Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/IdOGiMnwbaG7Q-z5N3y78k80P5s.asa
File: IdOGiMnwbaG7Q-z5N3y78k80P5s.asa (raw, json)
Hash identifier: lMMiZcutUiGbK+2GkPpO7pJ5E4+i2gJQUtdd/6Yri3s=
Subject key identifier: 21:D3:86:88:C9:F0:6D:A1:BB:43:EC:F9:37:7C:BB:F2:4F:34:3F:9B
Certificate issuer: /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial: 01A1640FDB23D833E63DBC09DC15E736AAEA
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/IdOGiMnwbaG7Q-z5N3y78k80P5s.asa
Signing time: Thu 22 Oct 2026 14:42:03 +0000
ASPA not before: Thu 22 Oct 2026 14:42:03 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215437
Providers: AS: 50606
AS: 202520
AS: 214481
AS: 219121
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:0f:db:23:d8:33:e6:3d:bc:09:dc:15:e7:36:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
Validity
Not Before: Oct 22 14:42:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21d38688c9f06da1bb43ecf9377cbbf24f343f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:75:6a:85:08:ab:07:0e:0d:14:54:31:ec:
4e:e7:d4:1e:64:e6:b3:a3:b2:54:cf:b8:1b:ef:ab:
a3:ee:ab:d3:a7:38:51:e7:05:43:56:f4:96:66:a4:
6b:6b:c9:bd:cc:b2:24:56:e8:ab:a6:19:99:10:1c:
7c:f6:5d:cf:39:80:3c:39:95:74:d6:97:d8:e4:7e:
79:f4:c6:19:58:57:90:a6:61:0d:0b:7d:2d:2a:85:
38:6f:b0:fd:4c:e6:7a:c2:4b:f6:0f:e1:49:9b:14:
ab:96:4b:cf:5c:3e:de:0c:2d:38:3e:db:38:99:18:
3e:da:15:6e:3e:09:bf:67:98:6d:bb:ff:0b:43:b2:
74:b0:1b:52:14:a6:e2:65:99:cb:35:36:33:89:82:
cc:6f:7e:cc:01:41:1f:31:64:38:4b:96:ad:b9:2d:
85:bf:89:be:d4:32:be:33:4a:cf:22:19:a3:1c:56:
03:82:20:a0:00:89:3f:30:0b:54:9c:ab:70:b1:58:
05:f1:b2:34:b6:5f:44:29:c9:1a:be:2b:80:a2:8b:
c6:f7:fb:d0:a9:c9:05:a2:e0:d7:1b:40:1b:6b:91:
74:2f:b1:a6:e8:72:b7:e2:71:ff:ce:a4:e8:9f:c1:
17:89:04:75:c4:d9:54:62:37:bc:58:80:eb:15:bf:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:86:88:C9:F0:6D:A1:BB:43:EC:F9:37:7C:BB:F2:4F:34:3F:9B
X509v3 Authority Key Identifier:
keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/IdOGiMnwbaG7Q-z5N3y78k80P5s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215437
Signature Algorithm: sha256WithRSAEncryption
44:19:92:d9:41:66:b6:21:63:98:a7:8f:94:64:76:93:f3:7e:
eb:63:39:1d:88:3c:ce:c8:67:55:62:0f:ad:4c:ff:89:45:50:
1a:ca:59:e9:26:67:cb:52:76:43:65:cd:cb:cb:13:87:03:79:
17:f5:3c:3e:0d:b3:79:d0:7e:0c:f7:73:4f:63:41:46:e6:ef:
02:16:b4:45:76:71:4f:79:07:9d:c4:c5:f0:86:f2:a9:61:fc:
25:8a:37:b8:9e:dd:17:9c:a5:bd:6b:0a:97:9b:cc:6a:03:02:
42:78:1c:11:53:93:9a:da:1b:5a:d3:45:e0:72:26:65:1b:1b:
5f:b1:e3:32:c4:a7:ca:76:f9:09:34:dd:a8:cd:00:e9:86:69:
09:fd:ad:0b:d6:6d:17:51:e6:60:d6:d9:42:7e:ca:11:c8:20:
1a:f6:2c:b8:18:aa:50:7e:6c:5b:c5:d9:c3:2d:09:37:fd:f6:
7b:3b:99:a2:14:9b:2d:0c:0a:8a:da:ec:ee:0c:fd:3d:c7:71:
73:37:38:bf:84:f4:da:a6:cd:2a:6d:2e:59:4f:7b:39:0a:06:
ad:0f:cb:c5:b6:cd:50:e3:bf:a7:76:58:21:a7:3e:08:68:aa:
81:80:77:15:b7:25:26:66:a7:17:9d:8f:54:7e:d7:8b:da:f5:
ea:64:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:43:09 2026 by rpki-client