Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/kf1_5a2TKMAsoCwowW0onw8sawo.asa
File: kf1_5a2TKMAsoCwowW0onw8sawo.asa (raw, json)
Hash identifier: 9jOdBjSe6jFQ5u7ETAx7zycjGxRDiEYkp6J4VjAhNZk=
Subject key identifier: 91:FD:7F:E5:AD:93:28:C0:2C:A0:2C:28:C1:6D:28:9F:0F:2C:6B:0A
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 019D44F40C8FB76877C47BF4E65756FAB730
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/kf1_5a2TKMAsoCwowW0onw8sawo.asa
Signing time: Tue 31 Mar 2026 17:32:17 +0000
ASPA not before: Tue 31 Mar 2026 17:32:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 197068
Providers: AS: 1299
AS: 3216
AS: 8359
AS: 9002
AS: 9049
AS: 12389
AS: 14947
AS: 20764
AS: 25462
AS: 28886
AS: 29470
AS: 31133
AS: 44877
AS: 49800
AS: 51327
AS: 57304
AS: 60392
AS: 134518
AS: 139903
AS: 150003
AS: 198947
AS: 200449
AS: 200590
AS: 209447
AS: 210203
AS: 214455
AS: 214845
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:f4:0c:8f:b7:68:77:c4:7b:f4:e6:57:56:fa:b7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Mar 31 17:32:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91fd7fe5ad9328c02ca02c28c16d289f0f2c6b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:57:7f:4d:8e:50:08:7c:53:6d:d2:71:40:
e7:e2:f1:1d:d8:20:48:8b:f0:3c:31:d6:d3:6c:59:
49:92:63:8a:33:5e:5c:af:f1:27:a0:0d:a9:df:4b:
b8:ba:f9:79:2d:1b:f8:0f:83:ad:d5:cb:aa:02:2f:
27:59:4e:d8:90:d6:b4:27:34:3e:55:ee:7e:d0:a6:
67:c4:1c:75:ab:c6:41:4a:21:bd:2d:e9:d7:9e:45:
00:d0:ca:91:1b:3b:66:ad:60:d9:da:80:d2:a9:01:
bc:2e:90:3c:a0:01:95:f5:2a:e7:33:da:8f:91:0b:
93:16:47:3b:54:ed:1a:ce:e5:ab:d4:3e:0c:66:3b:
f5:3a:d9:c3:d7:3f:65:6b:22:a0:04:b9:84:a3:77:
41:69:9a:0c:62:b3:aa:fe:46:a0:b6:22:bf:4c:e0:
0d:7c:3f:10:39:ee:e7:75:12:af:dc:9b:12:a8:8f:
64:32:21:00:22:5a:41:95:76:7a:94:10:1b:47:f8:
a8:2a:1c:a7:c7:3c:86:af:99:fa:cf:d4:15:71:6d:
6b:02:da:85:eb:c6:c3:11:37:99:89:3e:30:c4:05:
c5:35:a1:f7:7b:36:f8:72:81:43:b4:db:cc:7a:11:
40:a3:4c:f9:9e:e0:37:f0:cd:51:66:ec:04:ee:81:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:7F:E5:AD:93:28:C0:2C:A0:2C:28:C1:6D:28:9F:0F:2C:6B:0A
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/kf1_5a2TKMAsoCwowW0onw8sawo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197068
Signature Algorithm: sha256WithRSAEncryption
1f:ca:63:55:ae:5e:e7:b1:a5:ff:5e:db:72:f1:00:6f:75:df:
be:d3:f4:03:7f:2d:01:66:09:67:ed:61:59:48:4e:d6:34:74:
47:28:fc:b2:58:27:54:db:f4:a0:d4:41:9b:5e:4b:bf:f7:98:
ce:45:0b:9f:57:29:a8:d2:73:ee:92:36:57:b4:10:f4:b2:96:
3d:00:78:1f:65:e8:4e:65:71:1c:a8:52:30:e6:1c:43:ff:8b:
c6:75:e9:29:8a:45:e6:0b:09:97:00:ed:eb:8d:62:00:d1:23:
19:d3:49:dc:2b:b4:0c:20:5b:5d:fb:d5:ae:81:b8:1a:29:ea:
73:d1:16:a1:c3:cb:21:02:de:a6:93:17:5a:13:cc:e5:bf:14:
7a:c1:c3:24:6c:37:ff:0e:43:d3:07:51:21:ff:e2:e5:f9:1e:
79:fd:d0:41:a5:53:b4:f8:9f:f8:0c:96:6f:b5:47:4f:20:31:
3f:d5:c2:f4:f1:44:9c:d6:fc:3e:47:c6:65:0e:d5:be:8e:a3:
75:a1:dd:ca:62:7d:77:3c:86:e8:8b:74:1e:b1:e9:54:50:af:
1d:6b:52:b9:fa:97:4d:9f:6a:c7:04:e4:b4:30:96:33:2e:eb:
fb:f0:1f:ed:2b:89:18:b4:84:f4:17:ff:32:bc:d4:11:80:87:
08:d7:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:06 2026 by rpki-client