Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/bFPx6O0jcOjl3Dk8GP6zg__zfTc.asa
File: bFPx6O0jcOjl3Dk8GP6zg__zfTc.asa (raw, json)
Hash identifier: CijuSUsn6ReqD48LBhgJYb8THtPImULvV29QtX/RfB8=
Subject key identifier: 6C:53:F1:E8:ED:23:70:E8:E5:DC:39:3C:18:FE:B3:83:FF:F3:7D:37
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 01A0C032745FDFDD71FEFB764C20BF38AB66
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/bFPx6O0jcOjl3Dk8GP6zg__zfTc.asa
Signing time: Sun 20 Sep 2026 19:02:07 +0000
ASPA not before: Sun 20 Sep 2026 19:02:07 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202224
Providers: AS: 34927
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:32:74:5f:df:dd:71:fe:fb:76:4c:20:bf:38:ab:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Sep 20 19:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c53f1e8ed2370e8e5dc393c18feb383fff37d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:25:89:dd:53:a0:f9:29:d2:41:05:07:b3:
ce:d0:0e:8f:47:1c:c2:95:12:bf:79:9c:42:65:b7:
26:8f:50:81:5d:b7:2f:11:4f:0a:ed:2d:81:b0:07:
d6:d9:5a:a2:03:d7:0f:7b:1d:ef:70:21:2b:ad:12:
8a:75:6d:53:0a:7c:de:2b:56:54:5f:a0:e2:21:32:
86:d9:5d:f2:1c:20:bf:ac:d3:c5:30:a6:a4:38:79:
4b:e1:a8:ab:5f:79:33:a7:30:47:48:9c:cf:59:d8:
09:fd:4c:be:39:18:37:e8:60:9f:f7:14:07:3d:60:
f9:73:b8:5a:d9:be:a1:c2:ba:ad:5d:7d:b4:4c:d5:
62:7f:16:1b:32:ed:4e:c2:53:2e:ce:db:38:0d:54:
ab:bd:5a:53:2f:29:5f:9f:0a:31:74:01:09:93:0d:
f9:54:65:5a:f9:38:b0:ba:24:49:a1:67:2c:9d:8e:
16:19:d2:6b:74:4a:64:8b:93:b7:17:32:b8:70:9a:
a1:0f:64:21:50:a9:17:6b:01:17:97:b7:28:18:ce:
77:b3:fb:49:1d:da:dc:03:04:20:80:c5:ef:1a:14:
5e:ef:03:41:bc:d0:73:f3:8b:49:fd:c9:b4:50:61:
81:34:56:85:19:36:d3:44:2e:20:83:a5:7a:b0:59:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:F1:E8:ED:23:70:E8:E5:DC:39:3C:18:FE:B3:83:FF:F3:7D:37
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/bFPx6O0jcOjl3Dk8GP6zg__zfTc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202224
Signature Algorithm: sha256WithRSAEncryption
42:4e:9c:35:44:cb:2b:0e:61:bb:1b:96:e5:7c:1a:f9:fb:93:
46:d3:57:e2:62:7f:c6:75:17:76:83:47:e4:59:9d:51:03:e9:
31:35:58:1f:11:f0:27:db:a3:f8:91:7d:3d:2a:b8:6f:80:fc:
80:75:2d:dd:71:a2:b9:26:7c:13:86:43:3b:ad:77:ec:c2:23:
8c:e9:b0:3b:2c:a6:91:28:26:8f:26:67:01:c2:a8:44:07:61:
fc:e6:62:ff:b3:39:95:6b:87:0f:0e:75:36:e3:1a:0d:a3:bf:
53:1f:db:07:03:0c:46:0f:98:2d:05:11:a9:f0:53:9f:09:78:
35:8f:2f:db:7d:d3:f5:62:ef:00:6e:74:d4:2a:3f:51:55:01:
41:fb:9d:13:e6:ac:40:ef:c0:a3:d8:09:8d:54:e9:ed:a6:7d:
ba:38:2d:9a:83:e2:10:b4:c5:d4:53:32:90:83:54:30:7f:b5:
a6:67:41:47:e9:51:54:7c:36:2c:63:ec:d2:40:de:51:02:e6:
d7:00:49:15:28:5a:8f:4a:02:14:91:0d:1e:c3:8c:d4:64:62:
11:0a:b3:c9:2e:51:b8:ef:78:a1:7b:9a:fe:4c:4a:a0:f7:32:
4e:91:08:96:d3:ca:f6:e9:c7:72:34:1b:ca:85:53:87:ed:61:
ee:2e:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:06:34 2026 by rpki-client