Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/2O_XZ4cztMTqkjvZWy11fJb_MHk.asa
File: 2O_XZ4cztMTqkjvZWy11fJb_MHk.asa (raw, json)
Hash identifier: qS8puOR9R7xm9FjQsicpURqBfjPW97q0d1dZ17E429U=
Subject key identifier: D8:EF:D7:67:87:33:B4:C4:EA:92:3B:D9:5B:2D:75:7C:96:FF:30:79
Certificate issuer: /CN=f72beeb3ba60fb12a339aca003ad8aaf17bc6066
Certificate serial: 01A061C5187CFFCA0312FEC2CE81DAF34624
Authority key identifier: F7:2B:EE:B3:BA:60:FB:12:A3:39:AC:A0:03:AD:8A:AF:17:BC:60:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yvus7pg-xKjOaygA62Krxe8YGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/2O_XZ4cztMTqkjvZWy11fJb_MHk.asa
Signing time: Wed 02 Sep 2026 10:58:21 +0000
ASPA not before: Wed 02 Sep 2026 10:58:21 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 218792
Providers: AS: 214762
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yvus7pg-xKjOaygA62Krxe8YGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:c5:18:7c:ff:ca:03:12:fe:c2:ce:81:da:f3:46:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72beeb3ba60fb12a339aca003ad8aaf17bc6066
Validity
Not Before: Sep 2 10:58:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8efd7678733b4c4ea923bd95b2d757c96ff3079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:38:8e:b2:8a:2e:63:1b:d8:14:0a:26:dc:
fc:59:4d:ac:ae:25:de:52:a2:79:fd:5c:0c:8b:db:
ba:3d:7c:4d:84:0f:b2:2c:89:7b:a4:c7:f2:52:ab:
af:af:44:45:c0:bd:81:9c:a8:22:f7:7d:2e:e0:5e:
63:fe:80:f0:fa:22:ab:69:3e:b0:cc:f6:95:44:57:
36:d6:a5:65:5d:8a:dc:31:49:52:76:5f:aa:5a:09:
e2:00:11:bd:89:9c:a8:21:60:20:b3:1c:a8:89:d9:
17:0b:9f:7e:6d:91:f2:cb:d3:fd:54:39:f9:dc:95:
e2:04:57:57:63:1d:b1:fe:58:2f:90:69:4e:08:7a:
24:80:23:39:66:65:cd:e0:12:29:87:39:56:e1:b3:
65:d3:df:05:99:68:8c:79:48:49:e7:de:f8:a9:ee:
80:e1:3a:e9:66:a2:0e:26:80:51:a3:cb:00:dd:57:
83:6a:3e:12:2c:9e:be:ce:40:e3:4a:9f:aa:40:6c:
b0:f1:bd:9d:f1:09:62:c8:89:85:69:19:85:2a:40:
9c:a9:f0:7b:4c:fa:da:02:8a:be:4b:5e:60:d4:fc:
91:82:33:5a:bf:f1:43:53:61:ab:cc:0b:75:51:a0:
98:bd:fa:4b:9f:93:bf:69:bd:c7:43:be:ec:39:75:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:D7:67:87:33:B4:C4:EA:92:3B:D9:5B:2D:75:7C:96:FF:30:79
X509v3 Authority Key Identifier:
keyid:F7:2B:EE:B3:BA:60:FB:12:A3:39:AC:A0:03:AD:8A:AF:17:BC:60:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yvus7pg-xKjOaygA62Krxe8YGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/2O_XZ4cztMTqkjvZWy11fJb_MHk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f3f465-4c9d-45ee-932c-26cb7a0798f1/1/9yvus7pg-xKjOaygA62Krxe8YGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218792
Signature Algorithm: sha256WithRSAEncryption
4d:79:d9:6c:2f:b6:c6:d1:a3:89:67:ac:bd:cd:df:c1:06:5e:
1a:c0:d1:d7:a7:9e:e3:97:df:a5:55:43:09:37:ca:45:bb:77:
39:08:1d:7d:c6:af:39:b1:17:ce:97:37:8c:f3:c9:87:91:aa:
7e:ba:75:cb:ed:49:ed:65:63:ad:3d:fd:74:40:eb:60:d6:cf:
fd:39:b7:9c:ef:78:97:25:bd:a8:60:c9:bc:8b:78:cc:07:45:
25:74:2d:7e:0f:d3:f9:72:20:c2:32:73:90:6b:06:df:49:24:
a3:80:37:75:0e:37:9f:3b:29:59:9c:b4:f1:ac:d0:3d:f5:26:
49:7b:d0:3c:e3:11:80:b9:3a:d0:cf:e4:eb:79:d0:d2:fc:38:
43:63:e5:63:8e:ee:f8:38:4c:f2:9f:0e:ef:88:df:68:1d:3a:
03:18:75:64:46:2c:6d:89:f8:83:ff:ba:ee:74:0b:75:9a:4a:
ca:b5:7c:ca:7b:11:5e:81:b4:f6:b9:e9:73:77:9c:a5:dc:a1:
18:14:ad:97:ab:d0:ae:e7:8c:32:c9:17:ff:84:d0:a3:d5:46:
e5:67:da:a8:b4:7c:98:12:ea:96:6c:f8:c5:48:38:9b:08:22:
37:08:13:64:68:47:29:a3:ed:56:9d:ec:7a:4e:3d:ec:fc:e8:
a0:44:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:37 2026 by rpki-client