Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/P9Xi_swd13obp_Uu9EpIelH3ibs.asa
File: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (raw, json)
Hash identifier: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=
Subject key identifier: 3F:D5:E2:FE:CC:1D:D7:7A:1B:A7:F5:2E:F4:4A:48:7A:51:F7:89:BB
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019D818DB16F5B7CB3EAFBD746EEEEB58B81
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/P9Xi_swd13obp_Uu9EpIelH3ibs.asa
Signing time: Sun 12 Apr 2026 11:57:20 +0000
ASPA not before: Sun 12 Apr 2026 11:57:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 210917
Providers: AS: 9002
AS: 57142
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:8d:b1:6f:5b:7c:b3:ea:fb:d7:46:ee:ee:b5:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Apr 12 11:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fd5e2fecc1dd77a1ba7f52ef44a487a51f789bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:f8:77:48:c8:c5:b4:a4:8a:2e:3f:4e:37:
07:cb:20:47:38:67:40:2c:6c:0e:2b:7d:ad:1a:7b:
f6:bc:0b:8c:2e:f5:73:83:34:8a:0d:70:c6:b1:13:
fa:78:d1:11:cd:7a:5b:67:f2:b0:48:c4:d8:f4:61:
f3:65:b1:0e:15:ce:f5:db:49:4c:b2:67:d3:46:09:
87:4d:64:45:8e:47:5d:45:35:35:a2:57:35:ea:3e:
49:46:3c:60:fc:17:dd:2d:80:9d:ba:19:04:a9:70:
69:db:5e:5d:b6:34:ec:a9:69:57:f8:64:7a:2c:44:
3c:8b:18:4a:e1:2e:0a:d0:6e:6a:08:81:ad:0d:5a:
94:dd:07:da:1e:51:32:cf:68:f2:18:a6:c6:48:e7:
19:60:9f:35:10:cf:20:9b:da:e6:81:dc:0c:29:71:
64:3b:4f:a9:2d:c3:4b:43:97:f1:4f:d8:6e:dd:ea:
08:5c:14:11:b4:b3:4f:d1:4f:68:f7:29:0c:12:bb:
12:d9:7c:4e:9f:54:98:33:3d:61:84:70:0c:c0:3d:
c8:15:30:c9:f2:9c:e2:99:1f:75:7f:8e:4b:7b:72:
e7:a9:6e:54:28:f4:ab:bf:30:c5:c6:8e:ea:db:ca:
13:c7:65:2b:89:b5:aa:93:22:2e:5e:cd:75:d3:55:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:E2:FE:CC:1D:D7:7A:1B:A7:F5:2E:F4:4A:48:7A:51:F7:89:BB
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/P9Xi_swd13obp_Uu9EpIelH3ibs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210917
Signature Algorithm: sha256WithRSAEncryption
03:0f:e0:10:b2:d9:1a:75:33:43:87:8e:45:cf:16:f8:d4:92:
ba:48:74:04:f1:4a:dd:c2:31:b4:47:15:25:e7:bf:08:5f:46:
0d:ad:43:4c:01:c2:43:fb:87:8c:ab:03:32:d7:5f:47:75:41:
2a:8d:8b:60:df:f8:4a:ed:8b:08:b2:5b:22:e6:a8:0e:82:24:
3e:43:b4:a4:31:f1:44:c4:3b:c0:cf:4d:8c:c4:45:a7:19:b1:
be:c0:64:11:bc:ba:57:43:5c:a1:dc:2f:12:d1:81:95:c1:52:
a0:03:8b:7e:ea:9c:16:d9:d1:28:e3:69:c7:3c:bf:6c:5b:65:
01:15:1f:47:2a:54:11:aa:03:70:92:1d:fd:aa:18:85:04:6e:
5b:f3:7c:76:44:e8:e4:bd:64:78:dc:2a:98:86:34:0e:bc:22:
97:82:3d:39:fa:57:53:e6:2d:17:23:24:0b:04:ae:0b:e3:8a:
96:dd:26:b4:b0:fe:c3:4a:cc:96:90:8b:96:92:04:06:62:03:
c9:3c:eb:68:f2:9e:f7:e6:64:77:49:89:70:a3:7e:19:ff:b3:
b8:05:26:03:48:52:e8:99:32:0e:34:2d:bc:c8:ab:5a:e8:44:
8e:8f:9d:65:f9:20:48:73:ca:f4:7b:98:94:d3:20:6c:b4:79:
57:66:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client