Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/y3w7IFJm13aGwMFCnd42KoPN8ig.asa
File: y3w7IFJm13aGwMFCnd42KoPN8ig.asa (raw, json)
Hash identifier: oSsnXMHGt6Jala+OG7pBbw/pQpax41sGQUuBNahs8Gc=
Subject key identifier: CB:7C:3B:20:52:66:D7:76:86:C0:C1:42:9D:DE:36:2A:83:CD:F2:28
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 019C90A4376ECE782712A93D5C2B1DA3DA03
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/y3w7IFJm13aGwMFCnd42KoPN8ig.asa
Signing time: Tue 24 Feb 2026 17:13:27 +0000
ASPA not before: Tue 24 Feb 2026 17:13:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 20738
Providers: AS: 214073
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:a4:37:6e:ce:78:27:12:a9:3d:5c:2b:1d:a3:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Feb 24 17:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb7c3b205266d77686c0c1429dde362a83cdf228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:15:51:2c:74:a3:35:0c:ca:58:81:ab:27:
b6:87:a7:9c:da:ff:49:f0:45:1d:b0:0d:2a:fa:a7:
54:62:62:e4:30:f0:7f:31:e6:b4:7b:bb:23:35:65:
2e:ee:99:09:74:0e:11:f5:8f:9f:c6:3b:d8:ed:e6:
7f:e8:cc:07:87:d3:78:23:3a:cd:ce:2b:f2:0f:da:
6a:25:5d:9d:b7:ea:bc:67:eb:67:fc:10:4f:8a:82:
44:59:da:6e:59:29:ee:17:6b:45:94:5b:d5:0e:fc:
3a:75:7a:d8:1b:e9:42:e2:ec:4f:2a:78:3f:12:03:
d6:dc:7a:c8:fc:c1:a6:0d:e1:97:ed:b7:5d:2a:b7:
28:a5:b5:c2:6a:98:d7:b7:f1:7e:d4:b1:af:04:b3:
6b:0d:2b:d8:c8:9a:4f:8d:ee:85:5a:58:8a:b8:2f:
e5:7b:ff:ba:34:97:f2:b0:e6:03:70:3d:ef:b5:ff:
3a:a6:3e:5d:60:e4:9f:d5:a5:ee:43:02:e4:96:bc:
7b:b6:e9:2f:ed:f5:ef:1c:67:28:7a:0c:10:bd:76:
64:41:3c:98:d7:1a:dc:49:df:0a:d0:21:03:e3:90:
d7:5a:4e:7b:a7:3c:62:60:34:01:21:26:fe:ef:fe:
85:12:31:19:89:97:1b:83:31:08:d9:0d:cc:89:57:
c1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:3B:20:52:66:D7:76:86:C0:C1:42:9D:DE:36:2A:83:CD:F2:28
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/y3w7IFJm13aGwMFCnd42KoPN8ig.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20738
Signature Algorithm: sha256WithRSAEncryption
5b:42:a2:b9:7c:6b:16:fe:bc:fd:3b:8c:01:5d:62:6f:7a:ae:
3f:c3:64:d5:57:8e:f3:b1:88:70:62:00:7d:ac:ac:5e:a5:9f:
79:c4:62:9f:94:62:a3:31:2f:90:31:9b:eb:de:be:a9:f7:36:
a2:b6:64:7a:5d:3b:98:c2:8d:e0:04:68:b8:41:80:c5:dc:bb:
b7:af:0f:9c:a3:2e:2d:76:3e:3a:3a:84:fd:eb:1a:ad:d5:85:
6d:73:4b:ea:ea:53:a0:71:0f:48:19:ad:86:7e:f7:d8:46:8b:
28:21:5d:04:84:a8:4a:df:11:fe:92:d5:07:a0:7e:1c:14:a8:
75:89:11:2c:a5:df:2f:c1:b2:90:68:42:ce:05:bb:15:0c:e1:
d5:1d:e5:6d:b8:cc:80:05:60:d7:e2:29:18:f9:43:52:09:c5:
f8:12:0b:7a:fb:f8:24:78:e7:27:a3:17:6d:04:ad:3d:55:04:
bc:8b:e9:25:7f:f2:36:1c:5c:70:fd:d1:a3:96:bd:90:81:51:
da:74:d4:4d:6b:8a:6d:7e:21:c1:8c:24:8d:eb:47:07:dd:39:
b1:85:a3:be:35:b5:f2:1b:70:9e:06:36:e0:65:0d:db:87:9e:
31:e5:ff:55:50:d3:82:b7:63:29:97:77:a8:86:13:c0:c6:b9:
f7:15:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:58 2026 by rpki-client