Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/aI7K851ffCc0tWN8S0U8Ns8VJxg.asa
File: aI7K851ffCc0tWN8S0U8Ns8VJxg.asa (raw, json)
Hash identifier: 822VH5CA3fhDgHZR6uAc8SFbxTllR+Bitc8kZBqFSyY=
Subject key identifier: 68:8E:CA:F3:9D:5F:7C:27:34:B5:63:7C:4B:45:3C:36:CF:15:27:18
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 019D4A98E01A093F9CC5A85C875798DCF1CB
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/aI7K851ffCc0tWN8S0U8Ns8VJxg.asa
Signing time: Wed 01 Apr 2026 19:50:26 +0000
ASPA not before: Wed 01 Apr 2026 19:50:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209768
Providers: AS: 6939
AS: 9002
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4a:98:e0:1a:09:3f:9c:c5:a8:5c:87:57:98:dc:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Apr 1 19:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=688ecaf39d5f7c2734b5637c4b453c36cf152718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:ae:b4:f0:db:5b:bb:50:7a:27:49:70:ee:
63:ce:40:a2:0f:db:52:77:6d:03:27:77:f7:ff:c9:
41:2a:0e:41:cc:46:7e:1e:0a:fe:fa:bf:e7:43:ed:
46:7a:e5:4c:77:2c:b9:22:2f:6c:21:8d:9f:0c:fc:
a0:47:8b:8b:d3:7f:8c:50:a7:31:30:21:3a:64:84:
f6:7d:ff:2a:97:d9:5a:1d:bc:3a:e7:8b:2e:35:f4:
f8:f1:c1:7a:59:67:f2:23:f0:4c:bf:cb:ee:37:4b:
1d:d2:77:35:90:3b:c9:9a:93:ef:23:33:e1:1f:71:
9f:9b:ae:71:60:1d:dd:81:ed:bb:51:8c:ca:79:87:
81:79:cf:ee:17:0a:e0:26:da:c0:33:ca:43:b2:ed:
c0:57:cb:dc:13:1d:cb:cb:47:86:5e:fa:93:31:4d:
c3:33:d5:1e:1f:cb:c0:60:44:5f:ea:f9:e1:c6:0a:
72:5c:5e:ae:b7:10:ca:ea:e8:84:2e:c3:8d:ce:00:
79:60:72:da:b8:31:f1:8f:41:9f:d5:2d:a9:2f:ca:
c5:d4:93:4f:2a:66:9a:8a:b1:fa:3a:bd:f9:e4:f0:
e3:ba:1a:12:ba:33:b5:f9:50:05:40:7d:56:24:fd:
51:0f:1a:72:a9:2e:12:af:08:a9:4e:83:ec:b5:96:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:CA:F3:9D:5F:7C:27:34:B5:63:7C:4B:45:3C:36:CF:15:27:18
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/aI7K851ffCc0tWN8S0U8Ns8VJxg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209768
Signature Algorithm: sha256WithRSAEncryption
91:8c:43:56:3e:f1:d5:fe:ce:9d:d9:7c:0b:05:fe:27:e9:09:
f0:5c:ec:f4:c2:0a:8a:b9:fe:34:f2:71:d4:35:2e:29:ac:b8:
35:c3:a4:99:d2:0a:f2:52:21:63:43:a8:86:cf:c9:79:dc:05:
5e:27:7d:ab:f1:59:ff:13:6f:bf:d5:47:fb:76:60:7c:ae:00:
98:69:da:50:fa:c1:08:ac:e0:00:15:5b:4e:4e:9c:19:d1:dd:
be:1c:d1:fa:49:e9:9d:5e:92:93:a9:59:b2:8c:88:36:e0:6e:
c6:4e:81:bf:62:b6:a4:d4:c8:26:dd:f0:2c:88:19:a9:fc:33:
ae:f6:df:48:dc:f0:d8:d0:69:9e:b0:a2:ae:b4:e4:eb:56:fe:
90:d6:41:58:b9:72:b0:71:61:ae:dd:68:25:07:a4:41:9f:2b:
0f:9f:b3:06:35:a7:4a:f3:8a:bf:ab:e9:a9:40:e8:ee:3d:8b:
27:3e:c5:95:06:a4:7a:01:29:1f:78:76:59:17:55:0c:53:16:
09:ed:6b:2b:f5:c2:96:f3:1f:b6:a7:c0:57:68:3e:79:6b:0d:
de:dc:58:13:9a:8c:71:76:b2:e2:53:90:84:cb:e0:13:bb:df:
07:8b:e9:d4:74:df:f9:43:08:c9:38:eb:af:d2:39:ce:01:63:
51:6c:ae:d1
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1KmOAaCT+cxahch1eY3PHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjYwNDAxMTk1MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODhlY2FmMzlkNWY3YzI3MzRiNTYzN2M0YjQ1M2MzNmNmMTUyNzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU+utPDbW7tQeidJcO5jzkCiD9tS
d20DJ3f3/8lBKg5BzEZ+Hgr++r/nQ+1GeuVMdyy5Ii9sIY2fDPygR4uL03+MUKcx
MCE6ZIT2ff8ql9laHbw654suNfT48cF6WWfyI/BMv8vuN0sd0nc1kDvJmpPvIzPh
H3Gfm65xYB3dge27UYzKeYeBec/uFwrgJtrAM8pDsu3AV8vcEx3Ly0eGXvqTMU3D
M9UeH8vAYERf6vnhxgpyXF6utxDK6uiELsONzgB5YHLauDHxj0Gf1S2pL8rF1JNP
KmaairH6Or355PDjuhoSujO1+VAFQH1WJP1RDxpyqS4SrwipToPstZZedQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGiOyvOdX3wnNLVjfEtFPDbPFScYMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvYUk3Szg1MWZmQ2MwdFdOOFMwVThOczhWSnhnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzaDANBgkqhkiG
9w0BAQsFAAOCAQEAkYxDVj7x1f7Ondl8CwX+J+kJ8Fzs9MIKirn+NPJx1DUuKay4
NcOkmdIK8lIhY0Oohs/JedwFXid9q/FZ/xNvv9VH+3ZgfK4AmGnaUPrBCKzgABVb
Tk6cGdHdvhzR+knpnV6Sk6lZsoyINuBuxk6Bv2K2pNTIJt3wLIgZqfwzrvbfSNzw
2NBpnrCirrTk61b+kNZBWLlysHFhrt1oJQekQZ8rD5+zBjWnSvOKv6vpqUDo7j2L
Jz7FlQakegEpH3h2WRdVDFMWCe1rK/XClvMftqfAV2g+eWsN3txYE5qMcXay4lOQ
hMvgE7vfB4vp1HTf+UMIyTjrr9I5zgFjUWyu0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:29 2026 by rpki-client