Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/y-mXlAVA_RcZw6EcuVM9S9WcRIA.asa
File: y-mXlAVA_RcZw6EcuVM9S9WcRIA.asa (raw, json)
Hash identifier: gqDE8n29X0iv7W/Nc2YwxWoxlZcdgypxmelBkYsKhFQ=
Subject key identifier: CB:E9:97:94:05:40:FD:17:19:C3:A1:1C:B9:53:3D:4B:D5:9C:44:80
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 01A0B40D8D0A7B8FA40373392F435945B6B5
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/y-mXlAVA_RcZw6EcuVM9S9WcRIA.asa
Signing time: Fri 18 Sep 2026 10:26:22 +0000
ASPA not before: Fri 18 Sep 2026 10:26:22 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209625
Providers: AS: 3399
AS: 4849
AS: 44901
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:0d:8d:0a:7b:8f:a4:03:73:39:2f:43:59:45:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Sep 18 10:26:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbe997940540fd1719c3a11cb9533d4bd59c4480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:01:85:ae:96:73:37:48:cc:d2:cb:62:f5:
14:2b:57:3b:36:90:b0:27:b8:64:b3:06:61:38:59:
72:5f:4d:fc:ce:9a:07:db:4d:0b:b9:c6:73:10:54:
0d:2a:3d:10:ef:13:e8:6b:48:dc:ee:cf:a5:09:48:
a9:d5:94:2b:79:ab:43:8f:8f:10:df:af:08:5e:97:
ac:f5:6f:88:d1:7b:2a:fc:3c:7a:f3:5f:5b:c4:86:
41:b8:cb:01:b1:41:2c:b8:c8:c3:4e:6b:10:dd:54:
c8:b5:46:66:f6:29:e7:76:f5:1e:e1:89:54:a3:2e:
f0:da:9a:ee:e0:8c:91:f7:10:70:9a:ca:fc:f3:9c:
a5:a1:b9:23:87:50:14:94:40:51:18:4b:ed:a0:e0:
a7:11:2d:ae:fe:f1:76:1f:b1:8f:ef:9e:0b:cf:1e:
28:63:c4:1b:85:a9:10:c1:70:b0:66:ac:91:3b:c8:
37:48:83:be:24:d1:b4:fb:02:bf:4d:7d:5d:ae:dc:
99:91:08:42:8e:f8:e0:ab:e0:71:4d:8b:12:e1:c5:
f0:d5:2a:91:98:aa:fb:a6:a2:7d:bd:0c:90:0b:fb:
85:89:77:88:d0:6d:22:02:28:b8:e0:36:d6:a0:60:
70:34:7f:40:84:0f:d7:3b:c1:2a:76:61:9d:82:d4:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:97:94:05:40:FD:17:19:C3:A1:1C:B9:53:3D:4B:D5:9C:44:80
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/y-mXlAVA_RcZw6EcuVM9S9WcRIA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209625
Signature Algorithm: sha256WithRSAEncryption
06:90:cd:63:78:9f:a2:6b:81:0a:1a:40:b1:b9:90:22:3f:ab:
af:a1:79:b5:12:91:9d:05:9e:9b:c0:39:8a:0f:b2:c9:25:e0:
99:a4:01:40:e8:4b:81:b9:85:d4:bd:f5:81:40:66:75:8c:ec:
1f:1e:70:2c:c7:d4:e5:02:6d:ee:a3:01:07:4f:a7:3d:8e:0e:
8a:b0:f2:b2:e5:e3:17:63:8b:10:ea:dc:49:cf:45:7a:cc:1d:
c7:65:f7:1a:e9:88:37:c1:06:1e:bf:5f:f6:cd:b9:74:3b:b1:
7d:af:66:69:e8:ea:d1:c6:db:70:2d:6b:04:08:d4:cc:92:32:
e8:48:24:10:e7:3f:e8:e9:cf:3b:06:c2:5a:4b:2b:76:38:24:
1c:31:3b:5a:d0:bc:f4:97:1c:23:41:47:44:e0:45:a4:83:e0:
42:4f:55:1a:40:4e:bd:f5:94:cd:01:31:9a:8b:36:a0:53:e7:
3c:8c:ac:d8:e9:e1:bc:03:9c:2e:7e:34:e7:aa:0a:69:7d:56:
b7:16:8d:54:10:bb:f8:d6:b9:d6:7e:4d:96:9f:17:ef:4a:9e:
2b:cb:6c:56:89:27:60:c5:65:d7:49:71:70:b7:2d:37:c9:14:
b2:fc:4c:5a:99:20:35:de:56:75:b9:1f:12:4a:b5:c5:44:3a:
82:6e:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:51:53 2026 by rpki-client