Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/WBhYaaB4kDqy4FLyiUVTXgjpHl4.asa
File: WBhYaaB4kDqy4FLyiUVTXgjpHl4.asa (raw, json)
Hash identifier: hrsrvdk9deN4qGX+WaTzbPCORj7vib+KcRk6lQ4OTDY=
Subject key identifier: 58:18:58:69:A0:78:90:3A:B2:E0:52:F2:89:45:53:5E:08:E9:1E:5E
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019C6CB787144CFA09523ED72AA6B080F6BC
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/WBhYaaB4kDqy4FLyiUVTXgjpHl4.asa
Signing time: Tue 17 Feb 2026 17:48:12 +0000
ASPA not before: Tue 17 Feb 2026 17:48:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211358
Providers: AS: 6517
AS: 6939
AS: 8772
AS: 11967
AS: 16276
AS: 29632
AS: 33387
AS: 34927
AS: 41051
AS: 52025
AS: 152565
AS: 207841
AS: 209533
AS: 209735
AS: 211288
AS: 212895
AS: 215638
AS: 215828
AS: 216324
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:b7:87:14:4c:fa:09:52:3e:d7:2a:a6:b0:80:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Feb 17 17:48:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58185869a078903ab2e052f28945535e08e91e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:96:cf:d2:03:d5:bd:11:24:0a:d3:3b:3a:
be:79:5a:f6:db:8d:9a:0c:fa:c3:1d:65:a8:e1:06:
90:2e:ff:68:b5:ae:7c:07:29:4a:e6:2c:04:1f:76:
99:f3:da:4b:41:7f:85:9b:c2:88:d7:9a:0e:8e:42:
60:ee:15:de:16:5c:14:0c:42:8a:93:ba:75:30:b1:
73:ef:f6:26:73:96:57:e4:c3:74:fb:ef:d7:3a:85:
13:f8:51:61:b7:93:c1:4d:42:01:15:22:1d:5f:57:
71:50:fd:9f:c8:9d:45:23:26:7f:f1:42:94:ca:2b:
c1:23:31:d0:5b:82:1d:f4:cb:8b:5c:1e:50:1e:ec:
29:ef:26:68:6f:ea:0a:0e:a4:bf:5e:04:e3:03:3b:
b1:0e:c4:56:b5:14:da:80:8c:10:83:dd:69:e3:89:
39:2c:e0:e8:36:38:5e:da:2d:ac:ef:30:c6:16:2a:
01:9c:05:6f:71:77:11:e8:06:59:ee:ed:5b:89:e2:
21:34:1a:11:2f:75:ea:1b:e8:bc:66:a4:f3:d0:bc:
11:60:44:4f:49:14:e9:fd:92:71:5c:78:6a:b3:a5:
5d:a4:b0:8a:18:a7:c7:16:85:ba:f2:84:ce:bf:99:
af:72:29:15:ad:33:e6:66:2a:7b:a0:6f:fc:5f:84:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:18:58:69:A0:78:90:3A:B2:E0:52:F2:89:45:53:5E:08:E9:1E:5E
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/WBhYaaB4kDqy4FLyiUVTXgjpHl4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211358
Signature Algorithm: sha256WithRSAEncryption
23:2a:97:53:01:6a:93:31:da:a1:09:9a:3d:b8:c3:f1:67:16:
11:a0:9b:6d:40:66:4c:61:73:4a:36:ab:e6:9f:c6:5e:22:c1:
3a:3d:86:4c:61:c3:92:2c:d5:95:ce:25:e3:08:3f:1f:12:06:
5d:bc:1a:f0:00:e5:d4:29:0c:19:95:b6:81:bf:49:05:7f:d2:
72:da:3d:c0:b7:6d:82:57:01:3b:9a:85:dd:7b:8d:49:da:9e:
8f:95:a0:e1:d7:4d:79:e9:a7:df:74:4e:7e:c8:97:a0:18:74:
35:91:a2:93:56:cf:26:c7:1c:62:fd:9d:2b:9e:a2:86:ef:5f:
c6:1d:1d:2a:46:79:79:fe:91:24:a1:32:c7:90:49:18:73:97:
a8:e1:6c:d0:0d:2e:6f:34:5f:09:07:bf:77:a4:5f:1f:80:e2:
be:b8:bc:70:97:01:b8:e9:2c:7b:52:1c:dd:0c:50:bc:11:a9:
f0:ea:d3:20:c7:20:02:86:6b:76:c2:8b:15:b6:96:f4:52:b9:
1b:e9:ad:a6:f0:42:95:91:72:d7:1c:b4:03:0f:16:3b:c1:af:
4a:90:95:2b:a0:60:22:29:42:5c:4a:12:98:f2:63:aa:50:97:
9d:7e:aa:33:0e:62:5c:ba:ad:9c:f1:9f:57:e7:2e:55:87:99:
ea:6c:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:25 2026 by rpki-client