f6:46:03:7f:79:53:
0c:46:a3:cc:7e:53:f1:14:8c:24:be:6b:9e:27:94:40:87:95:
f5:51:75:ab:27:57:88:92:09:9b:70:86:3f:c6:47:f4:dc:c9:
6e:9a:65:15:28:0e:85:b6:57:39:58:de:e1:3e:17:e1:00:4e:
a1:58:7f:23:71:31:27:c8:db:fe:9a:e3:4c:1e:7b:4e:ef:da:
a7:a9:10:95:06:5d:54:ee:b8:04:32:9f:7a:15:ef:17:83:75:
b1:06:d9:04:9f:e4:c0:fe:02:9e:3a:95:4d:18:32:26:68:c6:
1c:c7:07:85:8f:1c:e0:28:3a:e2:8f:7d:ab:61:60:f2:44:74:
1a:7f:43:ac:ff:3a:ea:94:91:91:ad:9c:aa:28:03:2a:fa:b4:
c0:4d:ec:d2:7a:d9:a2:66:b4:1d:98:5a:d2:dc:67:dd:ac:87:
c7:95:cc:12:d8:ba:79:fe:ee:56:7b:63:f5:7f:63:08:54:f3:
c8:2f:de:20:66:a1:a0:10:0d:1e:1b:4d:3d:e9:4d:a1:a7:b8:
a7:bb:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:38 2026 by rpki-client