Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/96omvjV6JYdBPZlIVSnCjfm_nWI.asa
File: 96omvjV6JYdBPZlIVSnCjfm_nWI.asa (raw, json)
Hash identifier: 76/x4HVgX0yY3hTYmk0/wth2ENsRf9PyXfMTDy9C3Mw=
Subject key identifier: F7:AA:26:BE:35:7A:25:87:41:3D:99:48:55:29:C2:8D:F9:BF:9D:62
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019C7B549633DA98627A05051912D6637314
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/96omvjV6JYdBPZlIVSnCjfm_nWI.asa
Signing time: Fri 20 Feb 2026 13:54:26 +0000
ASPA not before: Fri 20 Feb 2026 13:54:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 25192
Providers: AS: 1299
AS: 1853
AS: 6461
AS: 6830
AS: 7521
AS: 8001
AS: 8674
AS: 12570
AS: 16876
AS: 22548
AS: 25248
AS: 27678
AS: 29802
AS: 34867
AS: 37474
AS: 40528
AS: 396356
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:54:96:33:da:98:62:7a:05:05:19:12:d6:63:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Feb 20 13:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7aa26be357a2587413d99485529c28df9bf9d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:f5:30:af:9c:b8:4b:f0:fe:6f:fd:25:6d:
de:c7:62:04:a3:ae:50:9b:32:bc:b4:3a:f1:46:0a:
a8:b9:db:d4:6a:a3:4b:f3:cb:20:e0:9e:d6:b1:e2:
10:6f:1f:b6:8e:10:52:cd:86:5f:f8:eb:7e:c1:50:
31:de:22:27:98:8a:7c:44:7a:bf:47:6d:b0:36:f6:
a2:bf:16:b5:61:6c:71:96:2f:82:d2:5f:17:4d:9d:
43:82:b6:58:63:86:b0:6d:b7:23:04:51:2c:0b:0a:
e3:fa:8e:6b:82:b4:f5:6b:e7:ac:00:fb:77:1f:64:
d5:55:1f:33:6e:cd:32:05:d5:0a:f8:70:a0:41:ef:
0e:57:21:b5:f5:2c:8f:59:d1:45:0d:8e:64:15:d7:
e8:6b:01:0f:91:92:98:fb:74:0d:c6:ba:fd:b1:ab:
e0:f8:7f:12:db:7b:26:ac:15:5e:45:02:8a:d1:f4:
74:ee:fd:37:b2:c5:27:e4:4c:35:9b:c5:32:5c:e7:
3a:ab:bb:bc:6f:e1:83:eb:96:1e:f4:45:7d:7a:7d:
91:c7:67:4d:5a:18:e1:09:80:de:15:aa:31:a7:69:
f2:72:b0:f3:69:bf:ba:02:d3:85:97:ed:1e:53:cf:
74:28:ff:36:34:48:6d:34:3e:13:6b:e0:09:65:1f:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:26:BE:35:7A:25:87:41:3D:99:48:55:29:C2:8D:F9:BF:9D:62
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/96omvjV6JYdBPZlIVSnCjfm_nWI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25192
Signature Algorithm: sha256WithRSAEncryption
69:0c:57:0f:e8:84:25:7b:59:43:eb:b3:26:bf:1b:0d:23:d6:
0b:12:e5:a2:d3:88:40:9c:dd:6f:f8:4b:2f:0e:cb:a0:e1:3c:
df:70:44:79:8b:c0:f2:09:9f:9f:c9:b0:58:b5:12:3b:00:67:
1d:42:57:85:3f:04:2e:d7:d3:ae:4c:ab:e8:c7:b6:b9:5d:11:
e6:74:cb:54:61:29:4f:8d:c7:87:90:7b:32:e7:b6:31:b5:f1:
e2:9c:4b:ac:29:11:d6:f2:f5:ea:47:8e:b6:20:fe:4a:e3:fa:
66:c7:8d:6f:6a:1c:95:42:0d:78:90:be:7e:c0:13:b1:9c:29:
c4:81:52:73:6a:96:4d:18:1a:2c:b0:32:83:c3:b7:c6:fd:26:
44:66:eb:61:41:bb:02:5b:e0:02:89:9b:53:c0:91:88:f0:0d:
80:3e:1b:a0:f2:6d:26:02:de:e8:e1:59:2a:29:08:6c:48:d2:
01:e8:75:16:84:2f:57:69:5a:cc:36:66:b7:ff:cb:8a:d8:32:
11:97:5e:f0:51:29:59:b4:19:8c:c2:4e:6d:dc:8a:bc:27:3f:
f2:87:7c:15:ed:81:6b:16:ab:c5:86:cf:42:68:05:de:34:7f:
6f:2e:5e:9d:ac:74:c9:bd:f9:d3:22:fb:6e:02:ef:97:01:4e:
10:fc:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:09 2026 by rpki-client