Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/jQpb433w3EOWB9aXUd_c_slO2l8.asa
File: jQpb433w3EOWB9aXUd_c_slO2l8.asa (raw, json)
Hash identifier: /i2kLyt0tP8dxCxVXb11RPbdCXXg7GHwLDlUBgeEQ7U=
Subject key identifier: 8D:0A:5B:E3:7D:F0:DC:43:96:07:D6:97:51:DF:DC:FE:C9:4E:DA:5F
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019C7B566B1F67454E3984EE520B3D375898
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/jQpb433w3EOWB9aXUd_c_slO2l8.asa
Signing time: Fri 20 Feb 2026 13:56:26 +0000
ASPA not before: Fri 20 Feb 2026 13:56:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200070
Providers: AS: 1299
AS: 1853
AS: 6461
AS: 6830
AS: 7521
AS: 8001
AS: 8674
AS: 12570
AS: 16876
AS: 22548
AS: 25248
AS: 27678
AS: 29802
AS: 34867
AS: 37474
AS: 40528
AS: 396356
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:56:6b:1f:67:45:4e:39:84:ee:52:0b:3d:37:58:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Feb 20 13:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d0a5be37df0dc439607d69751dfdcfec94eda5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:6b:9c:68:8d:3f:42:2d:9e:91:0f:11:06:
7a:fc:c7:8e:b0:33:78:6b:39:d6:8a:05:15:20:03:
08:38:4c:e0:04:e0:1f:93:fe:ba:fd:dc:78:01:cf:
dc:7b:ae:a5:21:a2:23:60:f7:37:3b:62:34:63:3f:
df:52:95:12:4e:dd:49:15:ed:50:a9:b5:10:69:9a:
ef:0f:8f:2c:77:50:a6:c4:a1:3c:ba:3f:01:0d:3d:
80:58:34:48:35:21:a4:40:d4:8f:62:26:ff:be:4b:
92:6d:91:be:19:2f:42:55:7b:24:02:f7:94:e7:de:
9c:d0:50:09:56:d9:4a:20:75:e2:2c:50:88:60:11:
de:1e:1c:47:f9:20:68:b4:4f:6a:45:b8:6b:07:44:
3d:5f:65:91:ec:ea:1f:c8:92:78:21:d1:ed:91:fd:
99:97:d6:ae:06:73:aa:d8:2b:38:3b:45:6c:7a:0e:
db:c6:9f:f6:26:8f:4e:24:18:7b:5e:19:15:45:ff:
92:c1:e1:2e:ee:d5:6c:27:24:f0:ce:9b:65:ab:10:
74:39:87:09:a2:32:ef:96:5c:bc:95:ab:d4:4f:e0:
8a:03:82:90:c2:be:24:db:b9:14:9d:a8:c7:14:4c:
24:51:5f:cf:18:30:ce:57:32:f6:61:e1:4e:ea:b0:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:5B:E3:7D:F0:DC:43:96:07:D6:97:51:DF:DC:FE:C9:4E:DA:5F
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/jQpb433w3EOWB9aXUd_c_slO2l8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200070
Signature Algorithm: sha256WithRSAEncryption
87:ac:f7:02:db:d2:bc:5f:f8:fc:89:ab:f1:60:7a:15:8f:fb:
b7:11:f1:81:bc:19:0d:5d:0b:ca:8f:fe:e1:3c:a7:9a:75:3b:
05:59:c7:bc:60:d4:d0:89:2c:24:fc:19:64:a4:a1:70:2c:eb:
85:08:22:04:ad:0a:be:1b:49:29:2e:66:fa:5d:99:11:b5:2d:
99:ea:5e:db:0f:7c:ce:f6:a1:2c:ff:ac:73:d7:07:7a:76:98:
89:2d:75:c3:b4:6a:6d:ba:26:6b:fd:0d:5e:75:1e:70:12:48:
b7:ac:4c:0c:ab:e0:05:8d:1c:37:99:dd:a5:21:0c:26:ed:8a:
3b:ec:af:33:14:72:ec:02:75:c5:9a:1f:11:e0:d3:9e:af:e4:
df:c9:03:1c:61:82:8e:66:38:06:b4:a7:fb:e5:5c:87:f8:e4:
7f:a0:d7:9f:23:32:0a:3e:58:d1:56:b9:a3:72:4f:63:61:e5:
41:16:f4:45:d9:1b:80:db:ee:cc:10:5f:45:c5:9d:93:3e:70:
3c:91:85:a4:47:3b:fe:6c:71:2d:f1:fd:25:56:40:38:7e:01:
47:f1:b0:1b:08:7e:1c:06:e7:ae:4e:03:21:ff:08:b8:be:3a:
b7:67:26:4b:e3:7f:62:ee:e4:f6:e4:00:14:36:ab:ff:45:e6:
04:df:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:50 2026 by rpki-client