Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/zhAOUDPsimKbNDw9REBFzxOXvAg.asa
File: zhAOUDPsimKbNDw9REBFzxOXvAg.asa (raw, json)
Hash identifier: BAoiUcDbbzAQk/giYWae8rYu4mp3xPfBmklUKb9Lgbg=
Subject key identifier: CE:10:0E:50:33:EC:8A:62:9B:34:3C:3D:44:40:45:CF:13:97:BC:08
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 019CA734466E759D314898085C3600CF535F
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/zhAOUDPsimKbNDw9REBFzxOXvAg.asa
Signing time: Sun 01 Mar 2026 02:22:26 +0000
ASPA not before: Sun 01 Mar 2026 02:22:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214569
Providers: AS: 20473
AS: 214331
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:34:46:6e:75:9d:31:48:98:08:5c:36:00:cf:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Mar 1 02:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce100e5033ec8a629b343c3d444045cf1397bc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:40:06:fd:a0:2c:77:55:bb:3b:03:cd:28:
48:76:2e:56:ac:b4:39:6f:06:5e:96:3c:a3:84:70:
49:66:8a:cd:d9:d8:6c:a0:77:c4:5e:2d:73:64:25:
03:c7:87:86:7a:94:25:ba:76:53:ce:f0:21:10:fb:
4a:41:4b:00:4a:fe:bb:e5:12:e5:11:54:c9:0a:42:
65:e7:1b:5c:6a:ea:56:ea:98:01:88:46:13:2a:80:
a8:00:d9:d0:96:e2:62:83:77:5c:e6:c9:07:b7:b3:
13:d8:6f:39:79:e3:6f:87:9a:99:2c:7f:83:c6:65:
b6:22:9c:57:14:ea:a1:eb:7f:13:64:cf:5f:7c:be:
57:3c:25:9f:f8:64:82:85:59:93:bf:52:ab:3a:b5:
70:53:72:76:89:d8:0c:35:52:aa:92:25:5b:3d:d4:
a0:a1:90:f8:02:75:a1:e9:68:8f:d5:4e:66:c0:67:
61:cd:64:90:7f:13:92:a6:18:33:fd:6c:59:5b:05:
9d:74:81:ec:bb:02:f2:9f:d9:f7:6d:a8:05:cc:86:
e9:6f:94:a1:6a:91:08:2b:a7:15:57:c9:0d:83:60:
37:01:e7:43:fb:7b:4e:e6:ca:88:51:5e:4b:70:d0:
76:28:4c:6c:00:84:3f:25:d5:bf:68:86:d3:c0:a0:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:0E:50:33:EC:8A:62:9B:34:3C:3D:44:40:45:CF:13:97:BC:08
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/zhAOUDPsimKbNDw9REBFzxOXvAg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214569
Signature Algorithm: sha256WithRSAEncryption
65:a1:19:39:18:8e:c1:ec:d3:06:9a:c6:e1:88:74:1f:64:56:
d8:95:f7:c6:bc:86:7c:c1:bc:f3:3c:b6:4b:3b:d3:15:57:0f:
d3:65:75:df:33:95:6f:87:91:81:77:04:ca:d9:a3:a2:38:15:
4a:04:ef:ef:65:0f:c4:e5:4e:93:b1:81:f3:24:57:2a:88:48:
b2:a8:ce:1a:65:cf:21:fe:09:00:35:97:0b:1c:b5:12:c1:92:
da:b2:61:12:24:2f:d4:fc:80:a8:34:9a:91:ec:02:bc:33:c8:
cb:1b:10:8c:15:7f:ba:ee:69:01:28:a7:80:eb:a8:de:f4:97:
04:04:a0:e2:4a:b4:26:71:09:e0:8e:75:5a:9f:ea:85:cc:0a:
59:15:b6:16:05:b7:a7:10:c2:b9:8d:69:36:5d:03:eb:18:bf:
2a:90:43:c0:44:c1:4c:ab:ce:43:00:6d:26:bc:24:9e:76:0f:
bd:96:05:a7:56:39:8f:2a:23:27:b9:56:a4:c7:f7:07:3e:17:
ac:95:0e:e0:c5:f5:8a:1d:4f:df:39:06:04:da:34:f5:16:dd:
7e:20:4b:d9:2f:f2:19:4c:b2:7b:81:16:ea:c1:14:ba:f0:8c:
ae:d3:45:2f:24:9f:dc:72:32:e3:e4:ee:db:c0:e4:38:48:34:
e1:84:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:41 2026 by rpki-client