Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/9dBOo0WfbmhAedqmv9blBB7wIOA.asa
File: 9dBOo0WfbmhAedqmv9blBB7wIOA.asa (raw, json)
Hash identifier: 9SNFHtDDXsfIN9yYQ8+BOP7ExSFS+qpoLs8vGcM3PoQ=
Subject key identifier: F5:D0:4E:A3:45:9F:6E:68:40:79:DA:A6:BF:D6:E5:04:1E:F0:20:E0
Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial: 019CA8F6B794D2CE8FD1ACA3A89896D03CDF
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/9dBOo0WfbmhAedqmv9blBB7wIOA.asa
Signing time: Sun 01 Mar 2026 10:34:26 +0000
ASPA not before: Sun 01 Mar 2026 10:34:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204464
Providers: AS: 11967
AS: 24381
AS: 34800
AS: 34927
AS: 41051
AS: 44393
AS: 49581
AS: 56755
AS: 58057
AS: 62403
AS: 205305
AS: 212232
AS: 212895
AS: 213409
AS: 213413
AS: 213449
AS: 214420
AS: 215569
AS: 215828
AS: 393577
AS: 400212
AS: 401753
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:f6:b7:94:d2:ce:8f:d1:ac:a3:a8:98:96:d0:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
Validity
Not Before: Mar 1 10:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5d04ea3459f6e684079daa6bfd6e5041ef020e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:99:64:20:f7:fa:7d:13:f6:a3:8f:15:fe:
e9:1d:06:4e:f9:7c:fd:61:b7:d8:c7:19:33:65:b6:
9d:96:42:7f:b0:e3:c5:19:ed:53:c8:77:89:9b:fb:
b6:2a:15:db:c8:1b:78:84:b7:e4:9a:36:d5:7e:98:
91:87:cf:f4:73:6b:93:52:2c:6e:61:22:12:42:00:
12:9b:b7:8c:31:45:f6:e5:80:93:c1:62:da:c4:ef:
8a:21:a1:3f:4b:9b:7a:f8:0b:2a:32:9e:32:32:d1:
f9:7c:c7:a1:f0:db:d4:49:0e:b6:88:c0:e9:09:57:
c2:bb:e9:1d:8d:53:2c:22:da:d9:f8:a6:aa:6b:61:
79:9b:e5:5c:c5:63:3b:23:5c:1e:5f:72:29:59:65:
d3:a9:55:27:e2:95:82:e3:e4:9b:b8:2e:ff:59:a2:
6f:f0:98:6a:71:5e:ae:19:ad:f5:a4:a4:eb:51:6b:
74:a1:86:37:ff:23:d8:b7:ad:a3:a4:c5:2f:12:07:
28:e5:cc:e8:fa:46:73:85:c0:8d:66:03:70:52:91:
0f:b6:f6:d7:3a:d9:20:42:05:7c:e7:0d:b5:32:30:
a1:bf:ff:4a:12:62:91:75:df:f2:58:b8:24:4d:a9:
e6:d8:09:6a:fe:44:fa:d3:ed:45:44:4f:c8:54:af:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D0:4E:A3:45:9F:6E:68:40:79:DA:A6:BF:D6:E5:04:1E:F0:20:E0
X509v3 Authority Key Identifier:
keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/9dBOo0WfbmhAedqmv9blBB7wIOA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204464
Signature Algorithm: sha256WithRSAEncryption
7c:e7:d4:87:67:f4:35:94:4b:6b:35:b3:7b:ae:d6:51:b6:4a:
90:32:7a:65:ea:da:ed:9a:24:ff:c8:5e:4c:06:f7:5d:bc:36:
cf:ea:96:ba:8d:bb:75:82:6f:39:9e:1b:14:aa:8d:58:6a:c1:
30:58:95:33:b9:7f:3a:4a:ad:f3:e5:1c:0f:b1:03:a0:9a:3c:
8e:e0:86:0b:f8:d0:67:01:32:8f:4b:1c:93:0e:3a:13:88:4d:
72:73:f8:f7:c9:64:87:d4:1c:4d:8e:59:0a:8d:af:b6:c9:6a:
19:36:94:d6:fc:a8:3f:1f:83:07:3f:db:ee:e4:bb:3f:e6:20:
f7:99:5d:d0:ee:eb:9a:10:8f:aa:ca:9a:b6:11:dc:ce:cc:3b:
37:49:50:e4:b1:55:01:b3:e2:26:26:43:68:25:71:05:aa:79:
ad:4f:5d:40:a3:84:30:32:ff:6d:82:b8:30:2d:fe:46:2b:ed:
51:5d:ec:7d:46:fc:c4:0d:98:e3:11:e0:cc:bb:2f:5f:f9:fe:
d9:1d:59:1d:15:e6:8a:bf:a8:11:78:ec:fa:84:8d:62:4f:bc:
94:91:d7:88:c4:31:bb:79:26:a1:22:9b:b0:76:67:11:3c:80:
1f:26:df:25:7e:df:fa:bc:7e:e0:eb:37:41:9e:14:a2:37:80:
92:ac:a8:1f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyo9reU0s6P0ayjqJiW0DzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy
YTM0NDMwHhcNMjYwMzAxMTAzNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQwNGVhMzQ1OWY2ZTY4NDA3OWRhYTZiZmQ2ZTUwNDFlZjAyMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0SZZCD3+n0T9qOPFf7pHQZO+Xz9
YbfYxxkzZbadlkJ/sOPFGe1TyHeJm/u2KhXbyBt4hLfkmjbVfpiRh8/0c2uTUixu
YSISQgASm7eMMUX25YCTwWLaxO+KIaE/S5t6+AsqMp4yMtH5fMeh8NvUSQ62iMDp
CVfCu+kdjVMsItrZ+Kaqa2F5m+VcxWM7I1weX3IpWWXTqVUn4pWC4+SbuC7/WaJv
8JhqcV6uGa31pKTrUWt0oYY3/yPYt62jpMUvEgco5czo+kZzhcCNZgNwUpEPtvbX
OtkgQgV85w21MjChv/9KEmKRdd/yWLgkTanm2Alq/kT60+1FRE/IVK8LaQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPXQTqNFn25oQHnapr/W5QQe8CDgMB8GA1UdIwQY
MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt
NmI0ODUyNTcwYjhhLzEvOWRCT28wV2ZibWhBZWRxbXY5YmxCQjd3SU9BLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh
LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMesDANBgkqhkiG
9w0BAQsFAAOCAQEAfOfUh2f0NZRLazWze67WUbZKkDJ6Zera7Zok/8heTAb3Xbw2
z+qWuo27dYJvOZ4bFKqNWGrBMFiVM7l/Okqt8+UcD7EDoJo8juCGC/jQZwEyj0sc
kw46E4hNcnP498lkh9QcTY5ZCo2vtslqGTaU1vyoPx+DBz/b7uS7P+Yg95ld0O7r
mhCPqsqathHczsw7N0lQ5LFVAbPiJiZDaCVxBap5rU9dQKOEMDL/bYK4MC3+Rivt
UV3sfUb8xA2Y4xHgzLsvX/n+2R1ZHRXmir+oEXjs+oSNYk+8lJHXiMQxu3kmoSKb
sHZnETyAHybfJX7f+rx+4Os3QZ4UojeAkqyoHw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:47 2026 by rpki-client