Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/1-Xfh6Zn62KOmFNful26tG82HFmI.asa
File: 1-Xfh6Zn62KOmFNful26tG82HFmI.asa (raw, json)
Hash identifier: 6gfUXiMZIBGPFqOjVNdyGH3OkiTN9vOXD1DxQaaU/TQ=
Subject key identifier: F9:77:E1:E9:99:FA:D8:A3:A6:14:D7:EE:97:6E:AD:1B:CD:87:16:62
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01A183F5168AE945A14AF3E0D79AD7226BA4
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/1-Xfh6Zn62KOmFNful26tG82HFmI.asa
Signing time: Wed 28 Oct 2026 19:20:39 +0000
ASPA not before: Wed 28 Oct 2026 19:20:39 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 57027
Providers: AS: 8772
AS: 12654
AS: 24381
AS: 29632
AS: 48715
AS: 197068
AS: 199829
AS: 211358
AS: 212895
AS: 214145
AS: 218569
AS: 218626
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:f5:16:8a:e9:45:a1:4a:f3:e0:d7:9a:d7:22:6b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Oct 28 19:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f977e1e999fad8a3a614d7ee976ead1bcd871662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:c8:72:62:8d:72:64:d5:93:d0:4f:8b:38:
9d:12:3e:b9:5a:68:e9:ef:0f:bb:1b:a6:51:55:64:
b6:ac:35:6f:a5:f7:dd:cd:76:d4:d2:0a:aa:46:c9:
ec:58:4d:7c:ea:bc:7b:fc:3a:52:77:45:f1:c3:fa:
9f:d5:75:88:b9:00:b6:54:89:62:07:d0:a4:4e:1c:
1c:ee:c0:6b:c7:bb:d7:ad:bd:76:d9:82:c1:c4:4c:
44:88:f6:b3:8e:e3:5e:9d:24:20:a1:d8:bc:d8:39:
9a:13:f5:25:13:64:c4:46:70:7e:27:f9:6f:cc:fd:
03:07:01:10:59:1c:10:12:8d:c4:85:20:fe:c8:84:
c2:08:07:40:ef:63:a5:1c:7e:44:3d:59:79:7a:80:
1e:c5:0f:e6:5e:56:cc:ff:7b:ce:00:c6:a5:ee:45:
df:c4:d1:e7:7f:b9:53:47:fd:4c:0b:0c:66:88:37:
95:32:8f:30:9d:dc:a8:be:91:fc:5c:93:b6:a4:f0:
f4:ef:39:50:ce:e2:06:e6:d9:86:52:4b:2b:d9:bc:
cc:87:19:a3:02:1d:f4:33:3b:8e:4d:f8:af:c2:8f:
c6:32:bf:d4:7c:f4:ff:ff:f5:79:76:6d:13:7b:62:
9b:b6:22:17:59:40:eb:5b:23:8f:6e:c2:1b:2d:5d:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:E1:E9:99:FA:D8:A3:A6:14:D7:EE:97:6E:AD:1B:CD:87:16:62
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/1-Xfh6Zn62KOmFNful26tG82HFmI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57027
Signature Algorithm: sha256WithRSAEncryption
2c:83:00:e6:0c:79:96:b4:a7:26:f4:8c:db:1f:a9:b0:60:dc:
04:e6:d7:bd:79:87:96:b8:1a:a9:b1:40:76:c0:a4:47:71:c9:
4e:94:39:5f:f8:16:f8:10:2c:2d:86:d9:c5:d3:c0:b1:16:0d:
5c:cd:94:18:78:9b:83:7f:31:a4:c1:71:bd:84:01:ff:1d:e6:
61:75:9d:b4:bc:ee:d0:e0:a6:b4:ed:a9:06:b7:a8:bc:c5:2c:
27:1a:69:3f:42:8f:7b:e3:5c:6f:2f:8b:e1:3f:70:05:c7:36:
30:80:b3:bd:5f:68:04:3b:ae:8e:d5:f5:05:ae:68:f6:55:2f:
5d:b0:c6:30:dc:c3:da:e1:dd:6a:2e:c6:64:10:7e:23:1b:ed:
27:46:4f:73:09:bb:6b:6a:f6:95:5e:29:c7:af:23:b3:59:d5:
70:8b:fe:1a:19:fd:3f:58:a9:8a:fe:57:41:87:0b:e8:f0:b7:
b2:49:76:76:7d:8d:6c:61:dc:87:84:02:6a:76:c5:40:8b:da:
86:9b:47:e6:e5:76:bc:4b:3e:6f:8b:00:b1:dc:45:75:3e:a1:
36:fb:1d:57:cd:62:bf:4c:7e:97:9c:93:60:10:75:92:f6:62:
95:bc:e7:1c:29:ca:53:53:02:a6:57:e0:54:fb:d5:62:2f:38:
f2:c5:75:c7
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgISAaGD9RaK6UWhSvPg15rXImukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy
NjllMzkwHhcNMjYxMDI4MTkyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc3ZTFlOTk5ZmFkOGEzYTYxNGQ3ZWU5NzZlYWQxYmNkODcxNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb7IcmKNcmTVk9BPizidEj65Wmjp
7w+7G6ZRVWS2rDVvpffdzXbU0gqqRsnsWE186rx7/DpSd0Xxw/qf1XWIuQC2VIli
B9CkThwc7sBrx7vXrb122YLBxExEiPazjuNenSQgodi82DmaE/UlE2TERnB+J/lv
zP0DBwEQWRwQEo3EhSD+yITCCAdA72OlHH5EPVl5eoAexQ/mXlbM/3vOAMal7kXf
xNHnf7lTR/1MCwxmiDeVMo8wndyovpH8XJO2pPD07zlQzuIG5tmGUksr2bzMhxmj
Ah30MzuOTfivwo/GMr/UfPT///V5dm0Te2KbtiIXWUDrWyOPbsIbLV1lwwIDAQAB
o4ICBTCCAgEwHQYDVR0OBBYEFPl34emZ+tijphTX7pdurRvNhxZiMB8GA1UdIwQY
MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct
Yzk0NTdlYzgxMTUxLzEvMS1YZmg2Wm42MktPbUZOZnVsMjZ0RzgySEZtSS5hc2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvZTZkODgwLTM5MDMtNGExMS1iYTI3LWM5NDU3ZWM4MTE1
MS8xL1phWmx1UUJwdlhHRkJnTG5RQXhTbDVNbW5qay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA3sMwDQYJKoZI
hvcNAQELBQADggEBACyDAOYMeZa0pyb0jNsfqbBg3ATm1715h5a4GqmxQHbApEdx
yU6UOV/4FvgQLC2G2cXTwLEWDVzNlBh4m4N/MaTBcb2EAf8d5mF1nbS87tDgprTt
qQa3qLzFLCcaaT9Cj3vjXG8vi+E/cAXHNjCAs71faAQ7ro7V9QWuaPZVL12wxjDc
w9rh3WouxmQQfiMb7SdGT3MJu2tq9pVeKcevI7NZ1XCL/hoZ/T9YqYr+V0GHC+jw
t7JJdnZ9jWxh3IeEAmp2xUCL2oabR+bldrxLPm+LALHcRXU+oTb7HVfNYr9Mfpec
k2AQdZL2YpW85xwpylNTAqZX4FT71WIvOPLFdcc=
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:52:48 2026 by rpki-client