Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/KNVzSibwcIeJsoSsffQEDCnxWf0.asa
File: KNVzSibwcIeJsoSsffQEDCnxWf0.asa (raw, json)
Hash identifier: y8bkznZSy/A3ZDayRMz8nCgtieLCBzH6L8q9ZF7Ujzk=
Subject key identifier: 28:D5:73:4A:26:F0:70:87:89:B2:84:AC:7D:F4:04:0C:29:F1:59:FD
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019C49790117F9751661185EB9CD4ED6568A
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/KNVzSibwcIeJsoSsffQEDCnxWf0.asa
Signing time: Tue 10 Feb 2026 21:33:12 +0000
ASPA not before: Tue 10 Feb 2026 21:33:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209771
Providers: AS: 6939
AS: 34549
AS: 41051
AS: 48646
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:49:79:01:17:f9:75:16:61:18:5e:b9:cd:4e:d6:56:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Feb 10 21:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28d5734a26f0708789b284ac7df4040c29f159fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:9c:42:35:58:ab:68:8d:21:f1:9b:ea:a6:
df:f3:91:3f:12:1d:18:85:5c:29:f2:5e:b3:35:7c:
c2:ac:1a:57:ad:04:d6:72:0b:1f:7a:fd:c8:b7:5c:
4b:08:5d:74:e0:ee:48:57:83:80:3d:96:a7:cd:07:
99:a0:6b:d1:80:28:fb:0c:f9:08:b1:c5:22:87:c8:
a3:0a:c6:6d:83:c5:aa:00:ae:c2:e0:fd:2c:1d:81:
0d:23:6e:bc:27:9c:dd:a1:7a:ed:ff:12:96:95:11:
7d:05:12:2a:da:f4:75:32:bf:10:2c:61:56:5e:70:
3e:6b:ad:5f:2d:3f:9e:9d:44:4f:d7:34:d9:c0:76:
36:f5:b6:76:96:02:4d:f6:31:9f:da:3c:dd:3a:11:
49:ca:cb:cb:a1:aa:03:c2:28:67:af:27:ff:84:2d:
30:17:2e:fc:1e:56:73:eb:85:93:bb:82:03:7e:d9:
d8:ad:dc:3d:e8:72:10:8b:22:53:9f:fb:d1:1a:b6:
49:26:a2:ba:72:f0:1b:d5:06:4d:85:f8:28:47:4d:
62:a0:0b:1f:cf:ef:9c:1c:6f:97:5a:14:25:6b:e4:
3f:d5:4c:88:11:00:9d:98:8c:7e:ba:dc:b6:a2:c9:
72:34:65:94:38:f9:6e:40:fd:b0:f0:9e:5e:f6:4f:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:73:4A:26:F0:70:87:89:B2:84:AC:7D:F4:04:0C:29:F1:59:FD
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/KNVzSibwcIeJsoSsffQEDCnxWf0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209771
Signature Algorithm: sha256WithRSAEncryption
1c:bf:03:8d:b6:dc:16:87:96:6f:ec:fa:72:cd:6e:21:9d:8c:
b5:2b:cd:60:f3:c1:aa:26:2f:af:45:23:5f:45:a2:a6:f9:26:
06:29:50:58:ae:e5:16:b4:ab:39:1c:5f:75:0e:00:fa:1b:63:
99:9a:de:6c:dd:f3:24:48:6c:7b:6a:e4:12:57:e8:18:f4:f7:
66:b8:53:bc:2e:97:5d:0a:1c:9e:b0:3f:6d:c6:89:4b:1b:04:
6b:ad:b1:d2:72:09:48:16:9c:14:05:62:f5:1a:10:92:cb:63:
fc:16:81:19:b1:c5:79:db:bd:fd:6a:d6:55:ab:ea:9c:a6:c9:
b5:25:1d:2a:f9:3c:46:8d:ac:5d:29:af:e4:0c:82:c0:d7:a8:
c2:af:69:bf:14:5c:bc:28:11:37:2e:dd:db:6b:fb:93:de:d8:
10:78:2c:81:a4:06:3a:93:e1:84:53:07:01:5f:1c:85:81:1f:
59:e3:96:26:95:4f:65:47:49:47:d5:1b:e5:ce:c8:83:f5:4f:
b3:ae:bb:48:0a:c1:af:a0:ef:d1:50:34:99:91:f8:06:cc:56:
55:b4:84:dd:0b:87:c7:fd:a5:75:72:c2:a4:8f:03:dc:ce:03:
cd:86:9b:c4:d5:03:6c:23:1b:07:cf:b3:aa:fb:c2:f5:11:67:
5b:c8:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:35 2026 by rpki-client