Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/Z7oscP5GCqCXX7hb4zz5g_hO-BU.asa
File: Z7oscP5GCqCXX7hb4zz5g_hO-BU.asa (raw, json)
Hash identifier: MnBzmZU0qaL+2VcVMsi5ta3zcPSqQIwEDJhlMZrjPzs=
Subject key identifier: 67:BA:2C:70:FE:46:0A:A0:97:5F:B8:5B:E3:3C:F9:83:F8:4E:F8:15
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019C9AB740F90F24430D0A777C710101C41A
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/Z7oscP5GCqCXX7hb4zz5g_hO-BU.asa
Signing time: Thu 26 Feb 2026 16:10:26 +0000
ASPA not before: Thu 26 Feb 2026 16:10:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 2852
Providers: AS: 1853
AS: 2607
AS: 6762
AS: 20965
AS: 21320
AS: 60606
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:b7:40:f9:0f:24:43:0d:0a:77:7c:71:01:01:c4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Feb 26 16:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67ba2c70fe460aa0975fb85be33cf983f84ef815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:3a:21:7d:6d:11:c1:1e:a0:18:fa:ad:27:
f0:b1:ae:2f:1f:93:d4:f2:23:7b:a6:83:4e:3c:b8:
ea:92:22:05:3b:4e:b3:5f:7c:bf:4b:03:98:4b:46:
43:b6:13:66:ec:25:fb:8c:c5:01:68:bd:c1:05:a8:
f7:35:ff:78:6f:e7:10:3a:46:2c:b8:3a:7e:10:4e:
e5:0c:cf:59:21:ec:69:37:bf:41:c2:f3:f0:58:ff:
e3:41:f4:74:6a:d8:6d:16:18:29:93:39:b4:04:6b:
53:1e:d6:4e:0f:e9:13:20:f7:59:83:d5:7d:96:2a:
c3:54:6d:72:1b:c5:6f:fb:c7:f9:17:d2:2b:82:f7:
75:ac:cf:19:79:54:30:3b:6d:26:df:bb:c5:7d:bd:
31:80:d5:23:25:71:31:ea:f3:93:8f:fa:1a:d8:5a:
f4:11:ff:f8:40:36:92:2a:5e:6f:5b:c3:f5:98:38:
44:8f:44:2a:8e:de:c6:43:dd:0e:af:a0:2c:b0:7e:
8f:33:ac:99:59:0a:c9:30:df:ef:a9:56:4c:ae:b6:
5d:43:90:2e:4f:53:41:b9:2b:11:d9:73:5b:69:dd:
b6:c5:b2:1a:9f:e7:cc:ba:d4:ae:3f:8d:a5:b1:22:
af:23:38:f4:b2:8d:67:c9:1f:6c:2c:79:99:4c:3c:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:2C:70:FE:46:0A:A0:97:5F:B8:5B:E3:3C:F9:83:F8:4E:F8:15
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/Z7oscP5GCqCXX7hb4zz5g_hO-BU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2852
Signature Algorithm: sha256WithRSAEncryption
8e:48:b5:b9:1a:b4:21:05:f1:53:cf:7b:04:1b:6b:f4:e7:85:
13:1c:1d:91:df:b4:86:d6:96:cd:b6:79:25:b8:1e:f1:f8:0d:
08:cb:42:a6:da:d5:1e:8c:36:4b:31:98:36:d9:5b:b0:9a:c5:
e2:17:84:2b:0f:d9:2d:a2:5e:22:37:07:a9:b1:90:d3:16:be:
f0:17:57:e0:0a:64:cc:fa:47:e5:5a:8b:22:46:c7:03:5b:99:
c6:b6:b9:c1:7c:44:73:24:3a:9b:15:f1:7b:58:1b:3e:89:43:
e7:62:0d:38:3c:52:2c:66:8d:38:42:d3:c6:c1:1a:3f:f9:45:
d2:f2:d8:73:bc:5e:72:85:fc:9a:6c:a2:ca:59:7f:c0:7a:0f:
51:f5:ec:a4:0f:cf:f0:ed:93:fa:79:61:87:4a:2e:d1:3e:51:
c8:13:91:6a:c5:37:85:6d:57:28:b0:ae:5b:53:71:07:2a:db:
21:ce:00:06:b0:f7:3e:75:62:c1:9d:12:25:cd:0d:70:4f:12:
8a:cf:bd:01:ec:6c:5f:8a:d6:ea:95:80:31:d0:79:44:20:ad:
89:b4:87:a9:df:52:90:cf:90:9a:ed:31:51:9a:e5:17:e6:ab:
38:ed:66:83:fb:28:af:00:49:6e:13:02:22:44:2e:51:a5:7e:
2b:86:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:47 2026 by rpki-client