Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa
File: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (raw, json)
Hash identifier: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=
Subject key identifier: D9:90:6C:5D:B0:94:E6:B3:2D:12:C4:16:C6:DD:57:61:44:47:D8:8E
Certificate issuer: /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial: 019EBAC819DE2739B9F95A53989D33AAF565
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa
Signing time: Fri 12 Jun 2026 07:42:16 +0000
ASPA not before: Fri 12 Jun 2026 07:42:16 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201345
Providers: AS: 8075
AS: 11967
AS: 20473
AS: 31898
AS: 41051
AS: 209533
AS: 212895
AS: 396982
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:c8:19:de:27:39:b9:f9:5a:53:98:9d:33:aa:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Validity
Not Before: Jun 12 07:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9906c5db094e6b32d12c416c6dd57614447d88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:27:74:ff:9b:9b:2e:e8:99:48:d0:bc:f6:
ad:77:3f:6b:f2:9f:24:62:a4:ea:4a:17:4e:cf:65:
9c:e3:24:fb:73:52:9d:86:36:36:8c:13:83:ca:76:
1f:4d:c2:21:29:ab:94:4d:9a:71:b8:79:87:fe:b3:
69:10:3c:5c:dd:e1:63:28:75:1e:37:4f:86:38:5a:
bb:a0:e0:ad:ec:6b:e5:34:ec:3c:51:4f:15:77:27:
f7:5e:aa:d1:13:78:5c:8c:3a:cd:7f:d8:ae:fe:65:
e9:e5:43:93:b8:1b:0e:58:b0:87:43:c0:72:33:9e:
dc:d4:7c:49:aa:45:b7:4e:2b:b7:78:d2:e9:27:1a:
b8:fc:73:4a:48:71:09:a2:3e:f0:8f:71:ba:99:2e:
42:b0:10:6e:e6:fa:7d:05:70:b3:64:30:28:01:b3:
02:fd:a8:2e:4f:51:d2:72:bf:d5:87:df:25:96:df:
cc:75:f0:1f:fe:bd:69:11:a4:75:89:f6:ec:65:d1:
85:60:de:dc:16:d1:b8:30:c1:83:71:f0:fe:18:8e:
7c:17:aa:55:28:4f:87:a8:13:5e:a1:e8:f4:b8:6d:
7e:20:fa:75:af:b7:6f:3a:43:5f:86:85:83:f3:67:
53:b5:d8:6f:6a:e7:70:39:18:7c:33:2e:2f:4b:83:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:6C:5D:B0:94:E6:B3:2D:12:C4:16:C6:DD:57:61:44:47:D8:8E
X509v3 Authority Key Identifier:
keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201345
Signature Algorithm: sha256WithRSAEncryption
4e:13:60:30:3f:d0:16:77:d3:93:23:96:a2:8a:dd:c2:eb:49:
26:8e:71:12:4a:bb:1b:0b:86:14:6c:92:4e:4f:82:ce:1d:07:
c9:e9:33:d1:b2:98:b8:69:f1:d0:1e:78:a7:51:8a:ed:0a:77:
e7:f5:66:3f:d2:c8:de:90:3f:7c:7e:75:89:1b:45:16:72:ce:
b9:ce:f9:98:f3:bf:e9:e1:0b:a4:55:a4:d7:27:a3:9c:8a:5c:
e4:42:bb:e9:87:eb:f5:0a:aa:c4:d0:b0:2e:17:23:ab:cd:bd:
3d:92:c3:1f:4f:33:9e:d3:e7:05:30:8e:be:40:18:64:c8:97:
98:87:b8:0f:f3:3b:ab:7b:2c:d3:d5:79:a0:e2:d4:ec:35:97:
c4:1f:4f:c2:7b:77:e5:dc:3b:b4:96:88:16:d3:d0:7d:dc:61:
28:35:54:dc:b0:e6:62:28:5e:bd:be:c8:66:ab:a1:79:56:fa:
90:c5:3c:91:e1:12:5a:40:c8:b8:b4:0c:67:43:d7:8d:ca:e9:
d0:64:b7:39:d4:84:d3:56:dd:2d:68:0e:41:16:4d:e2:d2:8b:
bc:45:c7:4a:13:ce:ac:4b:cc:35:fa:4c:7c:9e:66:44:41:2d:
de:8d:ed:6b:b8:81:af:71:7b:d4:22:36:d3:d7:dd:f7:33:d6:
36:50:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:49 2026 by rpki-client