Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/DjdRXxbB13RCBLzgc7W30AtdCq8.asa
File: DjdRXxbB13RCBLzgc7W30AtdCq8.asa (raw, json)
Hash identifier: J2A9HmiX/LyHyVWsEKBZYWe3gyS+zl7oCgR1ePGuZvk=
Subject key identifier: 0E:37:51:5F:16:C1:D7:74:42:04:BC:E0:73:B5:B7:D0:0B:5D:0A:AF
Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial: 01A0777FC65BA5C0E9427C9BCCA29454348B
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/DjdRXxbB13RCBLzgc7W30AtdCq8.asa
Signing time: Sun 06 Sep 2026 16:14:17 +0000
ASPA not before: Sun 06 Sep 2026 16:14:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213449
Providers: AS: 29670
AS: 47536
AS: 49600
AS: 52025
AS: 203446
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:7f:c6:5b:a5:c0:e9:42:7c:9b:cc:a2:94:54:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
Validity
Not Before: Sep 6 16:14:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e37515f16c1d7744204bce073b5b7d00b5d0aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:7e:62:06:0d:25:10:e3:58:ca:0c:18:14:
c4:bd:0d:66:33:84:5a:ea:04:3b:3c:a7:7c:cd:e2:
79:78:ce:7a:df:29:bd:67:e1:2c:a2:91:23:29:8b:
bc:2f:75:da:14:30:e2:c5:9a:57:b8:6c:a0:f4:ef:
00:e6:2b:6c:11:0e:f8:2c:5f:1b:c6:b3:98:70:e4:
a2:01:63:30:f1:9e:3d:c7:7a:f0:27:74:ea:54:b8:
38:5f:bb:71:7e:ee:65:9d:36:b3:23:8f:73:d2:1f:
29:6b:d7:f7:54:4f:98:89:40:48:af:eb:54:16:bb:
d6:58:8f:12:06:1b:bb:70:b2:cb:0f:44:d3:fd:b1:
a7:cf:46:cb:5c:6f:be:22:81:2f:e4:e1:f2:ce:7f:
50:6a:9d:74:c1:fb:ad:86:dd:8f:f9:ba:d6:f9:c7:
1e:24:6e:cc:b3:96:81:95:43:e1:c7:ce:8d:ff:12:
eb:3d:7b:64:0c:fd:cc:3d:2b:40:26:b2:22:92:b6:
97:ac:d9:a1:ca:67:e2:27:53:87:e9:8f:0c:34:83:
f5:da:b2:8b:97:a0:c3:49:aa:a7:41:c2:1a:fe:52:
c7:56:46:ad:ca:ea:5b:3f:e6:4e:ed:35:19:8f:a1:
c0:08:03:42:7d:ce:93:80:d4:a8:cc:df:b8:97:79:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:37:51:5F:16:C1:D7:74:42:04:BC:E0:73:B5:B7:D0:0B:5D:0A:AF
X509v3 Authority Key Identifier:
keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/DjdRXxbB13RCBLzgc7W30AtdCq8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213449
Signature Algorithm: sha256WithRSAEncryption
52:e5:dd:0f:82:e2:3d:85:69:91:3b:7b:d5:07:e5:69:c8:80:
18:44:29:39:87:a0:f3:a6:9e:40:ab:06:8b:3d:44:73:51:f3:
1c:0d:b3:ed:4c:57:0a:5d:68:10:af:9c:9a:ab:2b:60:50:b0:
bf:35:a6:2d:71:8f:4f:18:d9:5c:84:39:fa:0b:2f:1f:1a:85:
a6:7a:c3:49:0e:fa:37:ee:d6:8f:72:be:2e:25:72:f5:ba:c8:
9d:c0:87:2e:d7:af:23:0a:e1:db:e3:92:dd:61:fc:72:e6:40:
fc:90:35:c6:52:07:02:61:59:92:0b:6a:cb:35:a1:c0:47:d1:
24:8a:78:73:4d:62:56:f3:e6:e3:60:fc:f2:b9:ac:78:2d:c5:
2e:59:44:f3:51:66:8e:24:12:84:2d:3b:1e:fe:1d:0c:26:14:
7e:6a:fe:0a:ed:c6:4e:88:e2:73:98:37:34:ca:9a:27:74:48:
6f:13:f0:8b:c3:6c:0a:41:79:7d:57:71:ca:8c:98:a7:33:68:
a5:36:2e:45:c4:f6:e6:90:15:ee:fe:ff:22:c7:33:f6:dd:a2:
82:28:5b:65:1e:72:91:c6:e1:c7:0d:90:5d:00:36:5e:98:50:
37:2a:6e:83:f1:9d:9d:46:94:e7:36:4d:de:f2:f2:64:52:ff:
d1:5c:dc:1e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaB3f8ZbpcDpQnybzKKUVDSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh
NzVjZDQwHhcNMjYwOTA2MTYxNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTM3NTE1ZjE2YzFkNzc0NDIwNGJjZTA3M2I1YjdkMDBiNWQwYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy05+YgYNJRDjWMoMGBTEvQ1mM4Ra
6gQ7PKd8zeJ5eM563ym9Z+EsopEjKYu8L3XaFDDixZpXuGyg9O8A5itsEQ74LF8b
xrOYcOSiAWMw8Z49x3rwJ3TqVLg4X7txfu5lnTazI49z0h8pa9f3VE+YiUBIr+tU
FrvWWI8SBhu7cLLLD0TT/bGnz0bLXG++IoEv5OHyzn9Qap10wfutht2P+brW+cce
JG7Ms5aBlUPhx86N/xLrPXtkDP3MPStAJrIikraXrNmhymfiJ1OH6Y8MNIP12rKL
l6DDSaqnQcIa/lLHVkatyupbP+ZO7TUZj6HACANCfc6TgNSozN+4l3mfmQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA43UV8Wwdd0QgS84HO1t9ALXQqvMB8GA1UdIwQY
MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt
ZTI5MWE1MmE5ZDE1LzEvRGpkUlh4YkIxM1JDQkx6Z2M3VzMwQXRkQ3E4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1
LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNByTANBgkqhkiG
9w0BAQsFAAOCAQEAUuXdD4LiPYVpkTt71QflaciAGEQpOYeg86aeQKsGiz1Ec1Hz
HA2z7UxXCl1oEK+cmqsrYFCwvzWmLXGPTxjZXIQ5+gsvHxqFpnrDSQ76N+7Wj3K+
LiVy9brIncCHLtevIwrh2+OS3WH8cuZA/JA1xlIHAmFZkgtqyzWhwEfRJIp4c01i
VvPm42D88rmseC3FLllE81FmjiQShC07Hv4dDCYUfmr+Cu3GTojic5g3NMqaJ3RI
bxPwi8NsCkF5fVdxyoyYpzNopTYuRcT25pAV7v7/Iscz9t2igihbZR5ykcbhxw2Q
XQA2XphQNypug/GdnUaU5zZN3vLyZFL/0VzcHg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:38 2026 by rpki-client