Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/NXxqC7ZgztzVzcexbun7_Lf1ORI.asa
File: NXxqC7ZgztzVzcexbun7_Lf1ORI.asa (raw, json)
Hash identifier: hDWGAaxWxsEMgjQ3LkLeP6k+P9+38fD0qphy6cwfTe4=
Subject key identifier: 35:7C:6A:0B:B6:60:CE:DC:D5:CD:C7:B1:6E:E9:FB:FC:B7:F5:39:12
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019EA06D7BA0FD1C8CDA16B0BDF805950792
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/NXxqC7ZgztzVzcexbun7_Lf1ORI.asa
Signing time: Sun 07 Jun 2026 04:53:09 +0000
ASPA not before: Sun 07 Jun 2026 04:53:09 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200325
Providers: AS: 174
AS: 3491
AS: 4229
AS: 7195
AS: 8849
AS: 9009
AS: 12186
AS: 18450
AS: 20326
AS: 20473
AS: 21859
AS: 36236
AS: 40994
AS: 49544
AS: 51095
AS: 56630
AS: 60068
AS: 61317
AS: 62563
AS: 63023
AS: 136557
AS: 137409
AS: 199524
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:6d:7b:a0:fd:1c:8c:da:16:b0:bd:f8:05:95:07:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jun 7 04:53:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=357c6a0bb660cedcd5cdc7b16ee9fbfcb7f53912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:97:73:56:05:72:d3:59:68:4e:4c:d6:f5:
47:96:9c:ea:f7:dc:62:5a:68:4d:c6:29:e6:e0:be:
b9:a9:4f:18:02:2f:12:af:15:7f:9a:82:24:86:68:
c9:3b:4a:31:63:fb:11:65:e3:8c:20:29:8f:0a:4f:
32:e0:72:ca:42:3c:c1:85:40:bb:bf:fe:46:86:13:
81:54:90:cb:26:5d:15:1c:8c:c6:54:5a:80:48:a1:
58:78:be:67:26:d8:3a:9d:d4:b9:88:9d:64:7d:1f:
47:76:20:c0:f7:37:10:42:6a:ef:72:ac:00:6b:77:
d3:1a:66:52:c3:03:f6:ff:70:4f:5b:d0:a6:b0:f4:
15:53:ae:c3:7b:1f:ea:0b:f3:02:1f:5c:93:4c:d0:
9b:e2:67:55:e1:be:70:62:56:25:84:66:d4:59:ff:
2f:de:a7:45:20:e4:51:a6:d6:a7:69:3b:96:72:06:
30:fa:4b:d7:df:a7:07:ce:6b:e2:30:c5:fc:c6:1a:
92:f6:25:59:25:50:c7:5d:3b:40:f9:9a:ba:ae:37:
56:99:64:13:2e:4c:28:9c:d8:5a:dc:34:d1:3b:ef:
49:d0:34:c0:04:f5:01:ae:de:48:a0:28:48:ce:1d:
4d:6c:ee:61:18:46:e4:b5:db:88:1a:c8:66:bc:0c:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7C:6A:0B:B6:60:CE:DC:D5:CD:C7:B1:6E:E9:FB:FC:B7:F5:39:12
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/NXxqC7ZgztzVzcexbun7_Lf1ORI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200325
Signature Algorithm: sha256WithRSAEncryption
53:4c:84:9c:14:85:ae:2a:11:3d:31:be:ca:d3:a3:07:3b:66:
8e:dd:a6:19:be:b1:57:fc:28:71:e2:6f:7f:7d:6f:46:92:c6:
d2:b4:81:9f:1b:88:96:76:9e:17:a9:ae:52:21:c5:a9:ba:d2:
24:64:b6:4f:34:dd:52:c2:b9:9a:dc:95:07:58:e4:c1:a8:ce:
9c:f7:3f:f8:62:df:d7:ef:7f:e6:b8:7c:03:5f:db:4a:3f:96:
1d:c0:95:93:7c:36:fd:99:c1:63:f7:a2:63:9b:fe:d3:6b:c1:
f2:d8:ca:a5:c7:0c:a8:00:22:8e:79:d2:c7:75:25:b2:d2:e3:
29:ea:05:d4:e8:22:b7:14:57:34:55:77:c6:31:6a:da:22:a4:
62:82:2d:02:d4:d1:e5:e0:3a:79:00:95:b5:42:e0:c9:6a:5b:
91:db:03:54:e9:a5:54:e8:a2:0d:61:06:e6:1f:3a:4f:0e:e8:
83:39:8f:ab:e0:d1:30:80:3a:57:84:9d:4e:21:f5:bd:5a:a3:
8e:aa:a9:01:7e:56:84:ec:00:19:8f:b0:53:62:22:27:74:1c:
f0:3a:0f:70:06:38:df:e4:4e:c8:fd:b8:ed:68:3e:5a:f5:06:
e7:89:37:6c:19:7c:af:e2:12:91:fa:6c:c4:3d:d7:0e:b7:ee:
d5:a8:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:39 2026 by rpki-client