Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa
File: Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa (raw, json)
Hash identifier: mRCgdtrJHvfYqHRb7B2p6MSw7jldI362MV9SPdWb6Tg=
Subject key identifier: 0A:0C:FC:E4:4A:3C:A8:24:C3:19:99:21:D9:E5:83:58:6D:53:52:AB
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 019C237D74922D336989043D21510097F0E9
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa
Signing time: Tue 03 Feb 2026 12:32:30 +0000
ASPA not before: Tue 03 Feb 2026 12:32:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209114
Providers: AS: 6939
AS: 8893
AS: 58299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:7d:74:92:2d:33:69:89:04:3d:21:51:00:97:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Feb 3 12:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a0cfce44a3ca824c3199921d9e583586d5352ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:ee:04:ea:3d:16:19:41:45:8d:99:52:ec:
6d:50:ae:da:30:51:c2:ec:b1:ca:99:19:b7:fa:d4:
ab:b5:38:43:d1:78:2d:d8:11:f2:cf:ac:4b:70:87:
82:ad:af:0f:fb:90:ee:a1:a9:94:fb:7d:43:3b:e0:
cb:e0:e8:df:f5:fc:5e:c6:6c:69:0b:3b:33:06:91:
28:e8:ac:65:ce:b8:9e:96:1c:e4:2a:25:af:50:40:
09:25:00:1c:34:f4:ed:b3:91:54:5c:ee:47:93:9d:
2f:f6:26:27:10:37:6e:7b:15:d9:67:51:cd:74:84:
34:55:39:23:4e:9b:94:af:ba:ca:52:9b:bb:67:57:
66:f1:fd:8a:51:7d:f4:de:61:bc:eb:7a:da:ed:13:
59:e1:f1:c5:a8:14:6f:82:b3:3f:de:9f:c1:77:0b:
5d:09:c4:b5:01:fe:41:fb:21:6b:96:22:d4:fc:70:
8e:45:60:cc:e0:2b:60:ab:26:cb:cd:6a:6c:c0:6d:
27:88:25:47:e7:27:27:85:51:97:12:b3:e5:a6:e0:
f6:6f:32:1c:2c:cc:62:c3:ba:bc:79:91:c4:fe:6d:
3c:c6:98:e3:95:5a:fa:fd:0a:5d:c0:60:29:85:f5:
38:b8:f9:36:c5:23:c3:be:b8:28:48:f0:98:07:29:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:FC:E4:4A:3C:A8:24:C3:19:99:21:D9:E5:83:58:6D:53:52:AB
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/Cgz85Eo8qCTDGZkh2eWDWG1TUqs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209114
Signature Algorithm: sha256WithRSAEncryption
23:c5:6d:63:28:90:38:f8:99:2a:fe:27:5d:7f:c2:1c:01:1b:
b8:3d:db:c1:39:fe:98:99:47:b0:2b:d5:d3:2c:d8:98:82:f7:
f9:3e:ef:43:ad:cf:33:16:e0:f0:b3:ac:69:17:63:58:34:e1:
cd:91:a0:8c:ba:3f:28:74:7d:d5:5e:79:76:97:17:fb:3a:84:
9e:d0:a1:5b:3e:26:d0:ca:39:e5:ab:c5:cf:aa:bc:00:8c:bc:
59:c5:46:48:4b:79:1e:fe:8b:b0:e9:c2:55:73:0b:06:b7:b9:
ad:d3:54:b9:5a:3b:12:e2:17:61:70:33:cc:91:9a:85:44:01:
d4:72:37:e1:f9:25:da:95:72:bb:3a:17:31:15:53:59:d6:1a:
c5:b3:f8:ae:d1:32:82:ad:d1:dd:45:84:92:7a:b7:46:ad:9d:
27:b0:09:da:3c:4a:4b:ea:d5:98:b5:03:da:7c:53:d5:a8:82:
b6:f3:11:df:24:b9:4a:87:26:85:a0:90:6a:7a:01:de:ae:67:
ea:bb:3e:a9:1e:24:d6:e5:ac:d3:5b:60:14:c2:c7:a4:41:32:
63:d6:8f:49:65:f7:d3:7a:00:aa:fc:04:b4:15:e1:74:ba:60:
b0:75:94:70:d4:c2:6f:92:6c:0d:59:f1:37:1c:e6:13:df:7e:
6e:fe:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:02 2026 by rpki-client