Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/rxT-eoR75onud9U3--RgqGGLVNo.asa
File: rxT-eoR75onud9U3--RgqGGLVNo.asa (raw, json)
Hash identifier: fP2TlKEDg1oZrwu3TKIn5MO/RcxmBw/JPEOwqIIPtTg=
Subject key identifier: AF:14:FE:7A:84:7B:E6:89:EE:77:D5:37:FB:E4:60:A8:61:8B:54:DA
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019C7C0F5A81EC454CA9F272E320AAE1A914
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/rxT-eoR75onud9U3--RgqGGLVNo.asa
Signing time: Fri 20 Feb 2026 17:18:26 +0000
ASPA not before: Fri 20 Feb 2026 17:18:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212691
Providers: AS: 58299
AS: 209533
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:0f:5a:81:ec:45:4c:a9:f2:72:e3:20:aa:e1:a9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Feb 20 17:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af14fe7a847be689ee77d537fbe460a8618b54da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:b9:f5:a2:8b:5c:97:ca:19:95:80:9b:cb:
17:04:89:81:9f:ad:9b:9a:11:9a:ae:b8:de:d1:7f:
ad:c5:81:c4:96:a4:c0:ab:32:ea:24:31:51:79:65:
3f:5c:b5:ce:fd:55:66:37:f9:2e:b4:4e:0e:68:6d:
5f:07:24:43:40:76:8e:38:27:c4:a2:28:e8:76:3c:
6d:9e:a1:45:59:02:82:3c:90:59:d4:53:33:c3:a7:
b6:9d:d2:52:96:f3:63:76:73:ef:19:00:26:a3:8b:
ec:f1:0b:99:ce:0a:39:8c:79:67:fb:df:72:20:85:
a0:f7:1e:6a:f0:d6:86:e0:1d:9b:b6:75:4c:da:77:
20:c4:05:71:a1:87:3b:cb:a5:0b:3b:08:b9:2e:ab:
f8:9a:02:bf:d7:36:40:cb:44:04:6c:d0:51:ce:34:
0a:24:0e:93:2b:43:ab:5f:6b:92:60:0c:37:20:14:
dc:8e:2f:31:a3:29:5f:c1:2e:5e:aa:28:c1:10:52:
f0:c4:15:a2:9e:50:08:55:99:42:ea:ca:2b:58:e8:
3f:2a:0e:ce:95:58:a0:ab:cf:11:75:dc:45:dc:13:
bc:a9:14:f6:54:5d:b4:d4:05:49:6a:64:17:ca:b0:
f1:f7:6d:bd:9a:24:75:f4:82:b8:f1:f3:0f:26:8c:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:14:FE:7A:84:7B:E6:89:EE:77:D5:37:FB:E4:60:A8:61:8B:54:DA
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/rxT-eoR75onud9U3--RgqGGLVNo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212691
Signature Algorithm: sha256WithRSAEncryption
16:99:35:ae:64:46:4e:bb:d0:a6:07:5b:f4:b7:e3:ae:7a:ba:
2d:e8:6d:e2:f5:f1:bb:b8:65:48:01:81:a0:0c:a8:c5:e0:08:
fa:da:d7:43:90:ef:43:97:d8:f8:7c:44:79:a5:9d:85:39:99:
13:6d:bc:da:84:53:59:77:2d:d1:25:57:b0:34:31:07:bc:61:
00:53:5f:b8:84:ef:ea:6d:8b:03:5e:15:92:f0:80:f5:93:b5:
ef:4c:fe:91:a5:ca:a9:26:7a:7a:6b:de:6b:c0:af:7b:ba:2c:
79:33:2f:10:d1:5b:cb:51:76:f5:e3:e6:26:0d:71:02:3c:1a:
04:03:fb:10:eb:84:90:a9:c9:41:34:64:ef:f3:7a:41:44:da:
bc:e2:6e:de:bc:8b:81:c5:18:9c:d5:5c:0e:52:f2:27:86:ad:
5b:c0:52:bd:a4:74:5d:f0:41:5c:f7:50:af:8e:a5:30:aa:3c:
6f:fc:9f:7c:98:9c:b7:77:f8:91:34:75:9f:11:7f:de:76:4c:
e6:55:5e:67:2b:f5:4c:94:1d:7e:89:fb:58:91:60:a3:fa:ab:
41:84:44:51:1c:11:03:d1:c6:22:c3:6e:69:05:53:05:b6:af:
07:56:d8:db:9a:92:6c:ca:6f:31:29:a3:31:e5:e4:84:15:f5:
2d:ef:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:59 2026 by rpki-client