Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/h2S5SOYfIdtYgW2lzny0MQ8S930.asa
File: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (raw, json)
Hash identifier: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=
Subject key identifier: 87:64:B9:48:E6:1F:21:DB:58:81:6D:A5:CE:7C:B4:31:0F:12:F7:7D
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 019C8EC9F8D4658B600EDE7744B680FC90A8
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/h2S5SOYfIdtYgW2lzny0MQ8S930.asa
Signing time: Tue 24 Feb 2026 08:35:26 +0000
ASPA not before: Tue 24 Feb 2026 08:35:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 207015
Providers: AS: 16246
AS: 39791
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:c9:f8:d4:65:8b:60:0e:de:77:44:b6:80:fc:90:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Feb 24 08:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8764b948e61f21db58816da5ce7cb4310f12f77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:fb:e2:98:eb:39:91:72:52:68:90:66:6a:
3b:2b:69:a4:99:77:7a:01:90:fd:77:1c:2e:2f:55:
e6:2c:27:3c:80:e4:46:0a:3d:b0:42:db:ac:79:f2:
17:72:ec:57:48:1b:7d:64:a2:ea:73:c1:7d:d0:44:
b9:68:a9:aa:d8:2f:51:54:22:d6:be:39:bb:5d:50:
44:da:42:c7:2a:30:d5:eb:0c:21:fe:73:28:58:ab:
64:bd:22:ae:9d:72:e2:1e:ac:58:66:23:d4:c5:14:
f7:16:de:f4:52:fc:67:bd:d2:4b:7e:4c:88:8c:ac:
27:d7:9d:43:02:9c:bc:2c:38:ed:cd:90:e5:d7:bb:
aa:4a:36:01:29:fb:6e:7d:d4:1d:b9:7e:d1:29:a9:
43:13:28:d0:8b:3b:42:c6:b4:de:66:11:16:88:f0:
8f:05:25:4f:7c:48:ff:ee:05:82:2b:79:39:a9:38:
16:19:93:a0:7c:f9:e4:f0:46:77:07:55:9a:35:76:
08:e6:a7:2e:c0:2d:67:a7:d1:62:8d:60:32:7f:6b:
10:5a:24:4b:8a:66:18:8d:b2:f8:03:fa:50:87:1d:
50:47:77:6b:b7:5f:1c:5e:64:ee:f1:a0:db:9d:04:
1d:01:9c:13:25:91:33:e0:89:8a:09:0e:a9:b6:90:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:B9:48:E6:1F:21:DB:58:81:6D:A5:CE:7C:B4:31:0F:12:F7:7D
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/h2S5SOYfIdtYgW2lzny0MQ8S930.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207015
Signature Algorithm: sha256WithRSAEncryption
1f:92:34:b1:2d:b8:22:fc:b7:d1:13:78:05:ed:58:dc:2a:ca:
13:0d:0d:b3:46:a5:ab:0b:5c:03:84:ec:94:89:a6:03:e7:e6:
ac:0c:08:f5:0c:62:d8:23:7f:a5:5c:71:2b:bb:b9:fb:2d:ec:
18:c0:98:d1:41:12:56:b8:fc:e2:cc:7f:11:f3:55:21:8a:3f:
05:f8:5d:0e:a5:df:4f:55:33:2d:51:52:b3:66:b9:bb:d0:15:
81:91:0b:1f:0b:ba:b7:98:bf:34:8b:7e:99:a5:bd:4e:49:cd:
21:25:e3:9b:b9:6f:da:72:d7:7a:db:51:45:5f:69:20:d5:7a:
24:86:50:1d:b0:fe:83:5d:f2:b6:fa:2b:4f:6d:03:15:32:1d:
88:f1:4e:fc:26:85:9f:84:a6:be:3d:36:b9:07:55:c2:0b:d7:
3b:71:d3:d9:1a:ca:08:ce:ba:69:e9:79:53:94:75:a7:8f:e0:
d9:cf:4e:30:46:1a:60:8c:7b:ee:a9:b5:2c:c8:a2:62:db:f1:
70:61:fc:ad:eb:1e:66:db:31:6a:73:a4:4a:c2:60:95:24:5f:
5c:c4:e2:06:d0:4b:11:3b:e2:1b:f6:07:61:de:67:8e:63:ab:
72:f9:ac:ce:88:5c:98:18:5c:6a:a8:4f:b6:24:b9:59:80:9a:
4a:2b:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:01 2026 by rpki-client