Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa
File: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (raw, json)
Hash identifier: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=
Subject key identifier: C6:24:2F:01:53:CE:5A:63:2C:32:C2:0E:EB:3E:60:54:7B:7B:43:E6
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019C47EB07B1DEDA928F07F698C880854234
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa
Signing time: Tue 10 Feb 2026 14:18:31 +0000
ASPA not before: Tue 10 Feb 2026 14:18:31 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214365
Providers: AS: 39351
AS: 208453
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:eb:07:b1:de:da:92:8f:07:f6:98:c8:80:85:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Feb 10 14:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6242f0153ce5a632c32c20eeb3e60547b7b43e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:2e:a5:f0:0f:86:f6:76:7b:c7:87:c9:2d:
11:c5:7a:65:e2:58:4b:f2:e6:ac:93:a5:4c:28:50:
2a:fe:50:7a:07:63:98:b2:ae:49:f6:f0:04:cc:4c:
06:ea:d0:23:96:5e:36:4c:e9:32:25:b7:5a:c3:4e:
8f:98:93:45:86:89:a4:e3:a6:ee:9a:27:6f:05:49:
09:fb:58:3b:6f:6e:61:11:de:9a:fd:33:54:9f:8c:
e9:7f:88:58:9c:b8:d4:f2:db:ae:db:7b:d2:64:9f:
05:c7:3e:41:72:68:ad:36:5c:ea:2d:91:18:4a:03:
78:ff:51:a2:0e:56:08:8a:96:d2:63:82:5b:cd:74:
94:78:90:33:ae:05:58:02:23:ab:fa:24:4b:84:14:
40:36:cf:2f:60:1f:2c:02:ca:69:92:44:9f:0d:04:
98:ea:c5:0d:c4:14:1f:03:fe:bb:81:18:ab:67:f4:
7d:e6:1e:93:58:9f:e3:45:00:e9:70:e5:e9:41:0b:
36:07:bb:ef:f3:e2:27:39:18:d4:37:8b:2b:f2:32:
45:22:85:2d:9b:ee:99:90:84:1a:6b:40:fb:00:c7:
83:34:d6:e4:6e:c0:3c:97:f0:2a:dc:b5:14:a3:a7:
c7:aa:02:89:0d:c8:bc:02:47:fa:68:77:fc:32:aa:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:2F:01:53:CE:5A:63:2C:32:C2:0E:EB:3E:60:54:7B:7B:43:E6
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214365
Signature Algorithm: sha256WithRSAEncryption
1c:52:05:84:dc:44:d0:a2:f4:98:24:0e:4f:d6:3c:ef:92:9e:
49:d9:3d:2c:47:2f:a8:96:8a:f2:dd:c8:ae:a6:05:12:f0:3f:
15:53:87:15:bf:ba:e5:dd:2d:63:9f:40:2b:0d:53:f0:8e:81:
63:87:08:b5:fa:58:a1:db:10:64:15:a8:12:60:26:1c:2d:16:
1e:27:32:fb:1e:57:7d:13:41:07:26:10:de:45:6b:eb:d1:8c:
ad:4b:fb:00:1e:41:5b:c1:76:29:5d:d0:c6:79:6c:6c:da:f3:
ba:d9:c6:57:0a:b5:f0:a1:3d:ad:b5:07:fb:96:5d:d2:cd:62:
42:11:ae:a8:cd:0e:78:2a:28:f5:39:ec:be:32:45:95:75:51:
55:06:3c:8a:4d:14:c1:23:ec:32:14:c4:73:ad:57:42:c9:41:
7b:fa:67:02:32:b7:4a:c2:af:02:ab:5f:2a:39:98:13:00:da:
7e:f4:48:53:fe:5b:2a:09:f9:29:58:a6:26:6a:dd:41:e0:82:
d2:73:b7:17:48:19:99:58:7c:ea:56:4d:bb:df:1c:b5:1c:d5:
8d:ab:13:c0:c5:f7:e2:15:97:56:09:9d:73:8b:2e:03:9e:7e:
21:93:ff:a0:19:9d:03:a0:53:ea:c2:40:e9:85:50:48:15:bd:
a2:0e:d1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:39 2026 by rpki-client