Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/t8aFQS7lWhuM_-J21qq8wpHr948.asa
File: t8aFQS7lWhuM_-J21qq8wpHr948.asa (raw, json)
Hash identifier: IcDTJWBpBF8MZ144faOgduVI2vqGFOUYWFm0kF+tK60=
Subject key identifier: B7:C6:85:41:2E:E5:5A:1B:8C:FF:E2:76:D6:AA:BC:C2:91:EB:F7:8F
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 019C7A37A5B3030FB28E10FF7931398FFEA8
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/t8aFQS7lWhuM_-J21qq8wpHr948.asa
Signing time: Fri 20 Feb 2026 08:43:13 +0000
ASPA not before: Fri 20 Feb 2026 08:43:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204104
Providers: AS: 31549
AS: 41881
AS: 42337
AS: 43754
AS: 60248
AS: 62403
AS: 205647
AS: 211421
AS: 211904
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:37:a5:b3:03:0f:b2:8e:10:ff:79:31:39:8f:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Feb 20 08:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7c685412ee55a1b8cffe276d6aabcc291ebf78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:b3:ba:fc:8c:b5:39:06:0a:99:9b:e0:81:
3c:32:26:b3:cc:9c:c6:da:d1:ee:10:16:bd:7b:82:
e1:a1:db:bd:e8:ee:c6:1c:59:0a:50:d0:bd:62:af:
40:bd:73:92:39:80:51:6a:17:bb:1a:b8:d8:54:d7:
86:8b:be:54:d2:ef:ad:4e:ad:05:5a:e6:ff:42:87:
74:a6:9c:39:1d:2b:6a:7d:5d:7b:96:6f:74:c8:51:
a6:85:b1:fb:c1:ac:71:d2:2d:bb:db:e3:5f:4a:ec:
f7:a7:8f:06:ff:63:b2:60:d6:68:af:fc:12:f5:0f:
30:fe:03:84:39:d9:10:9f:16:01:0d:a0:1f:f7:c2:
cb:13:ca:7b:c0:81:5e:b7:86:66:83:ca:90:29:82:
e6:cb:83:e7:b5:88:0a:7e:48:90:c6:8a:dc:3e:f3:
01:f8:6f:04:34:ae:d5:72:50:05:68:21:bb:1a:f7:
24:6f:09:45:09:62:6a:e4:95:40:59:da:f0:dd:b0:
00:9e:66:28:6f:59:9e:8c:d9:2a:f8:0a:6e:c9:39:
21:70:01:3d:c1:4e:39:3e:84:ec:26:d6:a7:fb:80:
13:ff:58:9b:d1:f5:94:39:ea:31:bc:81:3a:f4:a8:
1d:20:b1:dc:01:69:86:d5:8e:88:c0:5f:c9:97:1f:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:85:41:2E:E5:5A:1B:8C:FF:E2:76:D6:AA:BC:C2:91:EB:F7:8F
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/t8aFQS7lWhuM_-J21qq8wpHr948.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204104
Signature Algorithm: sha256WithRSAEncryption
37:45:2b:58:a0:e4:0b:36:d7:63:ca:8b:dd:92:fa:37:82:d2:
1d:33:e4:9f:e1:14:01:71:4c:c3:1d:0a:d0:2c:50:0f:a5:59:
8b:26:d1:dc:ce:36:f5:dc:fd:4b:ae:6e:e9:61:71:8e:82:92:
fd:63:be:17:27:8f:ae:89:52:4b:c9:05:a9:01:b4:66:da:cf:
d9:e7:5f:c8:8c:45:24:a3:93:d1:c9:ba:24:7b:f9:49:b3:71:
73:65:98:48:55:db:41:9e:df:1a:99:ad:e1:4b:b6:d8:f6:7d:
c8:b4:5c:84:58:f2:37:88:ed:a3:0b:e2:b2:89:7f:ac:a6:c4:
eb:16:27:df:ff:6e:3f:5e:c9:0c:87:97:b8:2a:ef:b5:54:79:
8c:3c:4c:4e:ec:66:2a:25:d7:88:e9:7d:c5:41:20:00:97:aa:
47:3f:c7:ab:77:69:4f:8e:24:f5:b9:db:34:05:72:10:12:6a:
69:ad:48:18:3c:c4:31:68:ee:70:0a:b9:05:0b:35:b3:c0:88:
fe:29:b8:bc:97:e9:99:c4:c5:9f:56:17:6f:a9:a4:02:a3:36:
6b:7c:e7:85:0e:37:6e:73:02:2e:33:5d:f5:d8:5a:a2:5a:e5:
06:01:93:63:65:34:96:fb:19:04:42:41:37:b3:f1:47:8b:c0:
83:fa:3f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:44 2026 by rpki-client