Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa
File: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (raw, json)
Hash identifier: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=
Subject key identifier: 12:CD:19:D6:35:9D:FA:49:21:62:43:8F:D4:6B:47:87:E9:47:A6:10
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019C489A8891F0447AA002DB1672479F4532
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa
Signing time: Tue 10 Feb 2026 17:30:12 +0000
ASPA not before: Tue 10 Feb 2026 17:30:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 31130
Providers: AS: 48014
AS: 49581
AS: 58212
AS: 60068
AS: 61272
AS: 197071
AS: 201814
AS: 213250
AS: 213683
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:9a:88:91:f0:44:7a:a0:02:db:16:72:47:9f:45:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Feb 10 17:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12cd19d6359dfa492162438fd46b4787e947a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:6c:1e:f9:ab:80:c3:6a:06:4f:b7:7e:06:
aa:10:4f:6e:ce:5f:98:0a:0a:31:7c:24:4e:fd:22:
89:ae:b3:bd:f6:1e:44:f8:49:62:db:9b:16:40:2e:
14:f0:4b:97:03:18:dc:8d:25:16:e7:a1:ad:81:98:
fb:71:39:fd:b8:34:2e:aa:7f:72:ac:01:4e:71:6c:
09:33:c5:ca:db:20:74:48:46:fa:c2:91:d0:d2:5a:
de:1f:a8:bc:bb:d1:79:45:29:17:34:ff:53:48:63:
91:12:30:c3:e1:c4:cb:bc:36:e8:ff:89:83:7d:57:
e3:00:ab:15:d0:3f:d3:a8:e3:b6:f9:99:9d:9c:31:
d6:b9:ff:28:85:8c:9c:b5:82:b1:f0:67:db:61:a3:
d2:9a:67:95:48:55:02:c4:a5:22:b5:42:24:3b:e6:
26:b9:25:75:b5:ec:fe:08:59:9b:b7:5b:79:be:86:
85:88:ee:2f:69:74:3a:9d:dc:31:d8:7c:f7:c4:b6:
b4:7d:81:5f:a7:5c:fb:83:32:da:60:1c:48:16:1a:
a0:ba:62:85:22:7b:50:9e:23:73:70:3f:87:35:87:
a4:84:8e:90:56:b5:76:3d:dd:1d:3c:52:45:fc:05:
8b:59:36:f3:dd:e5:64:78:d6:fb:d2:ea:96:0a:7f:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CD:19:D6:35:9D:FA:49:21:62:43:8F:D4:6B:47:87:E9:47:A6:10
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31130
Signature Algorithm: sha256WithRSAEncryption
0c:48:41:e9:09:92:6f:84:ac:90:32:8a:b0:80:2e:f5:b5:b7:
51:37:1e:e7:e3:e6:0f:65:e7:5b:4d:93:c7:f8:00:69:e8:73:
43:84:c3:99:ef:7c:ea:94:13:36:a0:a5:22:1d:37:43:86:6e:
11:d6:30:90:8e:b9:b4:57:6f:79:8b:3a:08:ba:b5:42:4d:49:
91:aa:9f:48:22:49:22:81:96:d4:7b:16:6e:bc:0a:b6:7b:a0:
77:db:30:29:35:e3:09:f2:e5:5a:bc:a4:3d:8b:5b:2f:9d:33:
09:5d:22:c9:3e:85:97:ee:6e:22:67:a0:2c:96:8b:6b:a8:f1:
e3:60:f5:ca:cd:ee:bb:5e:60:d9:5d:d2:53:d6:2d:be:e0:ff:
cf:d6:91:0b:4b:a4:a2:bd:ff:ca:e0:dd:47:1e:fc:ee:dc:f2:
dd:19:0a:47:ef:3f:7b:9a:f9:1c:c5:49:c4:ac:1e:c2:f9:56:
97:bb:7d:34:86:18:52:87:61:13:0b:21:05:8f:d4:56:71:a4:
f5:06:4c:f1:51:17:1e:fe:7d:75:57:9e:e3:c0:b4:a6:ff:38:
0b:ff:85:41:ca:e6:e9:3f:2e:77:f6:d5:72:d7:46:4a:3d:48:
f7:c1:90:40:b0:4d:13:57:78:98:a6:09:ba:41:38:e2:17:6c:
5f:99:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:00 2026 by rpki-client