Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/Iz8b3PrjabpBHcwWEQbWKhXkfHo.asa
File: Iz8b3PrjabpBHcwWEQbWKhXkfHo.asa (raw, json)
Hash identifier: xGEPwFDYxWFx/nhH+banTs8anVjbxYCKKFDmVtTVxqo=
Subject key identifier: 23:3F:1B:DC:FA:E3:69:BA:41:1D:CC:16:11:06:D6:2A:15:E4:7C:7A
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 01A0B64149838DA7F6E7547C3F81C5E775D2
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/Iz8b3PrjabpBHcwWEQbWKhXkfHo.asa
Signing time: Fri 18 Sep 2026 20:42:07 +0000
ASPA not before: Fri 18 Sep 2026 20:42:07 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 210173
Providers: AS: 20473
AS: 21700
AS: 209533
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:41:49:83:8d:a7:f6:e7:54:7c:3f:81:c5:e7:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Sep 18 20:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=233f1bdcfae369ba411dcc161106d62a15e47c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:06:a1:ea:c2:43:5c:fd:0b:69:2a:7a:33:
12:e0:40:61:46:49:4e:94:ac:4f:e5:4b:d7:c8:26:
5d:35:82:cb:3e:92:02:ad:eb:9d:de:ac:33:d2:93:
0a:ca:03:5f:85:43:fd:c0:39:13:fe:54:fc:72:05:
a2:9c:54:42:67:1a:7b:cb:72:5c:12:ae:da:6f:de:
11:7d:91:a8:0a:c1:92:02:ba:2f:98:33:42:5f:4c:
3f:38:0c:a4:39:ec:ac:a7:f2:fc:19:0c:a1:bf:fa:
59:7c:b4:82:cc:ca:02:6d:80:5b:b5:e5:73:a6:7d:
34:cc:66:4f:1f:b8:8a:b4:40:3e:27:9f:05:f2:df:
9a:8a:5c:e7:f9:f2:73:ac:bc:f2:53:14:bd:de:73:
7b:b5:fd:32:52:21:bf:64:f5:4a:c6:f2:74:82:19:
7f:b5:13:dd:2c:ca:9b:65:1b:69:df:a6:d1:28:66:
28:f6:78:9f:00:88:67:b4:1c:16:50:10:07:e7:0d:
50:1d:7e:2a:09:87:b4:3b:d3:dd:85:32:8f:1d:be:
9f:21:a3:9f:1d:00:f0:48:81:9f:ee:7f:d8:a7:f7:
90:0c:53:45:30:10:6c:eb:a8:b5:04:fc:fb:b8:41:
1e:16:2f:ad:90:2f:df:0e:7c:8a:2e:9e:18:e6:66:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:1B:DC:FA:E3:69:BA:41:1D:CC:16:11:06:D6:2A:15:E4:7C:7A
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/Iz8b3PrjabpBHcwWEQbWKhXkfHo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210173
Signature Algorithm: sha256WithRSAEncryption
28:bc:03:47:96:63:02:8e:ca:0d:25:95:60:20:1e:4c:07:ec:
f6:81:4c:68:7c:b0:15:4c:e7:3e:e3:8a:eb:14:cc:2b:14:2d:
af:32:50:d5:a4:19:95:2b:0d:f2:f7:8c:2e:91:49:22:55:be:
a6:aa:d1:d4:de:71:b2:0c:15:75:b9:66:11:70:06:d8:90:ae:
0c:4b:05:bf:50:f2:fd:1a:6c:7a:fd:2a:f8:48:a8:ed:fb:cf:
d8:d2:6c:cb:d3:41:4f:15:00:d4:7f:a9:12:5a:ed:d0:5d:8f:
e7:04:63:c2:33:5d:31:98:b9:f8:40:cf:1b:27:5d:12:c4:56:
3f:61:78:56:35:71:81:6b:9a:7e:2b:5e:82:8f:5a:41:09:12:
2b:fe:a0:ce:d0:3e:23:3f:0c:15:bc:52:93:77:ed:9c:bc:2d:
2a:64:3e:d1:73:e6:2a:63:b3:bc:69:99:25:0e:f4:16:61:46:
f4:10:c1:ea:f7:cb:4b:fc:0e:6f:e3:1d:54:c6:4d:8c:b0:5b:
2f:b4:06:67:16:73:0f:ca:60:64:8c:f0:ce:ef:32:2b:f9:0a:
ff:3b:d0:0c:27:1c:75:a6:e2:7c:06:e5:85:f6:b4:7b:80:eb:
0b:b2:df:7a:22:fd:b0:ed:b0:bf:4e:11:19:c6:e0:58:c9:85:
d1:d3:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:45 2026 by rpki-client