Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/bfrimfrKsjP1H4_yDGl-HHi3rMo.asa
File: bfrimfrKsjP1H4_yDGl-HHi3rMo.asa (raw, json)
Hash identifier: otCqFBX6IsFFPV79counVC38hvqm6kku/jKcnRUQmy0=
Subject key identifier: 6D:FA:E2:99:FA:CA:B2:33:F5:1F:8F:F2:0C:69:7E:1C:78:B7:AC:CA
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019D3E2C3485E2127A7EBB99156A99A7C5BF
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/bfrimfrKsjP1H4_yDGl-HHi3rMo.asa
Signing time: Mon 30 Mar 2026 09:56:17 +0000
ASPA not before: Mon 30 Mar 2026 09:56:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199095
Providers: AS: 9031
AS: 25311
AS: 42160
AS: 200020
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:2c:34:85:e2:12:7a:7e:bb:99:15:6a:99:a7:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Mar 30 09:56:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dfae299facab233f51f8ff20c697e1c78b7acca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:e3:ae:df:7f:e4:c4:f9:f6:50:3d:33:e7:
2d:64:e3:6b:f1:bc:89:ac:6f:fb:fa:85:f0:d8:87:
ff:d4:05:04:15:95:1b:f3:79:2d:78:41:5d:72:9f:
32:92:aa:14:50:aa:bf:05:3d:65:73:84:4e:5b:e0:
a4:d8:87:ad:ca:51:8c:cb:2c:20:5f:30:ea:86:c3:
70:27:83:b5:f9:fb:54:05:ac:01:f1:0b:64:15:76:
4d:82:4b:d1:fa:fe:34:6f:33:61:9a:d4:7d:1e:98:
91:19:50:1e:21:e2:f1:f0:f9:df:20:b6:0f:35:83:
a3:68:ac:28:7b:e6:1d:2a:27:79:44:f3:ee:91:1e:
87:40:6f:27:f8:df:34:53:0c:7c:e5:9d:84:4e:f2:
c1:5b:57:ef:a9:3d:2f:c1:dd:2f:da:6a:a4:ce:cb:
7a:ac:0a:49:b6:5a:8d:20:fd:01:ad:db:34:d2:d9:
99:c1:42:01:c2:62:ab:8c:15:1f:d3:e4:9f:b0:87:
c4:27:a5:32:a6:f2:fb:88:92:eb:ce:be:de:24:e6:
ba:41:42:61:c9:4c:d0:e2:97:f3:1f:28:3c:d2:68:
f9:7d:62:9c:a8:d4:52:71:ca:f1:3b:85:1c:a8:6f:
01:d4:a4:0f:c6:1c:b8:13:17:b5:1f:53:8d:39:3a:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FA:E2:99:FA:CA:B2:33:F5:1F:8F:F2:0C:69:7E:1C:78:B7:AC:CA
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/bfrimfrKsjP1H4_yDGl-HHi3rMo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199095
Signature Algorithm: sha256WithRSAEncryption
69:79:b6:2f:c0:77:8f:99:97:8d:68:5a:5d:b9:c4:96:0d:fa:
ae:b4:12:08:c4:f1:78:2d:08:0e:a1:1b:72:b7:07:e4:77:f2:
18:5e:86:65:3b:5a:74:ab:27:e3:fd:00:74:7d:c2:20:46:ee:
ee:8a:35:09:4e:92:8a:29:e3:32:16:d3:a1:e5:d3:ad:a8:44:
a2:2d:fa:63:18:b3:64:41:b7:1c:4b:9a:2c:14:d7:72:5d:87:
24:72:56:2b:4e:af:fc:c4:81:b9:fd:27:5f:20:4a:bd:8e:20:
53:6f:2e:f0:d9:28:ce:83:fe:17:40:1b:f7:69:32:a3:7e:10:
5e:7d:1a:f3:a5:39:26:bf:f3:cb:01:f5:bd:a3:ad:27:b6:45:
b4:6f:98:2f:be:0f:6e:8d:b9:5f:b0:c1:f4:07:68:4e:e0:4e:
20:27:14:09:fa:25:0f:56:2c:5d:ef:a9:fd:2f:28:24:40:6e:
16:a4:82:90:4a:ae:ea:a0:22:3a:df:90:25:4d:99:2e:4b:02:
c7:2a:f0:22:8a:38:95:5f:1a:46:d7:de:cd:da:85:ac:9f:46:
4a:d1:38:2b:62:4c:4e:35:75:a4:93:0f:c2:a5:f0:68:d0:0f:
70:df:fe:84:c7:f3:89:44:9c:e7:df:f4:f9:b0:33:dc:51:93:
ce:6a:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:34 2026 by rpki-client