Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/GB3NFSp5PGT_22uM3aHhVVz0NOI.asa
File: GB3NFSp5PGT_22uM3aHhVVz0NOI.asa (raw, json)
Hash identifier: riAwsj8thI/YEdA1IIz5l7mENZ2/CQiAFbdBtgwfc6s=
Subject key identifier: 18:1D:CD:15:2A:79:3C:64:FF:DB:6B:8C:DD:A1:E1:55:5C:F4:34:E2
Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial: 019C4C6FFAA4B2F55E1DCBAC3773105ADD45
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/GB3NFSp5PGT_22uM3aHhVVz0NOI.asa
Signing time: Wed 11 Feb 2026 11:22:12 +0000
ASPA not before: Wed 11 Feb 2026 11:22:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 49714
Providers: AS: 9002
AS: 61407
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:6f:fa:a4:b2:f5:5e:1d:cb:ac:37:73:10:5a:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
Validity
Not Before: Feb 11 11:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=181dcd152a793c64ffdb6b8cdda1e1555cf434e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:20:53:31:47:8d:01:e7:0e:a6:75:2a:87:
76:95:df:34:f5:c0:e1:44:95:72:28:38:0e:d7:07:
23:8b:88:4f:83:b7:d8:46:03:e6:b4:f2:ad:7d:5b:
eb:c3:e5:4e:00:8e:f4:4b:4f:64:13:25:ae:1e:02:
37:71:e6:3f:f4:07:b2:8f:9c:c5:c1:07:0a:9e:c0:
14:d8:74:4e:42:3b:26:a1:f1:be:73:9e:7f:fd:a7:
c0:ee:f5:0d:c3:b1:7c:fc:2e:78:e6:c7:94:16:23:
5e:3a:d1:c6:18:f3:16:23:f2:f1:21:69:62:c2:c3:
53:7a:a9:a6:6c:eb:ba:58:a7:8a:40:bd:23:10:1d:
79:80:36:bc:4f:bc:c1:1e:8b:77:55:bc:29:0f:25:
c1:f6:54:75:74:5c:2b:4f:0e:84:99:9c:38:22:8b:
c5:36:00:7f:65:99:cc:6e:69:d1:32:79:21:52:74:
f1:48:20:62:c9:7f:16:0a:a0:04:35:d9:ab:8c:54:
9a:1a:9f:45:38:7b:c1:a0:18:48:65:f3:e3:da:d3:
93:a3:a3:ad:db:00:b7:aa:a1:bc:92:c2:6c:da:65:
46:0e:6f:fa:13:36:85:47:d5:aa:19:db:cf:db:ac:
04:21:0a:6d:1c:50:fa:f2:01:f6:ee:41:05:74:4d:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:CD:15:2A:79:3C:64:FF:DB:6B:8C:DD:A1:E1:55:5C:F4:34:E2
X509v3 Authority Key Identifier:
keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/GB3NFSp5PGT_22uM3aHhVVz0NOI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49714
Signature Algorithm: sha256WithRSAEncryption
01:10:80:e7:3d:97:0e:f0:c2:88:e6:b6:11:1a:ad:85:79:37:
7d:cb:e6:bd:64:de:52:24:63:a7:3a:b1:75:07:04:85:4d:a1:
d9:43:f6:d0:34:04:fb:84:e6:18:90:28:66:e1:da:62:05:d7:
c5:5a:b4:5f:07:2a:b6:e9:df:1e:71:de:c9:e6:fe:52:61:61:
96:9b:73:34:78:63:1c:5f:58:81:97:bd:18:d5:8b:a6:79:57:
ee:44:2c:b1:4f:e0:e6:5a:83:b8:8e:60:50:91:c7:f2:ab:dc:
8e:56:d2:91:85:e8:a8:84:71:cc:77:cf:1d:85:42:ae:fc:bc:
e5:80:a3:76:ac:dd:8d:0a:22:f0:5f:3e:f4:2f:70:42:d7:4d:
31:ea:46:9b:64:7b:a5:11:20:fc:94:14:70:9e:bd:4f:e4:47:
05:76:72:aa:52:62:9c:ef:9d:50:02:e6:c5:1a:bb:be:70:ba:
03:3d:dd:f7:3f:75:62:aa:02:80:88:3a:63:3d:df:45:3d:16:
13:93:e6:53:e6:56:82:cd:8f:61:a5:9f:b9:91:ba:ee:51:ab:
58:b3:4c:76:f7:25:82:74:57:ab:d0:f7:57:e9:b2:8f:83:ba:
ef:cc:6b:ff:73:8d:c6:49:ac:ce:7d:39:ef:e1:44:98:5b:fa:
61:2e:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:01 2026 by rpki-client