Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/CZBSPwlrYnBoE2W1Q7YPG5HWIdI.asa
File: CZBSPwlrYnBoE2W1Q7YPG5HWIdI.asa (raw, json)
Hash identifier: DN5iIvBY5/HZzi8oFaM7uNvnDJ5WnPup2ZcmHWvd9+A=
Subject key identifier: 09:90:52:3F:09:6B:62:70:68:13:65:B5:43:B6:0F:1B:91:D6:21:D2
Certificate issuer: /CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Certificate serial: 019CAFB9F9E1AA28EBF7234D98C8C2FB85D2
Authority key identifier: 36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/CZBSPwlrYnBoE2W1Q7YPG5HWIdI.asa
Signing time: Mon 02 Mar 2026 18:05:26 +0000
ASPA not before: Mon 02 Mar 2026 18:05:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214806
Providers: AS: 33387
AS: 34927
AS: 35661
AS: 53667
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b9:f9:e1:aa:28:eb:f7:23:4d:98:c8:c2:fb:85:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c26f9f5bd5176fb9ad0b65a948d0e8dd90ee4
Validity
Not Before: Mar 2 18:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0990523f096b6270681365b543b60f1b91d621d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:a0:ef:4f:5d:ad:02:43:47:b6:5a:f9:1d:
9d:4a:df:5c:92:7c:5f:ef:38:58:f3:23:70:bc:33:
f3:d4:5b:8e:ad:f1:c6:e4:4f:90:cf:ed:b8:90:70:
b7:db:96:0a:a4:4b:27:b0:c2:a9:14:67:51:00:07:
42:55:f4:5b:ad:65:f3:e1:33:e5:cf:45:67:da:8f:
3e:cd:62:cd:b3:d3:ec:18:7e:d4:20:b3:39:43:e2:
c6:9c:02:65:00:3d:ea:c6:db:cc:ff:f2:e9:60:69:
42:d4:42:97:05:e7:7f:1b:fc:92:ff:07:f5:52:c0:
73:17:b1:65:5a:7d:18:d2:14:a5:0b:78:26:92:56:
4d:6f:ad:96:56:b5:b7:74:12:13:97:04:19:83:1b:
31:bd:4d:e4:ff:a1:ee:e8:5e:53:ac:0f:ef:82:c8:
29:26:15:30:a5:e7:db:70:5f:38:71:ad:27:0c:56:
25:de:14:ea:28:d6:82:8d:c0:94:d8:3f:d4:e2:24:
32:eb:7c:a6:de:d1:f0:93:80:66:ff:38:ae:f8:54:
80:7c:e0:9d:70:7b:de:6a:39:3e:c8:a3:76:e8:60:
76:a1:ae:d8:5f:cf:85:17:59:14:9b:c7:91:59:3d:
94:c8:ec:68:6f:3e:62:22:e3:45:7d:b6:00:9d:e1:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:52:3F:09:6B:62:70:68:13:65:B5:43:B6:0F:1B:91:D6:21:D2
X509v3 Authority Key Identifier:
keyid:36:0C:26:F9:F5:BD:51:76:FB:9A:D0:B6:5A:94:8D:0E:8D:D9:0E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/CZBSPwlrYnBoE2W1Q7YPG5HWIdI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/956748-e858-473c-81c5-09f250e1b9ea/1/Ngwm-fW9UXb7mtC2WpSNDo3ZDuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214806
Signature Algorithm: sha256WithRSAEncryption
04:88:2a:88:d9:d2:98:f7:52:17:e1:80:a1:3c:a0:c1:4c:a1:
a4:9b:e1:79:f8:ab:54:03:39:90:f7:a3:59:55:0d:18:2c:99:
44:50:f7:fd:07:17:f8:3b:8a:3f:72:af:87:5c:41:8c:27:ba:
a1:85:2d:17:8e:c7:3e:08:34:cd:f9:4c:23:5d:0a:66:85:07:
48:ac:26:68:01:fc:0b:c3:af:75:bf:b7:9d:da:9a:6e:e4:02:
7e:94:7c:62:c1:3b:29:df:27:90:b1:83:d2:2c:8c:cf:69:28:
8f:3c:f9:af:b2:d4:54:53:5d:15:00:57:c2:61:f7:16:a0:06:
39:b7:d9:55:bc:0a:85:f1:34:01:bf:14:2f:38:6e:95:a9:c9:
0a:94:8d:f0:5e:ee:b4:3f:f8:80:1b:b7:bd:0a:bb:89:b7:91:
ca:c1:67:cb:ab:d3:4a:68:2f:48:46:c1:b3:66:ac:86:59:39:
a2:8e:fb:be:42:6b:f0:fd:84:2a:21:e8:f7:e7:8e:1a:27:7f:
4b:46:0e:07:ec:3d:58:d2:d9:50:a5:29:f3:03:65:2b:28:33:
11:f8:99:52:be:1a:2b:4e:4c:8c:d0:0b:09:52:24:4e:e5:1c:
74:94:0f:a4:d8:6c:af:3e:10:49:b9:61:f3:f0:24:4f:9d:a0:
02:7c:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:12:21 2026 by rpki-client