Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/nkmX4dnhq0haH7w-EQ-8AZXl9C0.asa
File: nkmX4dnhq0haH7w-EQ-8AZXl9C0.asa (raw, json)
Hash identifier: cPe2C7iQQrkCBE7f1csKKk2nKejgvpQ7QC9Rodszwfg=
Subject key identifier: 9E:49:97:E1:D9:E1:AB:48:5A:1F:BC:3E:11:0F:BC:01:95:E5:F4:2D
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019C8E47F6F5861575DC6F0603FC9119CF8D
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/nkmX4dnhq0haH7w-EQ-8AZXl9C0.asa
Signing time: Tue 24 Feb 2026 06:13:26 +0000
ASPA not before: Tue 24 Feb 2026 06:13:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202986
Providers: AS: 20473
AS: 52025
AS: 56655
AS: 61138
AS: 152900
AS: 200461
AS: 208226
AS: 215467
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:47:f6:f5:86:15:75:dc:6f:06:03:fc:91:19:cf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Feb 24 06:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e4997e1d9e1ab485a1fbc3e110fbc0195e5f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:3d:7b:b7:c8:87:4f:8d:22:96:e2:92:79:
ba:8c:82:a5:c5:44:e2:6a:b0:fb:f6:38:26:8f:76:
52:cb:4c:13:97:be:49:bd:75:d9:83:7e:cc:bc:71:
a0:f0:84:77:a9:c7:48:da:6e:2a:93:14:c0:46:3b:
6c:4c:b8:e5:30:b1:6c:a1:5c:2f:1d:f6:6d:df:ab:
f3:e4:33:6a:b9:9a:55:65:b8:24:c6:fc:9d:9f:0b:
34:7e:4e:76:43:62:fb:91:0f:d5:25:6d:0f:14:46:
2b:4d:89:44:9d:be:85:74:28:97:f4:fb:de:0d:ad:
3b:b0:e0:4a:35:3c:fa:c6:9e:0e:dd:c0:a7:ce:66:
e1:73:3b:26:9e:b9:35:fb:ef:bf:eb:3e:33:01:31:
9f:e7:24:92:02:53:0a:72:16:3e:58:fd:77:e6:ba:
0b:69:ab:31:f1:2d:e6:87:c5:28:3d:e4:84:5d:fc:
78:17:cb:84:07:12:62:98:2a:a8:32:e0:6e:d8:b0:
e6:27:96:92:0b:9d:cb:21:21:e8:fd:f4:e2:b9:ea:
36:77:6e:da:8d:0a:a7:ac:cf:f7:01:11:53:2c:a2:
92:81:7a:f6:ba:90:bf:bc:81:fc:57:a0:41:3e:b3:
04:fc:af:be:3b:6c:32:51:44:6c:61:8a:cb:df:06:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:97:E1:D9:E1:AB:48:5A:1F:BC:3E:11:0F:BC:01:95:E5:F4:2D
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/nkmX4dnhq0haH7w-EQ-8AZXl9C0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202986
Signature Algorithm: sha256WithRSAEncryption
8e:06:be:0b:2e:44:d6:c5:b4:38:bd:f5:91:ee:0d:d0:d7:43:
6b:6f:07:a0:df:34:c0:38:1d:ec:3c:4c:5d:62:c5:b9:cb:9f:
16:8f:d5:23:ca:f7:3e:3c:34:63:9f:35:a4:c5:dc:7b:7c:c6:
61:71:fc:47:79:62:70:f9:ae:5f:cb:03:ec:4a:8a:8c:85:31:
fe:34:13:28:dc:13:0e:fa:39:ae:76:c9:58:4f:a9:92:1f:96:
57:31:0e:e7:61:23:17:29:fc:ea:2c:ba:ce:8a:e0:69:4d:85:
67:e5:13:28:20:a4:20:ba:bc:38:0a:fd:e8:a0:c4:d9:a5:8d:
58:20:85:2c:0c:f1:7a:21:d3:aa:8c:07:f4:97:c3:8a:5d:51:
83:9f:b9:75:e0:f4:2b:bd:d8:8c:db:87:b1:8c:a5:81:d8:65:
1c:ca:ac:00:53:9e:69:e8:a4:2a:3f:76:3d:b1:db:c3:f0:cb:
4e:b2:68:99:bb:c6:f1:bd:8c:4d:21:1a:b6:b0:49:f6:eb:2d:
eb:64:5e:fc:a4:10:4a:9e:4a:2f:dc:7d:f7:9b:06:c8:e1:1b:
e2:35:24:b6:63:a5:c1:db:48:5e:ee:25:c0:59:0e:85:7b:ef:
a6:59:3a:95:19:23:6a:77:01:b9:59:31:5b:8b:ff:bc:88:bd:
3a:44:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:16 2026 by rpki-client