Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa
File: NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa (raw, json)
Hash identifier: Q/BQlYDMNejEhVFqRZbNSInpb1ogvcV67Q6DhAARUbc=
Subject key identifier: 35:03:B1:FF:18:C2:48:2E:5B:93:3A:F4:B7:52:C9:0F:12:6F:26:AD
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019C87542DCD3CB0ED30FFFA7A8A0272930A
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa
Signing time: Sun 22 Feb 2026 21:49:26 +0000
ASPA not before: Sun 22 Feb 2026 21:49:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215004
Providers: AS: 24961
AS: 34872
AS: 41051
AS: 209533
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:87:54:2d:cd:3c:b0:ed:30:ff:fa:7a:8a:02:72:93:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Feb 22 21:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3503b1ff18c2482e5b933af4b752c90f126f26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:39:0d:98:a3:4a:50:6e:82:a2:54:44:5b:
cc:bd:b7:dd:f1:05:dd:72:0b:3f:b1:e8:bd:1a:f6:
a6:82:10:ed:3b:6a:fe:2c:43:18:05:8d:a6:94:85:
73:f3:a8:5e:a2:0f:58:20:a5:c0:04:c0:15:b1:43:
fe:fb:f6:5f:9b:92:a2:c5:34:20:80:c5:25:db:24:
bb:1d:73:75:47:52:60:4d:ae:d8:e4:34:f1:c6:03:
21:99:4e:0d:47:2d:63:43:d6:f9:47:4f:56:8d:12:
c5:f3:f6:5a:50:2d:60:7b:e9:ad:ce:38:fd:05:aa:
02:5f:75:6e:63:96:29:6f:fd:cc:40:3f:10:86:ee:
c0:2d:73:ab:84:8c:64:ad:de:dc:e3:96:6e:1e:13:
05:ab:d2:2c:22:4f:53:a4:7e:2b:a5:e2:1a:ca:51:
ea:85:2d:8c:c8:af:b2:40:44:9a:3a:d9:c4:13:78:
85:50:3d:8b:41:78:50:cd:93:36:55:5e:61:39:fd:
78:05:63:b5:f9:05:91:83:bc:2c:b7:fe:39:6e:75:
5b:05:c5:cd:de:0b:03:71:7e:ef:7c:b8:9a:49:98:
79:d4:bf:66:d8:78:75:94:7a:06:3a:60:6d:d0:ca:
2a:1d:d1:2e:ba:67:12:31:a3:7a:7d:99:83:ed:a5:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:B1:FF:18:C2:48:2E:5B:93:3A:F4:B7:52:C9:0F:12:6F:26:AD
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/NQOx_xjCSC5bkzr0t1LJDxJvJq0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215004
Signature Algorithm: sha256WithRSAEncryption
58:eb:ef:ad:5b:26:9e:1e:b1:8b:3a:b8:72:a7:01:ca:96:ff:
47:75:1b:ad:ba:0f:20:ad:00:fa:f0:6c:86:56:46:c8:46:34:
53:ff:af:0a:13:78:46:cc:27:14:1e:6c:6c:41:71:cc:37:f9:
ca:68:91:08:fa:68:2f:36:a6:3b:a2:11:53:f0:9b:0c:10:56:
d3:fc:81:8f:87:9d:d1:52:8b:7a:c3:2c:3d:cd:cf:0b:35:43:
0f:c7:6a:6f:a1:0c:7a:9e:59:df:fe:fc:ec:70:39:b4:c9:35:
13:04:e7:cb:a4:30:4a:68:e4:c9:f2:cb:97:10:b3:f2:ed:1a:
98:e2:68:88:bd:f0:ea:b4:7f:ca:1b:96:af:10:b4:bf:2f:72:
4a:f3:48:6b:23:21:c4:83:31:1a:59:04:49:24:f0:6f:7f:a7:
6c:4d:b4:41:86:2b:ef:3b:44:1d:e1:de:58:e4:2c:20:01:0e:
97:06:30:59:fd:10:72:68:95:c6:1a:23:7a:bc:41:b5:e7:80:
e6:e9:66:58:c1:5f:d9:db:31:d3:60:76:35:a5:92:78:86:c8:
d8:40:06:b3:98:56:6d:4b:8c:c5:71:15:e2:82:c1:39:ac:7e:
ff:43:a5:9e:f4:56:42:78:de:ae:83:8e:3f:d0:83:aa:1a:0f:
1f:61:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:50 2026 by rpki-client