Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa
File: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (raw, json)
Hash identifier: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=
Subject key identifier: E1:28:57:3E:15:8F:E1:09:3F:25:35:11:EE:7B:04:36:92:E3:0E:87
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 019C966636FF23AF3E8384216CB71CB15916
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa
Signing time: Wed 25 Feb 2026 20:03:26 +0000
ASPA not before: Wed 25 Feb 2026 20:03:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209042
Providers: AS: 174
AS: 13030
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:66:36:ff:23:af:3e:83:84:21:6c:b7:1c:b1:59:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Feb 25 20:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e128573e158fe1093f253511ee7b043692e30e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:2f:2e:50:3b:27:1d:c3:7c:3f:9d:8b:ed:
76:c6:4d:90:1f:1a:10:a6:46:bd:6a:0e:e1:2d:26:
95:50:1c:d5:be:e5:a6:80:e9:c6:1c:d9:22:1f:cd:
52:08:ff:a1:73:98:da:e7:f0:a7:27:2d:f2:22:5c:
8a:7b:80:8d:c6:19:66:d4:d9:ff:c9:78:e0:6d:ec:
1a:bd:08:ce:74:b1:04:24:ff:cf:93:20:60:1b:42:
a5:ae:63:7b:2c:d7:c7:5a:1f:18:be:f0:11:5c:d1:
0b:4b:4e:40:88:11:78:72:b4:d7:b6:45:7c:31:f4:
8c:2b:12:91:42:82:4b:37:75:48:29:31:aa:1c:47:
36:57:cd:56:c6:46:87:86:92:3a:61:a5:2a:2f:46:
4b:1c:5a:e7:43:fc:6d:52:81:cf:1b:e6:a9:4c:13:
2f:24:ae:c6:be:dd:a2:99:18:98:cf:07:43:ca:52:
c5:35:30:12:28:9b:1e:e0:14:24:f6:19:15:02:11:
f7:7c:0a:cb:0c:82:c2:c9:b8:5f:0b:db:21:c1:bf:
c2:e1:28:ca:ae:89:8b:cb:36:ce:41:27:b5:fa:04:
68:70:e6:b1:f2:87:7e:09:5f:1e:db:cd:90:1a:9b:
f7:00:24:be:64:e6:29:c0:d5:30:08:1b:d9:22:b1:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:28:57:3E:15:8F:E1:09:3F:25:35:11:EE:7B:04:36:92:E3:0E:87
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209042
Signature Algorithm: sha256WithRSAEncryption
84:b6:59:a3:ae:fc:96:cf:8b:e9:35:a2:cf:39:40:bc:b0:79:
6a:a7:c9:b0:8e:f8:40:ad:ae:b3:7f:a0:9b:0d:c0:eb:08:31:
5e:04:b7:93:00:f4:d9:a1:02:cb:02:62:6b:2a:f9:50:b2:36:
73:e9:d3:26:8a:34:a7:a7:37:f0:56:74:03:5e:a2:ad:c8:31:
cc:7c:0b:f5:b7:f0:69:d2:89:05:77:65:f7:48:3f:70:d2:af:
4c:a4:62:c5:5c:81:8a:57:f8:0e:3b:f6:8d:18:19:a8:e2:52:
6d:e1:98:97:25:06:a6:da:d4:84:27:36:e9:98:be:fc:1e:f2:
62:91:65:41:3d:81:dd:dd:ba:b8:1b:6a:21:52:18:1b:31:d0:
71:65:25:36:ba:9a:99:06:44:a6:ba:f0:5c:95:9c:db:a6:05:
82:1f:a2:52:41:54:cc:14:48:e7:d6:7a:1a:ec:7e:94:9a:7f:
5b:d1:72:39:d8:1a:5a:c1:72:c3:b0:39:01:ee:5b:41:0a:56:
5f:b2:5f:b3:54:a1:99:fb:ea:4b:76:08:ac:eb:d7:d9:57:2a:
34:6a:c1:d5:f2:8b:2e:bf:5f:2f:39:d7:c4:b6:be:89:0e:1b:
8d:a3:6d:0f:65:b9:1d:26:44:5b:32:52:41:99:c4:d0:fb:c6:
a2:cb:89:f2
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZyWZjb/I68+g4QhbLccsVkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh
NDdmYTMwHhcNMjYwMjI1MjAwMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTI4NTczZTE1OGZlMTA5M2YyNTM1MTFlZTdiMDQzNjkyZTMwZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb4vLlA7Jx3DfD+di+12xk2QHxoQ
pka9ag7hLSaVUBzVvuWmgOnGHNkiH81SCP+hc5ja5/CnJy3yIlyKe4CNxhlm1Nn/
yXjgbewavQjOdLEEJP/PkyBgG0KlrmN7LNfHWh8YvvARXNELS05AiBF4crTXtkV8
MfSMKxKRQoJLN3VIKTGqHEc2V81WxkaHhpI6YaUqL0ZLHFrnQ/xtUoHPG+apTBMv
JK7Gvt2imRiYzwdDylLFNTASKJse4BQk9hkVAhH3fArLDILCybhfC9shwb/C4SjK
romLyzbOQSe1+gRocOax8od+CV8e282QGpv3ACS+ZOYpwNUwCBvZIrHFTQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFOEoVz4Vj+EJPyU1Ee57BDaS4w6HMB8GA1UdIwQY
MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt
NWQwZTA5YTAyMDRmLzEvNFNoWFBoV1A0UWtfSlRVUjduc0VOcExqRG9jLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm
LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwkjANBgkqhkiG
9w0BAQsFAAOCAQEAhLZZo678ls+L6TWizzlAvLB5aqfJsI74QK2us3+gmw3A6wgx
XgS3kwD02aECywJiayr5ULI2c+nTJoo0p6c38FZ0A16ircgxzHwL9bfwadKJBXdl
90g/cNKvTKRixVyBilf4Djv2jRgZqOJSbeGYlyUGptrUhCc26Zi+/B7yYpFlQT2B
3d26uBtqIVIYGzHQcWUlNrqamQZEprrwXJWc26YFgh+iUkFUzBRI59Z6Gux+lJp/
W9FyOdgaWsFyw7A5Ae5bQQpWX7Jfs1ShmfvqS3YIrOvX2VcqNGrB1fKLLr9fLznX
xLa+iQ4bjaNtD2W5HSZEWzJSQZnE0PvGosuJ8g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:40 2026 by rpki-client