Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa
File: OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa (raw, json)
Hash identifier: /xMLfcFjFbPRLVm99YU/umsO3yU76/BqcpAysemzqY8=
Subject key identifier: 38:A0:92:2D:19:A6:B3:15:CB:FB:25:35:B8:76:29:DC:AC:BC:0D:F7
Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial: 019C8EC7392631B65573EF0F8E5832736B0C
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa
Signing time: Tue 24 Feb 2026 08:32:26 +0000
ASPA not before: Tue 24 Feb 2026 08:32:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 15962
Providers: AS: 5511
AS: 5578
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:c7:39:26:31:b6:55:73:ef:0f:8e:58:32:73:6b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
Validity
Not Before: Feb 24 08:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38a0922d19a6b315cbfb2535b87629dcacbc0df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:2d:33:fe:b9:26:0e:ed:46:44:40:24:67:
eb:ab:f5:6d:de:43:88:87:26:78:a0:5a:31:6c:70:
0d:c2:5d:c2:1c:84:63:9d:e0:7e:d6:4b:7f:f8:9b:
b9:b0:65:bb:2b:29:74:c4:c4:7c:b0:7c:f1:78:fd:
46:5b:47:e5:e7:2c:da:48:37:1a:e8:f1:09:37:27:
f6:04:64:50:a7:7b:69:63:91:36:5f:f7:97:dd:68:
d5:6c:00:f2:97:02:23:de:c7:51:b1:a6:d8:6b:f3:
cd:1a:32:70:97:cc:a9:d6:f2:17:c6:c6:7a:62:78:
43:77:99:23:a6:23:78:61:49:fe:8a:9c:ef:99:d4:
b9:89:76:00:e2:9d:43:66:c6:48:87:01:2b:88:0f:
d5:9a:e4:4a:dc:68:ae:47:37:77:6e:73:7b:b1:be:
16:f6:8e:cf:59:c0:f0:00:a0:dd:e7:6c:86:a0:6c:
e3:d9:06:95:15:79:eb:4e:04:df:e9:e6:c7:04:ad:
19:b2:7a:35:9e:24:c9:15:28:96:bb:17:5f:ff:51:
8b:0d:f8:44:e1:cd:7f:d8:5d:a0:35:00:b4:90:92:
24:96:87:a7:72:86:24:6f:40:9c:41:7c:35:0b:d4:
76:0c:61:6b:64:09:36:9c:16:3e:4b:d9:00:4a:d7:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:92:2D:19:A6:B3:15:CB:FB:25:35:B8:76:29:DC:AC:BC:0D:F7
X509v3 Authority Key Identifier:
keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/OKCSLRmmsxXL-yU1uHYp3Ky8Dfc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15962
Signature Algorithm: sha256WithRSAEncryption
68:96:47:2f:7d:c4:47:50:00:f3:ef:34:25:96:b0:6e:90:e6:
b6:b0:4c:a4:36:e0:c0:0f:47:10:fb:53:69:6c:15:82:f1:03:
87:c8:68:47:01:3c:3a:5a:28:74:bb:f4:a3:e3:62:b5:63:3c:
c8:d6:10:62:34:8a:57:92:9e:63:84:9b:71:32:52:e6:9d:31:
d1:2e:0d:a0:4a:81:81:e3:48:e2:40:4e:3d:b3:98:81:72:56:
59:95:4e:23:e0:c9:e5:07:3f:39:b1:9e:17:3e:70:d2:26:88:
a9:06:e7:a6:a5:6d:1d:60:f4:62:20:c6:24:b9:b1:43:2c:cd:
1f:ee:08:49:d2:89:a2:a7:ca:8a:11:84:ea:81:3b:bf:36:25:
4f:ae:1d:6a:af:5c:cb:92:75:6d:ca:f9:c5:61:b9:b3:30:6c:
6e:b8:24:2a:31:80:29:2c:75:ba:ce:77:92:f6:73:96:54:8b:
e4:37:93:1e:55:27:56:8e:43:1f:ba:89:fe:ba:f4:9c:d5:6a:
68:85:71:60:85:68:30:cb:47:ea:80:bc:3d:0e:a8:55:71:64:
74:d1:4f:9b:ce:2c:81:bf:2c:c9:2f:dc:98:3c:30:79:e0:b6:
a0:d6:52:27:e1:73:cb:a1:a3:5c:37:a3:3f:59:f1:bd:e1:55:
bb:42:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:08 2026 by rpki-client