Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/Y5kDH2__UHRFbrzchqM-AMJVxow.asa
File: Y5kDH2__UHRFbrzchqM-AMJVxow.asa (raw, json)
Hash identifier: shhzGhzh7x3/mharuzHhNEvGL351L41AsNv8x2VvEZQ=
Subject key identifier: 63:99:03:1F:6F:FF:50:74:45:6E:BC:DC:86:A3:3E:00:C2:55:C6:8C
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 01A034DA2A090511EF50DFE8D0E872AD711C
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/Y5kDH2__UHRFbrzchqM-AMJVxow.asa
Signing time: Mon 24 Aug 2026 17:38:27 +0000
ASPA not before: Mon 24 Aug 2026 17:38:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208940
Providers: AS: 203684
AS: 206388
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:da:2a:09:05:11:ef:50:df:e8:d0:e8:72:ad:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Aug 24 17:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6399031f6fff5074456ebcdc86a33e00c255c68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:4e:e7:92:b1:7c:44:f1:7b:23:d4:fa:15:
21:b3:33:98:eb:31:0b:05:13:01:49:c6:95:82:7c:
fc:f5:b6:2d:54:ae:43:12:ed:6b:c7:2d:0a:e5:f5:
d7:c5:bb:09:d8:a6:d8:1b:31:5e:c1:a1:23:55:b2:
91:72:26:5b:15:0d:00:06:30:92:d9:1c:c2:27:83:
b3:fe:dc:35:d6:4e:b6:6f:de:f1:49:7b:cf:0c:80:
05:b2:ab:d7:b9:61:6c:77:8f:5d:b5:fb:d2:ca:ae:
f3:38:83:b1:0e:b3:6c:39:f5:90:16:4d:60:7d:84:
64:13:d4:d3:bc:72:7b:40:25:62:8b:4a:9b:4b:3b:
48:d0:2b:30:a9:78:75:54:05:77:aa:9e:cd:ff:57:
b8:96:22:da:f4:a8:98:7f:e4:68:e6:ce:26:f5:fe:
6f:9a:91:0f:bd:d7:6a:06:b2:a2:d5:5e:9d:98:b4:
cd:e3:b1:80:35:a6:a9:13:07:ef:5f:d7:c3:f6:9f:
ca:27:dc:f4:84:bd:7a:ab:d7:67:c2:21:7c:67:f5:
ac:2c:86:0a:1e:b0:b1:4a:d2:b1:bd:63:54:44:69:
65:ac:77:34:90:9d:3b:77:e5:b2:e8:95:49:c2:8d:
f8:c7:79:9d:60:e0:c9:5a:54:09:20:d0:02:0d:b3:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:03:1F:6F:FF:50:74:45:6E:BC:DC:86:A3:3E:00:C2:55:C6:8C
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/Y5kDH2__UHRFbrzchqM-AMJVxow.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208940
Signature Algorithm: sha256WithRSAEncryption
8b:3f:c9:f1:fd:32:cf:7a:d2:c5:41:2b:88:92:db:67:f3:84:
1a:cb:c5:8f:21:d1:66:da:eb:2f:7d:95:60:cd:f9:53:78:d2:
b6:f5:81:aa:33:44:c1:dd:c7:a1:cb:fd:52:41:24:9f:74:6a:
bd:2d:5a:a4:09:99:df:25:43:c4:12:5c:ba:37:3b:fb:b8:2a:
69:0f:a6:f0:b7:48:b1:de:ce:ab:69:96:f1:0b:a8:87:3f:56:
e7:e1:28:9c:85:0c:6e:dc:e3:3d:02:61:0d:d9:4b:da:73:61:
f3:c8:c9:2b:57:e9:b1:d3:3c:a4:ae:42:6d:ec:1d:62:26:2f:
d0:d9:09:c6:08:bb:bc:a8:38:98:05:a4:69:51:1d:62:3f:55:
30:ca:cb:ce:db:55:98:33:af:8f:43:55:6f:ce:b9:45:fe:58:
d1:1c:d6:fe:ca:8d:f0:ac:84:55:21:73:56:3c:fa:ba:92:bb:
4f:7d:7e:5e:fb:4e:d0:cf:bb:c6:bc:14:d1:7a:75:0d:e6:25:
fb:7c:67:c5:b9:5e:b1:53:17:8d:d6:de:6e:92:a9:96:5f:46:
76:62:d9:38:ef:86:a1:41:58:97:82:91:7a:4f:99:b4:76:9d:
17:ec:22:5f:44:03:36:c7:a4:9c:ef:40:e5:a7:df:7f:ae:fb:
2f:ea:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:35 2026 by rpki-client