Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/2nQlWJsHLHUL5QAP7rHbuF0-7k0.asa
File: 2nQlWJsHLHUL5QAP7rHbuF0-7k0.asa (raw, json)
Hash identifier: sDIfURTzJ4IeJdUJuR0VKVKFISBvpz2O883KP+aaCxY=
Subject key identifier: DA:74:25:58:9B:07:2C:75:0B:E5:00:0F:EE:B1:DB:B8:5D:3E:EE:4D
Certificate issuer: /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial: 01A06E61863BB68B7454DA4007A6EB0AC2A2
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/2nQlWJsHLHUL5QAP7rHbuF0-7k0.asa
Signing time: Fri 04 Sep 2026 21:44:40 +0000
ASPA not before: Fri 04 Sep 2026 21:44:40 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212855
Providers: AS: 8283
AS: 50869
AS: 200132
AS: 203291
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:61:86:3b:b6:8b:74:54:da:40:07:a6:eb:0a:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Validity
Not Before: Sep 4 21:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7425589b072c750be5000feeb1dbb85d3eee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:75:15:ec:b3:a6:2c:48:64:da:d4:90:4a:
07:ae:9b:1b:6b:4a:de:f8:0c:e3:f0:cb:55:de:3e:
97:be:fb:75:86:55:1c:23:9b:9a:0f:3e:b8:e2:da:
4b:ae:91:f6:33:a1:33:76:71:25:dc:e4:b2:86:bf:
90:86:a1:8b:8e:d9:e7:a2:cd:48:43:91:b0:1a:7a:
78:88:be:c0:e8:1a:c0:6c:2e:c1:37:71:9d:a9:41:
70:e0:76:3e:b8:21:5a:50:9c:d5:10:5a:ee:53:99:
2c:43:4e:b8:2e:8d:0f:67:d3:78:44:50:c8:c5:9a:
5c:7d:bc:17:3d:51:06:2f:43:85:1a:c4:1d:7a:a1:
dc:f8:af:4f:3f:74:39:2c:4a:9b:e9:07:8b:bf:17:
6c:70:25:0c:76:c3:cd:04:52:54:cc:ea:af:b0:45:
af:f7:d5:e8:6c:08:a4:98:d1:36:e2:22:92:12:e2:
ad:fe:48:3d:66:2b:9b:08:2d:cc:eb:08:4d:b3:5c:
3f:f4:4b:d0:31:7e:87:06:a7:83:b2:10:bd:7a:82:
b6:ce:c3:ef:4a:f6:a3:a6:b2:25:72:68:31:48:bf:
d6:a5:31:60:c7:99:f9:29:34:2c:f9:f2:4b:8f:84:
8b:be:b0:53:d3:4b:bc:e9:7d:4f:61:3f:7f:6f:d7:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:25:58:9B:07:2C:75:0B:E5:00:0F:EE:B1:DB:B8:5D:3E:EE:4D
X509v3 Authority Key Identifier:
keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/2nQlWJsHLHUL5QAP7rHbuF0-7k0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212855
Signature Algorithm: sha256WithRSAEncryption
7d:2b:c5:04:80:f4:73:65:c6:b7:61:c4:bf:c0:c4:aa:a0:04:
a8:3e:a9:9c:77:e8:4f:6f:f7:fd:3c:fd:75:8c:19:62:1d:20:
86:3e:dd:fb:2a:4a:25:03:f9:11:0e:27:4f:22:84:6a:6c:0d:
cb:b1:fd:87:e6:0d:b9:a0:71:fa:d9:52:d0:50:34:8c:81:dc:
c5:53:84:c7:f0:65:81:c3:41:55:04:73:6a:dc:39:d5:f6:51:
c5:66:19:54:35:f6:82:a2:e0:15:35:2b:af:8e:ce:d1:60:55:
90:ca:a4:b7:7a:89:e0:61:6d:c2:4d:0c:44:5a:8d:85:62:e7:
04:49:25:b9:2c:7f:df:18:d2:75:2a:e1:58:7e:cf:08:52:a0:
09:0b:0e:65:a8:3e:14:dc:db:01:25:b2:de:c7:b5:30:fc:5f:
28:0f:0d:c4:74:94:ea:b0:a4:e1:c9:88:10:f1:5d:78:00:df:
b0:b3:90:58:dc:4b:11:47:d2:9d:b5:c7:bb:53:1b:a3:11:ce:
a9:b1:e3:fe:9a:47:c0:c3:36:d5:85:ff:2d:3a:f5:05:c8:42:
c3:71:0b:2e:df:7c:a3:fb:f1:06:25:d2:76:2d:99:6e:12:88:
67:0c:53:1b:fd:c3:d0:ec:39:f6:f3:9d:c0:8b:78:65:e2:6a:
74:dc:b5:9d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaBuYYY7tot0VNpAB6brCsKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlkMDVlMmEzMjFhZWNiYTRlY2M0YWJlYzBmNzhlYWNk
ZTU1YjAwHhcNMjYwOTA0MjE0NDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTc0MjU1ODliMDcyYzc1MGJlNTAwMGZlZWIxZGJiODVkM2VlZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hN1FeyzpixIZNrUkEoHrpsba0re
+Azj8MtV3j6Xvvt1hlUcI5uaDz644tpLrpH2M6EzdnEl3OSyhr+QhqGLjtnnos1I
Q5GwGnp4iL7A6BrAbC7BN3GdqUFw4HY+uCFaUJzVEFruU5ksQ064Lo0PZ9N4RFDI
xZpcfbwXPVEGL0OFGsQdeqHc+K9PP3Q5LEqb6QeLvxdscCUMdsPNBFJUzOqvsEWv
99XobAikmNE24iKSEuKt/kg9ZiubCC3M6whNs1w/9EvQMX6HBqeDshC9eoK2zsPv
SvajprIlcmgxSL/WpTFgx5n5KTQs+fJLj4SLvrBT00u86X1PYT9/b9e4iQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNp0JVibByx1C+UAD+6x27hdPu5NMB8GA1UdIwQY
MBaAFI+p0F4qMhrsuk7MSr7A946s3lWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYt
ODNmYmQ4NjY2OTk0LzEvMm5RbFdKc0hMSFVMNVFBUDdySGJ1RjAtN2swLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zYWJkYzctMTZhMi00NDRiLTljZWYtODNmYmQ4NjY2OTk0
LzEvajZuUVhpb3lHdXk2VHN4S3ZzRDNqcXplVmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/dzANBgkqhkiG
9w0BAQsFAAOCAQEAfSvFBID0c2XGt2HEv8DEqqAEqD6pnHfoT2/3/Tz9dYwZYh0g
hj7d+ypKJQP5EQ4nTyKEamwNy7H9h+YNuaBx+tlS0FA0jIHcxVOEx/BlgcNBVQRz
atw51fZRxWYZVDX2gqLgFTUrr47O0WBVkMqkt3qJ4GFtwk0MRFqNhWLnBEkluSx/
3xjSdSrhWH7PCFKgCQsOZag+FNzbASWy3se1MPxfKA8NxHSU6rCk4cmIEPFdeADf
sLOQWNxLEUfSnbXHu1MboxHOqbHj/ppHwMM21YX/LTr1BchCw3ELLt98o/vxBiXS
di2ZbhKIZwxTG/3D0Ow59vOdwIt4ZeJqdNy1nQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:52 2026 by rpki-client