Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa
File: mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa (raw, json)
Hash identifier: KGJVD6V5txLQAjQLlr+mNudFF1tQTaGRrNO28803Imc=
Subject key identifier: 99:70:71:50:20:5E:62:FC:A0:C3:94:3E:50:EB:65:0D:C8:F6:6E:9D
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019E82AC8F48078CC85728ACF421D8C969CF
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa
Signing time: Mon 01 Jun 2026 10:13:27 +0000
ASPA not before: Mon 01 Jun 2026 10:13:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211358
Providers: AS: 6204
AS: 6517
AS: 6939
AS: 8772
AS: 11967
AS: 16276
AS: 24482
AS: 29632
AS: 33387
AS: 34927
AS: 41051
AS: 52025
AS: 152565
AS: 207841
AS: 209533
AS: 209735
AS: 211288
AS: 212895
AS: 215638
AS: 215828
AS: 216324
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:ac:8f:48:07:8c:c8:57:28:ac:f4:21:d8:c9:69:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Jun 1 10:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99707150205e62fca0c3943e50eb650dc8f66e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:cf:b4:49:4e:15:f8:47:73:d6:36:a8:a0:
e9:b9:4f:09:cb:f5:f4:df:78:7b:08:3e:51:36:66:
3b:7a:0b:a7:f9:5e:a1:8e:ea:88:65:11:7f:d0:5b:
b0:f1:2c:2e:d0:28:bf:6d:b5:1b:d4:08:b4:db:00:
0c:c4:40:94:9a:de:85:dd:10:2f:88:ee:f0:96:8f:
a2:7f:b4:54:bb:d2:00:6f:03:2c:4c:02:6a:d9:a8:
08:24:ef:ee:41:3f:04:ac:f7:36:96:0d:af:74:90:
73:43:91:5c:26:0f:3a:bc:46:11:c1:4d:52:0d:b8:
07:79:14:20:80:3f:ba:a6:c9:16:dd:66:82:3b:16:
41:2f:de:99:ff:61:50:fd:13:dd:51:5d:5a:11:59:
fa:fd:53:7b:60:d4:56:00:ed:5b:99:e2:dd:31:7f:
4a:17:6c:bd:7e:df:b5:95:0a:80:48:15:f4:14:aa:
8d:43:e2:46:cd:31:d0:0c:9c:0f:3e:5e:4a:32:83:
04:46:28:e2:1f:2e:a3:e9:b7:69:cc:e5:34:02:f9:
83:f2:95:20:4e:e0:87:bc:5c:33:00:68:9a:ea:74:
e4:ad:bd:c5:6d:0d:87:7b:0f:7e:0b:59:05:24:48:
13:9d:46:be:80:92:cd:c4:d7:76:98:74:f1:2d:dd:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:70:71:50:20:5E:62:FC:A0:C3:94:3E:50:EB:65:0D:C8:F6:6E:9D
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/mXBxUCBeYvygw5Q-UOtlDcj2bp0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211358
Signature Algorithm: sha256WithRSAEncryption
37:6e:06:45:a9:74:55:e9:f3:77:ab:02:64:c4:54:ab:01:a0:
6b:10:e8:70:b2:44:2b:7d:53:ee:90:44:d8:d3:19:45:cf:b6:
1a:36:d1:c1:e3:b2:30:07:5d:62:34:fb:48:d1:c5:57:39:ed:
a8:4c:ec:f1:a9:d8:db:41:36:7d:f1:37:c8:30:71:22:77:99:
1f:c7:79:97:b2:04:84:b2:13:66:76:c8:6f:76:5c:02:50:8b:
e7:d0:a6:69:e0:1d:01:77:d6:53:b5:64:fe:4d:ed:b3:48:0d:
b3:63:53:49:d1:30:74:63:64:28:98:cb:20:4f:c0:f0:39:7c:
d0:ca:78:85:15:95:4c:38:92:f9:de:b3:b7:31:f5:08:0b:22:
48:72:d9:52:f5:3f:59:e6:4e:44:73:fd:8b:35:20:88:3e:42:
f3:94:e6:dc:3d:76:81:02:c2:c0:c2:68:f6:06:2a:ba:f4:20:
63:46:e8:58:4e:7d:65:d8:81:7c:31:12:10:0f:35:5c:f0:f4:
f7:7b:3d:1f:42:cc:ed:fa:ce:50:42:9f:32:03:98:76:53:ac:
6e:26:c0:64:0e:7b:28:67:43:b8:39:b5:8e:4d:fd:8f:48:df:
29:01:82:97:82:3d:38:63:d0:0e:0f:62:b5:c4:97:47:de:93:
3b:4e:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:03 2026 by rpki-client