Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/o1qu9kAQGyrDid3Spblf5v3dgGE.asa
File: o1qu9kAQGyrDid3Spblf5v3dgGE.asa (raw, json)
Hash identifier: odg7GwvQ00QWdmBCQg59JuWtE0qJHiHi64Y8KEEj5bE=
Subject key identifier: A3:5A:AE:F6:40:10:1B:2A:C3:89:DD:D2:A5:B9:5F:E6:FD:DD:80:61
Certificate issuer: /CN=a57ba8db5630624c653a2639174b3590ce041406
Certificate serial: 019D495033748085919C3ADD81F41DE9A128
Authority key identifier: A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/o1qu9kAQGyrDid3Spblf5v3dgGE.asa
Signing time: Wed 01 Apr 2026 13:51:25 +0000
ASPA not before: Wed 01 Apr 2026 13:51:25 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212966
Providers: AS: 47447
AS: 200461
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:50:33:74:80:85:91:9c:3a:dd:81:f4:1d:e9:a1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57ba8db5630624c653a2639174b3590ce041406
Validity
Not Before: Apr 1 13:51:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a35aaef640101b2ac389ddd2a5b95fe6fddd8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:d9:be:9b:93:ca:85:b1:ea:b1:45:29:26:
ed:3a:c7:5c:16:85:07:6b:28:a6:25:c8:6b:d5:00:
d7:24:58:f6:85:c2:24:a6:be:be:12:c6:3a:1a:11:
8c:4b:cf:23:0d:8a:71:26:d5:c9:12:c7:37:ad:34:
d6:90:cc:03:2e:c2:21:ad:9a:b6:1a:ad:c6:f7:68:
cf:d5:28:8e:16:88:9d:f9:9d:4a:df:43:82:60:b8:
75:cc:fe:ea:80:02:ce:40:a1:ff:85:90:a5:b2:2e:
3e:fa:ac:cc:41:27:78:b7:83:cb:63:89:f9:23:fb:
b7:f1:94:80:82:9f:7a:b9:30:a5:d1:ae:f6:73:ea:
29:df:70:6e:b6:08:a9:69:32:53:0f:6c:1c:f8:0c:
7a:65:ad:0b:5a:16:47:9a:e4:1c:18:09:79:91:5d:
b7:c6:e1:43:99:49:e5:8d:3e:eb:b7:9d:9b:c9:50:
97:37:da:aa:34:8a:45:3e:c6:23:72:58:25:7e:e8:
aa:e9:10:1a:08:79:6f:7a:ac:3f:63:46:bb:e6:d9:
37:40:45:b5:cd:98:04:58:9a:3f:5c:0a:2b:55:20:
ba:f7:47:de:ba:32:ad:68:fa:98:9c:82:46:11:b4:
54:f4:13:c8:08:f1:28:72:25:0d:2d:3e:f3:e6:42:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:AE:F6:40:10:1B:2A:C3:89:DD:D2:A5:B9:5F:E6:FD:DD:80:61
X509v3 Authority Key Identifier:
keyid:A5:7B:A8:DB:56:30:62:4C:65:3A:26:39:17:4B:35:90:CE:04:14:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXuo21YwYkxlOiY5F0s1kM4EFAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/o1qu9kAQGyrDid3Spblf5v3dgGE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fea1b9-fc1c-4960-b903-e239c9a9f674/1/pXuo21YwYkxlOiY5F0s1kM4EFAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212966
Signature Algorithm: sha256WithRSAEncryption
47:b7:1b:de:65:2a:89:13:94:84:9b:c5:6e:18:1c:c0:cf:fc:
f5:55:c5:a2:fc:e2:37:59:ac:92:f7:09:14:f7:07:fe:36:ae:
0d:3a:36:63:c1:13:d1:60:b4:9c:19:b3:d1:a5:fe:dc:b3:be:
0f:94:21:77:b9:12:5c:ec:12:39:eb:eb:39:d0:74:00:80:99:
9d:1a:27:00:7d:60:13:a3:b3:9c:99:5f:75:87:c6:f3:2f:5d:
e5:e3:fc:74:f7:b0:31:79:59:35:67:c7:ce:36:fd:be:c3:f3:
07:6a:20:5e:ed:19:f0:c9:d7:5f:b1:a6:6b:1a:a4:b5:74:91:
c7:4f:a6:65:10:a3:74:4b:66:90:f8:b2:18:a1:0f:05:ab:ab:
7d:cd:df:6f:fe:bc:33:33:e2:f8:32:65:f8:bd:b0:64:e1:3e:
58:b5:7b:83:fa:a3:fa:fd:85:04:77:a2:8d:bf:25:6f:e7:34:
38:e3:09:3f:48:1d:2b:72:a1:e9:c3:83:42:3b:5b:63:13:d3:
a5:10:6b:03:a5:60:94:4d:85:47:59:91:37:06:87:60:63:40:
d5:6b:41:c3:88:72:ee:f2:cc:6d:8c:ee:53:11:e1:e0:34:53:
14:aa:b2:a1:7b:ff:34:21:71:73:72:c9:c7:32:a8:63:2e:66:
c5:90:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:49 2026 by rpki-client