Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/3kbLc8Qk98OS36Cuqlqi4eSPbog.asa
File: 3kbLc8Qk98OS36Cuqlqi4eSPbog.asa (raw, json)
Hash identifier: bH2DofWxw53VbIJoPIQA9QesqLdSY99Ym1sD2aUGFFU=
Subject key identifier: DE:46:CB:73:C4:24:F7:C3:92:DF:A0:AE:AA:5A:A2:E1:E4:8F:6E:88
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 01A0AA7545CA31025833C97B798BF9F7CC9C
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/3kbLc8Qk98OS36Cuqlqi4eSPbog.asa
Signing time: Wed 16 Sep 2026 13:43:27 +0000
ASPA not before: Wed 16 Sep 2026 13:43:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209925
Providers: AS: 174
AS: 16347
AS: 206120
AS: 212815
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:75:45:ca:31:02:58:33:c9:7b:79:8b:f9:f7:cc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Sep 16 13:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de46cb73c424f7c392dfa0aeaa5aa2e1e48f6e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:07:34:a7:5c:ec:93:f5:31:70:f5:7c:3d:
be:07:bc:d8:4b:86:5f:20:05:b6:26:dc:e6:d4:a5:
fc:0e:72:51:c5:ce:00:4a:86:d1:d6:fe:39:ea:ea:
95:b6:87:d3:e2:be:6a:96:ca:73:2a:1a:57:1b:7c:
fe:6c:a7:3f:03:7a:fd:68:74:b7:77:79:5e:be:c1:
fb:98:7c:5c:d3:a9:d5:d6:a6:58:e7:93:e6:eb:44:
36:50:bc:5c:ad:a9:65:f7:ca:ac:4d:2e:95:ba:11:
34:a5:e9:4f:22:24:bf:61:5b:7f:57:3f:9a:03:42:
99:38:9f:e8:34:70:eb:5f:b1:b5:27:c7:30:fa:c6:
08:f7:e5:ea:2c:00:f5:b0:a0:2c:32:6a:e0:12:e2:
16:c9:ca:aa:f8:9d:ce:a5:c2:af:b9:7a:44:c8:15:
2b:d9:d0:9f:f4:3b:df:80:6f:d0:d5:56:fe:62:80:
49:1f:8e:30:9c:28:92:93:05:bf:41:79:f7:9e:40:
7e:13:72:e0:dc:8b:89:e5:a2:98:31:9c:5c:2a:ac:
00:bc:71:97:07:25:fe:b9:b3:47:bc:24:bd:81:17:
b7:b4:d4:69:f9:bd:02:34:9e:6a:0b:2d:f6:d2:30:
f9:67:43:70:ba:b5:e4:01:00:3a:28:5b:3e:62:3f:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:46:CB:73:C4:24:F7:C3:92:DF:A0:AE:AA:5A:A2:E1:E4:8F:6E:88
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/3kbLc8Qk98OS36Cuqlqi4eSPbog.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209925
Signature Algorithm: sha256WithRSAEncryption
79:60:df:dd:2e:23:96:03:a4:56:83:41:92:e6:d2:68:9a:aa:
5e:5b:e9:9e:40:1c:a1:17:41:16:96:9b:74:d5:14:4a:16:8f:
73:4e:35:ae:83:8a:e9:7d:62:d7:3e:1e:65:27:1c:ce:9e:5d:
c2:24:9a:99:c8:71:b2:b7:5f:a8:3f:06:af:ce:18:75:25:b7:
71:46:ee:ea:d9:95:c6:dd:66:23:44:98:a7:98:c7:b7:34:48:
8e:51:0a:e6:fe:b7:2b:1e:05:60:e2:ff:80:21:35:41:a4:ff:
96:ca:84:82:67:4b:bf:aa:d4:2a:b4:28:d3:30:04:e5:9e:c4:
b4:9c:55:a9:fb:38:a1:13:47:9e:0a:db:62:b1:e4:92:89:9e:
63:4e:44:1c:3f:ec:97:6c:1c:96:66:c1:99:05:bd:12:88:f7:
ee:5c:84:c1:4d:28:30:44:a4:49:bd:fd:ae:95:59:c7:3f:bb:
be:fc:2f:36:e2:28:35:c8:ac:b2:0d:a3:1e:09:57:b4:8b:3b:
6f:5f:c3:a1:83:a5:49:74:a5:2a:51:90:ad:e4:29:30:67:9b:
78:fe:27:2b:1e:71:f9:77:74:7f:26:c7:7a:bf:b3:8e:06:7e:
2a:66:6e:22:cb:9c:80:43:30:8c:d0:e0:cc:e1:83:2c:d1:2c:
32:63:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:45 2026 by rpki-client