Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/i2SlqMPIJyfm9VqtbHZISusjWDI.asa
File: i2SlqMPIJyfm9VqtbHZISusjWDI.asa (raw, json)
Hash identifier: bWbWJgq6kbHvYrLgmY90WRMk9gjloENGHW5CxftJ1Mk=
Subject key identifier: 8B:64:A5:A8:C3:C8:27:27:E6:F5:5A:AD:6C:76:48:4A:EB:23:58:32
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019E875CCF217250BF5679D990152AE6BEC7
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/i2SlqMPIJyfm9VqtbHZISusjWDI.asa
Signing time: Tue 02 Jun 2026 08:04:27 +0000
ASPA not before: Tue 02 Jun 2026 08:04:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 25192
Providers: AS: 1299
AS: 1853
AS: 6461
AS: 6830
AS: 7521
AS: 8001
AS: 8674
AS: 12570
AS: 16876
AS: 22548
AS: 25248
AS: 27678
AS: 29802
AS: 34867
AS: 37474
AS: 40528
AS: 396356
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:5c:cf:21:72:50:bf:56:79:d9:90:15:2a:e6:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jun 2 08:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b64a5a8c3c82727e6f55aad6c76484aeb235832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:47:e3:71:96:1f:bd:30:35:fc:be:e5:71:
d5:35:12:ec:5e:02:8a:7e:ce:c1:5d:af:d4:5b:e1:
29:92:b6:1a:01:43:c2:22:f3:5d:dd:6a:fb:fc:a3:
a7:eb:cc:ca:77:11:ea:5a:f1:51:5f:70:d3:7a:f3:
c7:ea:6a:2e:c0:4f:40:38:44:b9:bb:32:03:90:9f:
24:dd:e3:fd:18:d5:5d:38:77:ac:96:f4:3f:59:e3:
23:6b:d8:fc:85:fc:b0:65:63:61:68:f5:15:85:cb:
b9:09:72:8c:f9:87:40:14:cd:f5:1b:53:54:3b:34:
8c:4a:c6:fe:a0:a4:96:85:1c:8d:2b:4b:c7:64:7d:
99:0c:00:b4:86:41:1f:c4:2f:a7:92:31:e2:92:8f:
1e:d2:5a:33:c1:8a:55:38:7d:8c:cf:40:ce:23:ec:
f0:6f:74:96:92:6b:3b:d4:b0:35:d0:2d:66:a9:f5:
79:d3:5c:c5:9e:b7:93:94:d7:da:91:fd:f2:6e:b6:
f7:ab:55:51:8d:d1:e2:40:9d:cc:08:89:c7:97:3a:
07:0d:4d:ed:f3:e8:0a:b3:23:f3:aa:b7:da:73:2d:
38:91:6c:d9:ee:2c:d6:28:6d:45:5b:a6:d5:08:18:
c0:30:58:e8:ea:88:29:c7:28:c1:eb:94:85:a9:fb:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:A5:A8:C3:C8:27:27:E6:F5:5A:AD:6C:76:48:4A:EB:23:58:32
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/i2SlqMPIJyfm9VqtbHZISusjWDI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25192
Signature Algorithm: sha256WithRSAEncryption
52:ec:52:22:07:4c:5f:66:83:8c:1c:4c:ed:f7:ec:d5:93:e4:
18:13:ab:bf:eb:cf:a7:5f:b5:c9:c8:4c:eb:98:a5:44:54:94:
d8:94:df:9a:87:9d:12:e5:0a:de:0f:7f:99:3d:38:49:42:6f:
01:9c:14:d7:d9:8d:76:19:50:93:2f:dd:a6:9d:ef:64:35:d9:
50:de:d9:40:49:9c:8b:56:e0:9b:2f:09:10:62:87:5e:7e:1b:
04:b5:86:4a:61:83:35:26:d0:3d:4f:04:58:d4:d9:8d:9d:94:
e5:97:ac:d8:55:04:01:57:a2:af:aa:b1:ce:3e:5f:f6:4c:53:
0b:f0:53:5a:42:9a:87:cc:98:2c:3f:c6:9d:72:5e:23:4f:77:
32:ae:47:93:90:5e:68:53:dd:9f:41:66:59:0d:b5:a6:96:8b:
7f:10:2b:92:6a:25:17:e4:08:c9:fc:cc:9a:be:c3:d3:1d:1a:
97:45:06:e7:88:2a:a6:1b:f8:a1:30:93:27:df:4c:b9:b9:b5:
bf:dd:94:b3:8a:9d:1a:f9:dd:51:bd:06:03:81:47:90:2d:6d:
f8:0d:3a:d5:f6:e8:91:af:6d:63:f6:27:9b:7c:93:0c:19:14:
66:90:76:3d:a7:84:a0:1f:16:0f:eb:3d:7f:ed:f1:b9:80:e3:
53:91:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:39 2026 by rpki-client