Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/qR34p5ccxusFmYGiqxqs-x0VLfo.asa
File: qR34p5ccxusFmYGiqxqs-x0VLfo.asa (raw, json)
Hash identifier: qsNT5FbF31r9LydstqWQ8uToHpVi2El6JTZvM1F/ZNo=
Subject key identifier: A9:1D:F8:A7:97:1C:C6:EB:05:99:81:A2:AB:1A:AC:FB:1D:15:2D:FA
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01A056E3EAA8A7EC969084A149AC9BD86644
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/qR34p5ccxusFmYGiqxqs-x0VLfo.asa
Signing time: Mon 31 Aug 2026 08:16:12 +0000
ASPA not before: Mon 31 Aug 2026 08:16:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212037
Providers: AS: 2027
AS: 6939
AS: 24381
AS: 35661
AS: 35708
AS: 41051
AS: 51706
AS: 209533
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:e3:ea:a8:a7:ec:96:90:84:a1:49:ac:9b:d8:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Aug 31 08:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a91df8a7971cc6eb059981a2ab1aacfb1d152dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:72:07:0a:71:c6:72:0c:9f:ac:eb:ce:92:
58:19:46:62:bd:7a:6f:db:47:4d:90:c0:e4:99:d6:
0f:fb:27:69:77:cf:c3:19:5a:d8:3a:de:6f:05:f5:
51:e3:d6:8e:a9:04:b3:04:93:78:dc:f9:c7:90:ad:
24:6d:37:5f:a5:e4:8b:67:f9:c0:ee:d1:d1:64:7d:
5c:fe:c7:13:0f:29:59:04:6c:a7:f7:56:25:ab:8d:
9f:0f:35:66:38:07:8a:00:39:52:54:36:2f:f2:fe:
c0:7c:09:49:dd:2e:83:a2:43:23:0a:82:8a:c0:02:
92:ee:38:74:b7:3e:68:a4:e0:aa:24:c5:b2:99:2f:
0b:37:e4:24:6b:72:b7:a6:ff:6d:9a:11:da:d4:d5:
b4:01:6a:22:26:50:b7:ec:c5:f1:bd:ad:c1:60:9c:
e1:3b:2b:6e:b9:10:ed:c2:cf:85:7e:a1:5e:48:e5:
2f:6f:e2:98:f2:fe:be:fe:c3:ce:f9:90:3f:f4:65:
e5:85:2b:ba:17:03:ac:1c:d9:e8:3d:b5:85:f3:4f:
1f:af:a2:bc:2b:03:5f:0c:26:a7:c0:dc:5d:ae:03:
78:9e:9c:bf:87:26:8b:96:27:28:af:0a:a8:62:3b:
9a:73:f8:75:78:73:67:2e:10:25:e8:e5:d2:79:97:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1D:F8:A7:97:1C:C6:EB:05:99:81:A2:AB:1A:AC:FB:1D:15:2D:FA
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/qR34p5ccxusFmYGiqxqs-x0VLfo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212037
Signature Algorithm: sha256WithRSAEncryption
74:1b:42:cb:5b:1c:38:f4:fa:15:c7:be:37:e9:a2:dd:2d:df:
84:a7:97:b2:2f:54:4e:81:b1:2c:97:9b:aa:0e:ca:94:77:42:
25:bc:43:a4:6a:30:cd:a7:15:05:69:da:88:b8:bd:e8:68:20:
ba:f7:a1:05:43:0b:de:36:91:99:a9:90:8a:02:31:87:55:6a:
89:5c:41:fd:71:9e:0f:ba:01:f0:06:50:ac:f2:9a:28:75:82:
12:f3:eb:e4:5b:13:6a:43:18:fd:c5:c9:09:d4:2c:a6:52:91:
c5:45:9c:02:a1:eb:c9:a3:4a:b2:7e:01:ef:33:c7:16:5b:a5:
43:f1:3a:f5:a2:62:b2:41:86:65:00:a1:1b:a8:56:dd:8a:a1:
16:41:e4:c0:19:e3:e9:0c:37:07:f1:40:6e:84:29:bc:4b:d6:
c3:04:48:79:37:d5:3e:0c:2e:a3:ec:43:da:52:60:b7:d8:bd:
ea:29:fc:50:f2:2c:40:33:9e:3a:b2:82:4d:c0:69:f8:46:05:
20:14:10:83:e1:49:19:eb:6d:09:89:32:f1:f7:ff:af:df:16:
35:b1:14:fc:d7:3c:e7:52:2d:ab:56:a6:82:9a:16:1e:aa:43:
e1:55:5d:d9:5c:08:28:af:fc:e4:35:15:47:20:74:af:af:64:
d6:7e:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:06:46 2026 by rpki-client