Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/bFkaQMapJshDo2hgXls_q4kXpds.asa
File: bFkaQMapJshDo2hgXls_q4kXpds.asa (raw, json)
Hash identifier: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=
Subject key identifier: 6C:59:1A:40:C6:A9:26:C8:43:A3:68:60:5E:5B:3F:AB:89:17:A5:DB
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019D2A50483B55A24E5AFE8773F7EF5D2832
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/bFkaQMapJshDo2hgXls_q4kXpds.asa
Signing time: Thu 26 Mar 2026 13:23:17 +0000
ASPA not before: Thu 26 Mar 2026 13:23:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 5089
Providers: AS: 6830
AS: 12956
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:50:48:3b:55:a2:4e:5a:fe:87:73:f7:ef:5d:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Mar 26 13:23:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c591a40c6a926c843a368605e5b3fab8917a5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:d5:e7:c5:ac:3a:0c:38:33:2c:54:7b:37:
1b:73:58:e2:df:95:31:4d:e6:21:6a:23:2e:ff:66:
40:c8:af:7c:f6:a8:5b:d1:38:d8:0c:d0:a9:e6:83:
b2:f7:1d:7d:e7:b7:4d:bd:06:01:18:4c:71:ee:71:
9b:85:73:08:0b:81:4a:a7:af:0a:e8:95:aa:42:e9:
4e:56:3b:0a:2e:d8:a3:8d:94:2b:5b:d1:fb:81:4e:
87:76:ab:4a:21:31:0c:6a:1e:78:7d:ba:6b:e1:2f:
e1:c9:92:fa:8b:03:26:9f:d9:93:bd:96:05:b9:54:
0f:50:7f:e5:55:0a:86:ca:b9:05:4f:22:e6:c2:e2:
ec:36:e7:63:88:e5:a1:2a:bd:69:8b:e7:1d:ae:1e:
07:59:38:1c:bf:44:c8:42:36:7e:38:8f:d8:c6:8a:
87:e8:cd:85:69:2a:ca:96:fd:e4:ea:fd:b3:4a:6d:
d3:6c:56:7b:e6:f7:13:9c:b2:4d:23:91:a3:30:c9:
91:7e:e8:d8:05:eb:15:0f:4d:fb:31:89:81:af:52:
19:aa:8f:db:7f:0b:68:6a:89:27:2e:37:00:7a:c6:
be:04:90:f9:90:56:64:17:48:3f:d9:cd:24:fb:69:
bc:e1:40:b5:25:0b:f9:5c:60:07:a3:b3:d5:ec:ed:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:1A:40:C6:A9:26:C8:43:A3:68:60:5E:5B:3F:AB:89:17:A5:DB
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/bFkaQMapJshDo2hgXls_q4kXpds.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5089
Signature Algorithm: sha256WithRSAEncryption
cc:99:6a:ed:a9:7a:f8:a1:af:3e:96:eb:ac:89:c3:5b:5c:a8:
09:e1:47:f1:f2:b8:6f:83:cb:4d:20:cb:4f:b2:fd:a4:22:39:
64:87:49:0a:c7:b0:30:8d:ea:8a:50:e0:b6:1e:a6:f5:a2:96:
1c:29:de:c0:ce:e2:42:d9:ec:49:c8:14:0f:1a:3f:5a:6c:db:
5d:5d:27:a5:b8:ff:f2:aa:9f:03:b3:7c:03:7c:fb:72:43:44:
44:b7:68:78:26:79:c7:be:4d:5c:5b:02:9c:b5:f0:11:3d:74:
cd:3c:a1:d6:63:7f:18:88:8a:68:0c:a4:08:bd:f2:b0:75:c6:
bd:89:f8:05:23:c9:c4:84:1a:be:67:3c:9c:7f:96:d0:5b:cd:
5a:e6:0b:d7:cc:a1:61:0e:2d:63:b5:e8:20:92:a0:d2:88:4e:
60:50:f2:bc:81:d1:f6:f7:2b:a4:46:e0:91:c8:6c:cb:22:64:
17:c2:94:f6:4a:03:85:13:5c:30:a3:a6:5e:8a:69:ac:c2:c1:
0a:ec:89:16:9e:af:a1:61:63:e8:08:7e:78:41:95:76:d3:52:
2c:67:75:78:04:da:15:2a:63:34:75:0b:b8:b9:de:ef:bf:8a:
02:5c:5f:f5:ed:e4:c9:89:f1:e3:a3:a3:44:9f:78:7c:50:b9:
91:83:a7:6d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ0qUEg7VaJOWv6Hc/fvXSgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx
MzY5Y2EwHhcNMjYwMzI2MTMyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzU5MWE0MGM2YTkyNmM4NDNhMzY4NjA1ZTViM2ZhYjg5MTdhNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPXV58WsOgw4MyxUezcbc1ji35Ux
TeYhaiMu/2ZAyK989qhb0TjYDNCp5oOy9x1957dNvQYBGExx7nGbhXMIC4FKp68K
6JWqQulOVjsKLtijjZQrW9H7gU6HdqtKITEMah54fbpr4S/hyZL6iwMmn9mTvZYF
uVQPUH/lVQqGyrkFTyLmwuLsNudjiOWhKr1pi+cdrh4HWTgcv0TIQjZ+OI/YxoqH
6M2FaSrKlv3k6v2zSm3TbFZ75vcTnLJNI5GjMMmRfujYBesVD037MYmBr1IZqo/b
fwtoaoknLjcAesa+BJD5kFZkF0g/2c0k+2m84UC1JQv5XGAHo7PV7O3j6wIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFGxZGkDGqSbIQ6NoYF5bP6uJF6XbMB8GA1UdIwQY
MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt
NGNmZTQwZjA3YTZiLzEvYkZrYVFNYXBKc2hEbzJoZ1hsc19xNGtYcGRzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi
LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhPhMA0GCSqGSIb3
DQEBCwUAA4IBAQDMmWrtqXr4oa8+luusicNbXKgJ4Ufx8rhvg8tNIMtPsv2kIjlk
h0kKx7AwjeqKUOC2Hqb1opYcKd7AzuJC2exJyBQPGj9abNtdXSeluP/yqp8Ds3wD
fPtyQ0REt2h4JnnHvk1cWwKctfARPXTNPKHWY38YiIpoDKQIvfKwdca9ifgFI8nE
hBq+Zzycf5bQW81a5gvXzKFhDi1jteggkqDSiE5gUPK8gdH29yukRuCRyGzLImQX
wpT2SgOFE1wwo6ZeimmswsEK7IkWnq+hYWPoCH54QZV201IsZ3V4BNoVKmM0dQu4
ud7vv4oCXF/17eTJifHjo6NEn3h8ULmRg6dt
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:58 2026 by rpki-client