Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/KhIoMx1vTXFSa2EQxuKI0e05k1w.asa
File: KhIoMx1vTXFSa2EQxuKI0e05k1w.asa (raw, json)
Hash identifier: r0AqxWEUC4nAWgd0bAcNMu3XYp+oqJ8F1w2X4uQFcss=
Subject key identifier: 2A:12:28:33:1D:6F:4D:71:52:6B:61:10:C6:E2:88:D1:ED:39:93:5C
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 019FA84B7D91A30C4273B56A10ED397F3861
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/KhIoMx1vTXFSa2EQxuKI0e05k1w.asa
Signing time: Tue 28 Jul 2026 10:35:47 +0000
ASPA not before: Tue 28 Jul 2026 10:35:47 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213641
Providers: AS: 6461
AS: 6939
AS: 8893
AS: 11967
AS: 34927
AS: 52025
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:4b:7d:91:a3:0c:42:73:b5:6a:10:ed:39:7f:38:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Jul 28 10:35:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a1228331d6f4d71526b6110c6e288d1ed39935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:88:af:40:b4:64:9d:83:fc:4b:0b:aa:62:
95:03:b7:e9:45:ad:aa:76:93:9e:64:d8:8d:29:b7:
45:0d:0b:83:18:b9:a4:2e:0c:0b:26:e0:37:73:ae:
ec:23:2c:90:4a:95:71:80:ae:d9:5e:80:2a:e5:e4:
26:9a:0b:b2:1f:1a:d0:5f:66:0f:df:36:cc:c0:a4:
a8:42:46:e5:71:3d:16:a0:87:01:89:7c:e4:03:20:
5b:bc:c2:1e:b9:27:3c:21:bc:ae:69:00:45:d3:05:
22:45:09:b3:59:b9:48:a9:ca:24:73:22:12:63:3b:
8a:15:a0:e9:74:fd:cb:35:f9:36:84:a6:4e:bd:67:
c9:1d:d5:ff:0b:52:3b:30:fe:d5:7a:76:47:a8:93:
2e:35:81:3f:10:dc:d7:06:cb:b8:d3:69:65:32:23:
68:25:db:02:a0:bf:68:c3:6d:5d:c1:f3:05:63:20:
11:93:29:41:0d:e2:e8:38:54:ea:74:f9:e5:be:ad:
cd:f1:28:19:d4:63:dc:51:41:79:9c:d3:d7:43:95:
7f:3b:b9:25:59:ff:68:76:a5:d3:50:05:3e:85:92:
56:d1:86:bb:d5:6f:7f:41:24:54:3b:d2:f9:77:bc:
b6:c9:cb:0d:52:fb:b3:f0:35:2b:ed:2e:a4:be:61:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:28:33:1D:6F:4D:71:52:6B:61:10:C6:E2:88:D1:ED:39:93:5C
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/KhIoMx1vTXFSa2EQxuKI0e05k1w.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213641
Signature Algorithm: sha256WithRSAEncryption
31:75:05:41:0a:b6:7b:67:61:f6:96:2d:c1:2b:61:1d:08:02:
fe:1b:9d:e6:f1:d7:dd:7b:0d:1e:ac:f5:41:fb:4b:da:c1:55:
31:73:05:2b:6b:96:16:18:f8:6b:5c:4b:fe:45:66:cb:26:5d:
47:1a:21:13:9a:bf:8d:ef:ff:be:4c:f1:18:97:f9:1e:e4:8d:
b9:17:08:c6:87:d5:d6:de:d4:c6:e1:ba:7e:39:95:32:05:57:
0e:27:f7:54:ea:31:8a:28:8f:fa:55:4c:22:7d:57:b3:3e:12:
76:c9:22:69:f6:5a:16:3f:af:68:6c:09:26:64:f2:d8:f6:8d:
4a:56:66:52:32:2d:e2:44:23:a5:5b:22:46:3e:62:95:cb:8b:
02:ef:61:d9:eb:70:e0:23:dc:aa:bb:e3:c9:18:61:26:33:9e:
a8:e9:17:ef:ca:ed:49:1c:a4:1e:48:50:26:39:1e:d9:dc:47:
56:79:bb:1b:8a:bc:eb:76:17:85:92:2c:3c:81:9d:94:28:6c:
4c:cf:4d:6c:68:11:44:f7:f3:05:3c:54:55:6b:69:84:80:59:
4b:2b:30:4b:81:2c:28:80:a2:2d:38:da:cd:8d:0f:9e:22:48:
79:f8:12:7d:c3:5a:ac:18:87:f7:20:51:4d:45:5a:da:c5:75:
cf:02:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:50:46 2026 by rpki-client