Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/a6ILxs7AfRiz-iaAF-l64QD3g3c.asa
File: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (raw, json)
Hash identifier: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=
Subject key identifier: 6B:A2:0B:C6:CE:C0:7D:18:B3:FA:26:80:17:E9:7A:E1:00:F7:83:77
Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial: 019C48FB94125719312A73A69DAFDB6B119E
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/a6ILxs7AfRiz-iaAF-l64QD3g3c.asa
Signing time: Tue 10 Feb 2026 19:16:12 +0000
ASPA not before: Tue 10 Feb 2026 19:16:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 21034
Providers: AS: 3269
AS: 8928
AS: 12874
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:fb:94:12:57:19:31:2a:73:a6:9d:af:db:6b:11:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Validity
Not Before: Feb 10 19:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ba20bc6cec07d18b3fa268017e97ae100f78377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:61:a2:0d:56:c0:50:d6:17:f0:68:5b:a0:
a8:10:4b:02:0b:43:21:db:4a:c8:37:f7:25:26:aa:
14:bc:11:96:3b:b2:89:d9:e2:51:d7:0f:fe:e6:9b:
ff:c1:e4:8b:06:2b:45:f8:c1:b3:68:db:1a:bd:86:
b6:63:b7:7e:51:61:82:6c:62:08:3e:67:62:a7:98:
87:20:2d:eb:30:08:76:3a:73:4d:38:b7:62:8d:7b:
f9:84:a1:92:5b:3a:01:74:d1:fc:62:f0:5f:b2:58:
cd:7a:2c:e9:f5:6a:dd:59:f0:72:50:91:8d:5c:e8:
a5:5e:44:e5:2b:d8:94:3f:69:33:be:1d:4d:18:84:
2b:cc:96:3c:b1:64:48:bc:7a:ae:1d:d1:4d:a8:8e:
16:8b:1b:59:5b:85:a2:33:6f:0f:8b:e8:83:74:16:
74:37:d1:0e:5e:8f:f0:8e:ca:50:9f:61:a3:67:a1:
77:45:84:56:aa:5f:2d:32:3f:f4:97:22:e9:e2:a5:
65:d4:70:6a:c2:8b:20:f4:41:19:bd:b2:78:aa:24:
f4:2c:ca:51:2c:57:c5:43:e2:9c:4f:6d:a2:75:01:
a5:06:81:9d:e9:f2:6d:1b:c1:a2:46:4a:d0:3a:95:
54:85:1b:31:ed:99:8d:34:ae:6a:27:ef:73:e6:25:
81:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A2:0B:C6:CE:C0:7D:18:B3:FA:26:80:17:E9:7A:E1:00:F7:83:77
X509v3 Authority Key Identifier:
keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/a6ILxs7AfRiz-iaAF-l64QD3g3c.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21034
Signature Algorithm: sha256WithRSAEncryption
5c:e7:b5:0d:11:7e:96:42:f2:72:a7:b5:af:ad:e2:f5:d9:62:
2e:5b:00:d9:0c:7d:9e:ca:86:41:76:06:d6:e5:e0:ec:ac:3e:
cd:4e:7f:44:d8:35:af:34:6e:e2:07:24:6d:b2:e7:94:51:f9:
10:25:46:8c:8d:a8:de:ae:75:d6:32:af:74:c2:f4:8f:37:ec:
88:80:7d:a0:39:c0:94:b6:85:9e:d3:e6:b9:e5:7a:0a:37:67:
43:f6:12:37:fa:38:db:bb:da:62:9c:cc:6f:3b:47:ba:b4:14:
99:03:cd:9e:55:b4:d0:ba:fd:7d:b9:4a:a9:9b:bb:cd:4f:1a:
a2:b7:09:4b:b0:03:57:5d:66:e2:3c:c8:eb:e3:b7:b1:11:e1:
cf:4d:a4:2b:59:6f:5b:fd:11:f7:ab:82:0d:b7:56:3b:c5:15:
a4:6c:49:1a:83:bc:9b:4d:c8:06:38:77:c4:0a:0e:43:dc:8f:
da:f8:b6:f7:c3:a3:48:85:a4:a1:96:89:6e:ed:a8:83:6f:2a:
89:97:9c:30:81:03:60:64:a1:54:3c:0e:f3:01:74:3c:4e:10:
e7:b9:69:42:d7:60:9f:bd:37:89:93:7e:10:8b:73:82:6d:7a:
49:82:78:77:27:64:c4:1d:35:70:a1:c6:4a:43:0a:03:04:6c:
eb:78:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:24 2026 by rpki-client