Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/nQN4cLKNegYOd-usKrALjYrvoiE.asa
File: nQN4cLKNegYOd-usKrALjYrvoiE.asa (raw, json)
Hash identifier: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=
Subject key identifier: 9D:03:78:70:B2:8D:7A:06:0E:77:EB:AC:2A:B0:0B:8D:8A:EF:A2:21
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019C66E9A0439FA287F6867487EDA2253501
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/nQN4cLKNegYOd-usKrALjYrvoiE.asa
Signing time: Mon 16 Feb 2026 14:45:12 +0000
ASPA not before: Mon 16 Feb 2026 14:45:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200409
Providers: AS: 3356
AS: 12874
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:e9:a0:43:9f:a2:87:f6:86:74:87:ed:a2:25:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Feb 16 14:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d037870b28d7a060e77ebac2ab00b8d8aefa221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:b6:27:9d:20:a6:cc:ad:3e:7c:03:7b:ec:
0e:e4:c7:ba:cb:bb:c1:c1:56:9f:30:3f:c0:07:a5:
40:f7:91:fe:77:71:31:d6:7c:85:62:90:b8:b7:07:
43:e3:47:d8:57:42:3a:b9:9c:cb:9c:4c:ae:46:fb:
6e:5d:cf:00:e9:ea:3e:7c:d1:d9:32:d4:8a:33:38:
26:93:31:29:57:28:c9:ef:21:0a:ea:c6:3e:93:99:
3b:6b:5a:31:f6:be:e5:ad:40:bd:f2:28:1f:c4:29:
6c:e0:80:a1:3e:3e:70:24:79:56:90:da:55:d6:49:
10:eb:14:43:8c:b9:5b:55:8f:b4:71:fa:e5:d7:14:
b7:8d:e8:ba:0f:b6:c7:4f:d2:47:83:e1:6c:e6:5e:
c4:9f:42:ad:20:04:1d:44:fb:f6:fc:4f:b4:3a:9c:
6b:3f:35:72:44:8d:1b:b9:ab:2d:c0:d6:62:d2:96:
6e:b8:49:44:b2:7e:bf:22:cc:cc:89:ee:ed:b6:aa:
8c:11:63:59:d9:61:89:55:93:83:69:db:a6:50:6e:
6d:d4:7f:ba:30:6a:d5:62:a3:ad:d5:73:38:00:ac:
06:32:c9:30:a8:ab:c2:29:04:a2:d2:a3:af:f4:59:
cf:33:4e:98:fd:a8:6f:1b:23:d4:6f:25:04:54:8d:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:78:70:B2:8D:7A:06:0E:77:EB:AC:2A:B0:0B:8D:8A:EF:A2:21
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/nQN4cLKNegYOd-usKrALjYrvoiE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200409
Signature Algorithm: sha256WithRSAEncryption
06:3a:23:e2:d0:f6:e2:a8:2d:6f:19:f6:ec:97:f0:1b:78:72:
58:de:59:23:68:7f:81:d5:f0:c8:40:58:05:a0:e2:43:e8:4f:
bd:cd:df:7b:98:8d:a6:66:19:c4:e4:dc:41:25:4c:f2:98:f8:
02:e2:32:60:7e:9d:5f:3d:f1:98:be:35:26:70:7e:6b:ef:0d:
d0:0a:7f:20:e4:62:e1:66:b6:c5:db:fb:ad:91:8f:30:39:d2:
5a:53:3c:f5:d3:9c:61:f3:2d:41:17:f9:e2:97:fa:ca:65:9b:
da:78:4e:00:32:90:12:0a:fc:bd:a9:ba:57:bc:6d:3d:a6:19:
45:43:94:66:55:91:bc:b5:2c:c6:50:c5:97:28:3c:8a:f3:7d:
b4:50:f5:9f:af:09:20:ae:4b:d7:f9:9f:95:9c:6d:33:3c:3f:
67:31:f8:18:88:9a:a5:24:57:36:6d:58:cd:01:03:80:73:15:
83:bd:c7:02:12:ed:43:cd:cd:b4:bf:b2:8d:76:e7:48:12:b9:
48:39:2a:cc:6e:14:99:1c:1b:d3:4c:95:f0:89:71:16:61:cd:
1e:72:40:43:ac:32:7a:43:f0:70:e3:44:0f:73:3a:6d:47:1e:
5e:fb:cc:df:d3:6c:ef:aa:63:ab:29:74:df:90:f1:78:42:f7:
2c:fa:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:47 2026 by rpki-client