Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/7-dKMxr-QmXUlbkg1afMtX6sKE4.asa
File: 7-dKMxr-QmXUlbkg1afMtX6sKE4.asa (raw, json)
Hash identifier: UzAeb5Ceo8+VLW1IRrYNLAEzzNGnDc8WQw44mvqtVuw=
Subject key identifier: EF:E7:4A:33:1A:FE:42:65:D4:95:B9:20:D5:A7:CC:B5:7E:AC:28:4E
Certificate issuer: /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial: 019D943F284EC7E6321396EB880CDDE6E644
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/7-dKMxr-QmXUlbkg1afMtX6sKE4.asa
Signing time: Thu 16 Apr 2026 03:04:20 +0000
ASPA not before: Thu 16 Apr 2026 03:04:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 207616
Providers: AS: 835
AS: 49581
AS: 53667
AS: 136510
AS: 213438
AS: 214668
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:3f:28:4e:c7:e6:32:13:96:eb:88:0c:dd:e6:e6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Validity
Not Before: Apr 16 03:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efe74a331afe4265d495b920d5a7ccb57eac284e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:25:3f:ef:4c:c6:4b:37:66:b9:ab:fb:1f:
c2:1f:9f:18:f4:bd:ed:8d:cf:8d:4c:2f:01:2d:0b:
31:3f:65:be:33:1f:3a:59:c1:7d:5a:53:a5:12:ba:
b0:30:a9:3d:84:61:0f:3c:06:44:fa:90:20:c7:5b:
54:ca:ec:c2:d1:bb:ec:2d:19:f6:77:57:d3:c6:b9:
b3:23:44:14:29:6b:28:bd:f1:4b:47:40:d2:c6:7a:
ff:81:e5:09:6c:68:a2:14:e6:5a:2f:fb:c3:e0:6c:
6c:a8:11:be:05:e4:72:0e:44:54:ed:e5:ec:cc:07:
1e:14:c0:d7:20:8f:64:df:f1:19:5f:1d:9c:cf:33:
c0:43:02:b6:3b:4f:d4:64:be:84:63:9a:14:32:4c:
90:79:5c:2d:38:3f:2f:c0:9c:7e:26:d1:4c:51:18:
c0:35:78:06:c0:5b:17:77:ce:29:38:83:13:af:89:
66:0e:fe:27:48:f9:d9:36:92:6b:30:78:fc:f4:ba:
e5:97:01:aa:cc:95:de:5f:a2:73:cb:91:70:eb:2d:
d6:03:62:57:b6:01:09:8c:76:7c:fc:15:81:08:93:
ef:da:24:df:aa:2f:cd:b2:83:71:c4:3e:0c:43:e1:
9b:e7:8d:e5:07:39:20:23:43:17:73:1a:91:56:14:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:4A:33:1A:FE:42:65:D4:95:B9:20:D5:A7:CC:B5:7E:AC:28:4E
X509v3 Authority Key Identifier:
keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/7-dKMxr-QmXUlbkg1afMtX6sKE4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207616
Signature Algorithm: sha256WithRSAEncryption
a6:6f:a4:08:44:88:4b:6b:e2:7d:89:70:26:0b:c8:53:e0:69:
b2:e3:20:4e:35:c0:94:20:fe:9a:31:b0:25:6a:48:93:b4:ba:
30:ad:ac:86:eb:22:1e:81:ba:4d:7d:af:2b:ec:5c:07:74:1b:
2b:55:d7:22:df:53:0d:8a:b3:e6:5c:39:fc:21:71:62:8b:c0:
c1:f3:ef:af:c0:7e:e3:94:66:08:00:0c:0a:97:9d:74:28:58:
ec:32:b0:0b:3b:e4:92:29:d7:f3:54:34:94:46:f6:61:bf:91:
a5:27:9b:43:0f:d8:b9:30:a8:f1:16:ff:de:ac:61:81:dd:2e:
20:18:04:54:df:dd:75:9e:37:93:db:4d:81:8d:87:cb:84:7a:
fe:bd:0b:ce:6e:54:73:ee:41:44:b0:d6:1c:7f:09:7f:7d:04:
7a:91:23:1c:bf:c9:54:9b:df:b5:b0:b7:ce:01:1d:a9:14:dc:
c8:2e:3e:94:fb:57:3c:55:f0:8d:6d:76:03:7b:eb:89:2a:47:
5b:ef:43:8b:57:46:5e:c0:a9:b4:dc:75:8a:03:36:d5:81:26:
7a:90:5e:ae:7e:ab:35:be:c5:74:a3:6d:fd:e9:c3:e7:2d:9a:
ac:55:fa:63:c7:b7:96:b9:a7:2d:de:1b:57:64:25:fc:17:14:
6a:02:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:18 2026 by rpki-client