Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa
File: BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa (raw, json)
Hash identifier: wiV7d2L86p523gY92Ip5gfxBxVerpTdBSH5xKncDAqA=
Subject key identifier: 05:7E:04:08:C6:B9:3D:2C:0C:C4:13:6C:8D:F9:E5:F0:64:57:8F:5B
Certificate issuer: /CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Certificate serial: 019C871B6C1499340A310E10719784CB06C9
Authority key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa
Signing time: Sun 22 Feb 2026 20:47:27 +0000
ASPA not before: Sun 22 Feb 2026 20:47:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 203704
Providers: AS: 4601
AS: 34927
AS: 41051
AS: 52025
AS: 209533
AS: 210312
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:87:1b:6c:14:99:34:0a:31:0e:10:71:97:84:cb:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910
Validity
Not Before: Feb 22 20:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=057e0408c6b93d2c0cc4136c8df9e5f064578f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:2e:69:37:96:79:63:68:a0:5c:6a:9d:28:
0a:ea:05:bd:af:f3:11:4a:94:87:d9:4b:9d:ad:59:
7e:32:e3:40:2a:2d:1d:13:70:2e:e1:fa:73:3f:a5:
cb:43:45:64:63:98:cb:78:cd:9e:7b:9a:c7:7c:2f:
de:5f:af:2b:54:1f:99:ec:21:95:02:d1:13:f2:12:
84:ea:75:ea:98:b6:c0:6a:f9:71:8d:46:58:9c:de:
12:4c:86:d2:70:ca:80:2c:9b:18:7e:d4:62:45:78:
4a:98:4b:91:30:a6:43:cd:38:81:59:b8:ce:52:57:
b3:6e:e8:89:ed:a2:ba:88:56:4c:ca:eb:83:cf:f8:
91:95:e1:53:92:d1:fa:2d:57:40:5d:31:e2:52:fa:
a3:e4:a2:9b:a3:ee:cc:12:42:1c:12:ab:65:d1:44:
d3:e3:54:e8:cc:30:7c:9a:2d:09:fd:17:6d:d3:df:
15:93:30:03:d7:27:af:81:74:5f:98:fc:cd:b3:dd:
c7:ee:d7:12:61:7e:0b:07:aa:dc:4f:31:6c:bf:19:
56:78:d9:5b:74:92:df:65:3c:53:35:50:be:2b:0b:
93:13:9c:9e:cc:89:80:43:c4:df:6f:29:ba:a4:45:
47:7a:8f:59:a2:ce:5f:13:91:f8:fc:c3:c9:e7:55:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7E:04:08:C6:B9:3D:2C:0C:C4:13:6C:8D:F9:E5:F0:64:57:8F:5B
X509v3 Authority Key Identifier:
keyid:DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/BX4ECMa5PSwMxBNsjfnl8GRXj1s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203704
Signature Algorithm: sha256WithRSAEncryption
60:e8:10:94:22:1e:54:33:c6:89:32:19:8f:4a:7f:a7:1f:16:
2b:85:c2:a4:75:1b:6c:4f:80:88:de:75:8b:2d:c2:b1:d3:00:
75:b0:7c:81:7b:49:52:55:5d:db:ac:6c:ae:d9:31:01:85:2e:
b5:07:71:d1:60:ba:88:01:6f:c4:2d:4b:36:a4:ab:91:bd:07:
56:23:1a:e6:c7:c1:e7:68:56:3a:2b:bb:4e:b6:18:d5:68:92:
54:c2:45:89:5d:9d:ef:16:00:0d:ab:fe:28:6f:c3:94:dd:b0:
74:68:3b:c6:69:f6:af:e4:69:1a:73:46:ac:80:49:8b:87:e7:
78:e4:c8:1a:15:09:14:f0:b8:62:87:1f:c8:c4:d6:b4:a9:16:
c1:8f:20:c6:fb:9a:fe:39:9b:3a:aa:41:67:58:4c:f9:56:9b:
eb:be:6a:23:3c:25:5e:d8:96:58:80:34:7e:2a:d4:61:0a:09:
6a:a7:0e:e3:37:28:de:fd:31:20:20:e6:63:9b:f6:b3:19:dd:
f2:63:07:d1:d5:1d:a6:9a:78:6f:6b:42:b0:f5:36:95:7f:34:
60:4a:87:f0:20:72:2b:e3:b0:68:39:16:48:c9:26:40:f0:a4:
b8:3e:3c:2a:f9:88:9d:b8:c2:67:a9:27:3d:16:14:2c:7a:bc:
d1:37:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:23 2026 by rpki-client