Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/gnrpn7YumTfm3sZV07Z4M4h7UKE.asa
File: gnrpn7YumTfm3sZV07Z4M4h7UKE.asa (raw, json)
Hash identifier: RP6nKvtvBYTlAn9huMeoEhELwop/otfq7uqLtTZTFxY=
Subject key identifier: 82:7A:E9:9F:B6:2E:99:37:E6:DE:C6:55:D3:B6:78:33:88:7B:50:A1
Certificate issuer: /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial: 019D4FD0A12BAC66CE51391AAFC89CED2344
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/gnrpn7YumTfm3sZV07Z4M4h7UKE.asa
Signing time: Thu 02 Apr 2026 20:09:25 +0000
ASPA not before: Thu 02 Apr 2026 20:09:25 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202585
Providers: AS: 6939
AS: 37739
AS: 41051
AS: 42093
AS: 57866
AS: 200132
AS: 212895
AS: 215085
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:d0:a1:2b:ac:66:ce:51:39:1a:af:c8:9c:ed:23:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Validity
Not Before: Apr 2 20:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=827ae99fb62e9937e6dec655d3b67833887b50a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:ba:ad:af:50:84:d6:7b:65:be:1d:ce:34:
f3:02:09:0a:43:a0:d0:4f:c4:af:87:43:86:4e:71:
6d:0e:78:09:69:17:d4:c3:01:ed:56:5f:15:f7:1d:
00:88:49:12:20:d5:6e:8c:cd:d1:36:e1:6f:83:3c:
42:f5:25:fa:87:28:f3:98:3c:5e:98:bd:39:68:17:
0d:90:09:5e:0e:8d:e4:93:ae:dc:07:53:ab:1b:a8:
a1:77:f9:ba:dd:ff:34:dc:57:9f:f1:af:a3:21:a7:
95:52:a8:46:6e:54:91:f5:bd:77:37:8a:1c:ad:ef:
3d:a6:a5:63:57:e9:38:c9:5e:19:0c:19:14:e2:b7:
17:78:43:a9:b4:d4:64:ca:35:93:d4:39:3c:91:07:
06:fb:64:5b:85:a5:c7:f3:33:6b:98:c1:6f:94:62:
6b:c7:3f:b3:ca:ee:61:3c:d7:ce:2e:ba:e1:87:0f:
f7:f4:a0:44:a3:65:89:6b:10:09:83:86:8c:80:3c:
bd:1c:6d:b5:fc:29:73:c5:4b:f6:9a:1f:16:2e:e4:
03:ce:c9:eb:2e:09:5a:fe:6a:eb:dd:ba:33:99:f8:
2a:5a:5f:07:d4:a5:4e:48:59:b9:38:cc:ff:8c:3d:
b0:49:70:63:a4:30:50:cc:f5:e6:35:94:86:fa:22:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:E9:9F:B6:2E:99:37:E6:DE:C6:55:D3:B6:78:33:88:7B:50:A1
X509v3 Authority Key Identifier:
keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/gnrpn7YumTfm3sZV07Z4M4h7UKE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202585
Signature Algorithm: sha256WithRSAEncryption
9f:ae:7d:a5:ac:ab:28:a7:53:6e:76:4e:cd:92:23:e1:cb:7e:
85:6e:f2:fa:e1:3a:ac:37:2e:11:6f:6b:48:f6:0f:63:39:52:
7b:51:cd:a4:c1:ef:e9:3d:ff:2c:ae:88:6f:55:0b:77:97:f8:
d4:ca:1f:92:65:55:99:9c:f4:f2:21:56:ce:4d:5f:7d:6a:71:
5d:65:8b:a1:96:88:49:48:f6:f3:df:8f:be:4a:66:96:9a:0c:
21:d3:fa:79:77:d4:e0:7b:7f:6d:b4:5e:c8:a5:c9:51:53:fa:
be:86:f6:69:d2:a0:90:49:36:7b:73:c2:e2:01:2a:e3:8b:84:
32:2a:48:9f:c4:d7:16:0e:22:e4:b6:4b:f8:1a:f2:f7:60:cd:
2a:42:5f:37:62:66:a3:bc:72:5b:06:fd:d6:e8:6a:ce:2a:cc:
89:76:78:4b:b2:7b:2f:5b:1f:21:8a:ec:2c:b7:e1:2d:de:e4:
b2:c6:55:57:6e:24:4f:f0:27:2d:81:dd:85:36:bd:2b:bf:99:
ef:53:f4:ca:56:a6:9f:ff:9d:6c:64:70:fa:ba:71:e1:90:3b:
e3:76:36:7b:20:58:43:d6:76:b3:c2:b0:3c:2a:2c:3a:28:71:
e0:c2:3b:ce:de:be:a2:8b:02:c2:5e:0b:e6:45:d2:10:e1:3a:
ae:79:ba:bb
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1P0KErrGbOUTkar8ic7SNEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNWIzNDc5NjdjZWE2N2JiNjJiNjlkMjU5YWNkZTRiOGY5
ZTk0MTcwHhcNMjYwNDAyMjAwOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjdhZTk5ZmI2MmU5OTM3ZTZkZWM2NTVkM2I2NzgzMzg4N2I1MGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArue6ra9QhNZ7Zb4dzjTzAgkKQ6DQ
T8Svh0OGTnFtDngJaRfUwwHtVl8V9x0AiEkSINVujM3RNuFvgzxC9SX6hyjzmDxe
mL05aBcNkAleDo3kk67cB1OrG6ihd/m63f803Fef8a+jIaeVUqhGblSR9b13N4oc
re89pqVjV+k4yV4ZDBkU4rcXeEOptNRkyjWT1Dk8kQcG+2RbhaXH8zNrmMFvlGJr
xz+zyu5hPNfOLrrhhw/39KBEo2WJaxAJg4aMgDy9HG21/ClzxUv2mh8WLuQDzsnr
Lgla/mrr3bozmfgqWl8H1KVOSFm5OMz/jD2wSXBjpDBQzPXmNZSG+iKdPQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFIJ66Z+2Lpk35t7GVdO2eDOIe1ChMB8GA1UdIwQY
MBaAFD5bNHlnzqZ7titp0lms3kuPnpQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2Ut
OTRlN2QwN2ZiMzFkLzEvZ25ycG43WXVtVGZtM3NaVjA3WjRNNGg3VUtFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yNTZkYTctMTlkMC00NTlhLWI1M2UtOTRlN2QwN2ZiMzFk
LzEvUGxzMGVXZk9wbnUySzJuU1dhemVTNC1lbEJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXWTANBgkqhkiG
9w0BAQsFAAOCAQEAn659payrKKdTbnZOzZIj4ct+hW7y+uE6rDcuEW9rSPYPYzlS
e1HNpMHv6T3/LK6Ib1ULd5f41MofkmVVmZz08iFWzk1ffWpxXWWLoZaISUj289+P
vkpmlpoMIdP6eXfU4Ht/bbReyKXJUVP6vob2adKgkEk2e3PC4gEq44uEMipIn8TX
Fg4i5LZL+Bry92DNKkJfN2Jmo7xyWwb91uhqzirMiXZ4S7J7L1sfIYrsLLfhLd7k
ssZVV24kT/AnLYHdhTa9K7+Z71P0ylamn/+dbGRw+rpx4ZA743Y2eyBYQ9Z2s8Kw
PCosOihx4MI7zt6+oosCwl4L5kXSEOE6rnm6uw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:39 2026 by rpki-client