Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/lfS13A6k6VYq7zeIKzwEMd7njAc.asa
File: lfS13A6k6VYq7zeIKzwEMd7njAc.asa (raw, json)
Hash identifier: BGDDbE1ld8YdY02e6hNHewNcs0w8Y3X5REVJDiKPd4Y=
Subject key identifier: 95:F4:B5:DC:0E:A4:E9:56:2A:EF:37:88:2B:3C:04:31:DE:E7:8C:07
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019C942A03304A4C3E65826351BCD5440EBD
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/lfS13A6k6VYq7zeIKzwEMd7njAc.asa
Signing time: Wed 25 Feb 2026 09:38:27 +0000
ASPA not before: Wed 25 Feb 2026 09:38:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200040
Providers: AS: 9121
AS: 15924
AS: 34984
AS: 206119
AS: 208821
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:2a:03:30:4a:4c:3e:65:82:63:51:bc:d5:44:0e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Feb 25 09:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95f4b5dc0ea4e9562aef37882b3c0431dee78c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:8a:eb:2d:62:c5:b0:a0:fb:e3:96:ff:fe:
1f:6e:64:60:52:5a:49:81:ca:56:dd:a1:91:2d:c7:
cf:61:47:5d:6a:6b:12:15:aa:49:9b:c2:60:a7:46:
c6:a9:31:88:55:4b:75:e0:d5:43:4d:08:b1:e3:63:
c9:8b:2d:97:c5:67:78:3b:23:b0:b7:a8:7e:e8:da:
5a:8a:5e:c8:13:25:98:1d:07:4d:34:a1:bf:88:be:
e4:78:6a:44:c3:cb:30:66:20:dc:e4:05:c2:ab:c3:
d5:44:c3:82:fc:50:25:09:63:43:72:1b:88:79:23:
79:6f:3d:ad:ca:69:e2:df:1a:1e:04:29:8c:92:d5:
e0:c5:61:89:75:86:d3:cf:9b:e6:ea:80:6e:bd:57:
38:a5:5c:b1:34:ec:5a:49:e8:56:bb:03:c8:32:42:
70:36:69:45:e4:ee:b0:b5:11:f1:29:82:b3:d0:89:
43:c6:ae:52:d8:c1:fd:ff:9c:dd:6e:67:3e:0a:fe:
d4:10:35:eb:c2:56:8b:e5:6e:0e:d7:b4:03:2b:92:
72:b4:77:2e:86:32:84:2a:08:3e:df:98:0b:d4:7d:
ed:94:d5:e9:41:96:a1:e3:05:c0:e2:4e:d2:e8:ed:
02:34:7b:c0:b8:60:f8:9b:07:34:3d:f7:cb:fe:1b:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F4:B5:DC:0E:A4:E9:56:2A:EF:37:88:2B:3C:04:31:DE:E7:8C:07
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/lfS13A6k6VYq7zeIKzwEMd7njAc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200040
Signature Algorithm: sha256WithRSAEncryption
44:f5:43:1c:85:f0:ad:c8:0f:da:03:fd:0f:9e:7d:69:08:98:
4c:79:09:49:7f:c3:4e:c7:92:f2:d5:1e:03:da:54:ef:e0:f7:
11:45:47:d8:0f:ac:5e:13:a9:25:91:0b:a6:25:a9:d3:85:33:
e1:f5:5b:bd:32:41:a1:4c:17:c4:0f:68:e6:de:5c:70:ce:ee:
df:a2:6a:1f:e0:4d:22:fd:43:50:af:d7:b9:ea:67:ab:c6:c2:
98:2b:4d:ac:87:b3:04:c5:8b:11:a5:81:54:a2:1b:08:55:5c:
1b:8b:c7:9c:13:87:13:43:18:61:ae:8c:52:fe:39:b7:26:18:
65:bb:0f:9c:4d:f0:a1:ec:53:a3:5c:19:c5:6f:2c:5d:bd:1b:
a9:77:05:8e:4f:72:81:19:8c:45:60:cd:be:ca:d3:af:71:36:
28:5a:d1:86:34:f5:b5:d1:50:17:ee:38:a3:64:ed:6a:07:69:
49:7b:55:65:fb:5e:e1:1e:e4:12:76:dd:de:67:c4:3c:3d:74:
7f:f2:76:d2:26:0a:fd:97:2d:32:66:bb:5c:02:d6:c9:74:fd:
17:1c:12:41:59:0f:79:37:0b:ad:5c:63:59:9d:c8:6e:23:1b:
c3:6b:b6:8b:3e:e0:a3:0a:5e:f5:86:68:33:36:18:77:ed:a0:
49:58:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:35 2026 by rpki-client