Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/oGY7ywjzIawiazxfJPdxsbpKwRU.asa
File: oGY7ywjzIawiazxfJPdxsbpKwRU.asa (raw, json)
Hash identifier: bPFAxXTZvoR90j3k/VjW0y0gMph9xG0NmXzKwHJV27k=
Subject key identifier: A0:66:3B:CB:08:F3:21:AC:22:6B:3C:5F:24:F7:71:B1:BA:4A:C1:15
Certificate issuer: /CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Certificate serial: 019C900B521DC1E7E352C9E4BD2D69A10F49
Authority key identifier: 2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/oGY7ywjzIawiazxfJPdxsbpKwRU.asa
Signing time: Tue 24 Feb 2026 14:26:26 +0000
ASPA not before: Tue 24 Feb 2026 14:26:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211461
Providers: AS: 47692
AS: 59909
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:0b:52:1d:c1:e7:e3:52:c9:e4:bd:2d:69:a1:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2cad120aaff9efdf7c6959a4e0470e3e0624f0
Validity
Not Before: Feb 24 14:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0663bcb08f321ac226b3c5f24f771b1ba4ac115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:54:94:9c:7e:bf:bb:b6:d5:18:cb:99:6c:
5e:fd:60:f4:68:66:7a:6c:ab:9c:ef:45:77:f7:4d:
5d:a0:f7:3d:ee:dc:2e:53:4b:24:16:3e:7a:e6:cb:
d6:b1:69:16:f7:c5:a9:53:c9:6b:c9:8c:19:b0:06:
07:49:6f:23:f1:19:9f:4a:d1:82:0c:32:87:5f:14:
b4:f4:4a:ca:fb:0c:e9:30:80:34:37:52:3a:e5:d9:
6c:b2:8b:42:8a:d7:f2:7c:09:bb:99:51:89:b8:b3:
07:b3:d1:94:15:23:6f:a0:b5:93:eb:c4:a8:60:72:
95:c4:8f:4d:b9:ae:8c:f8:a3:f6:08:7e:55:54:83:
f5:93:e6:10:c2:ad:7c:6b:c0:1a:9e:a7:0b:5d:6d:
8b:56:18:b6:3e:9f:13:9e:59:b5:4f:ec:43:d9:e1:
21:a8:92:36:a4:36:06:8d:5b:ff:84:6f:24:04:e6:
30:8d:0e:66:8e:77:d9:ff:56:43:52:e5:a5:e0:4f:
61:61:b5:c7:26:40:92:c5:1c:01:5a:49:83:40:ad:
5e:36:31:ba:83:e0:1a:14:62:cb:3c:eb:5c:57:50:
7e:98:33:51:14:7d:8b:17:68:83:e7:cc:42:05:70:
3d:b9:09:48:10:c7:d1:83:9e:04:ac:be:fe:db:15:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:3B:CB:08:F3:21:AC:22:6B:3C:5F:24:F7:71:B1:BA:4A:C1:15
X509v3 Authority Key Identifier:
keyid:2F:2C:AD:12:0A:AF:F9:EF:DF:7C:69:59:A4:E0:47:0E:3E:06:24:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyytEgqv-e_ffGlZpOBHDj4GJPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/oGY7ywjzIawiazxfJPdxsbpKwRU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/143e33-9312-454f-a99e-caa6584e9916/1/LyytEgqv-e_ffGlZpOBHDj4GJPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211461
Signature Algorithm: sha256WithRSAEncryption
01:ae:76:42:aa:81:6e:b4:29:dc:e0:30:8f:cc:e8:46:b0:e3:
6c:5e:9b:bd:02:84:c6:5e:81:59:5e:a8:2b:a2:32:e7:9b:71:
ea:c6:a5:7b:b2:44:2f:1c:ab:41:b9:af:59:6a:a6:e4:86:f5:
8f:8f:02:51:94:49:3b:f2:0f:11:41:20:dd:18:a8:e5:fe:af:
e2:ae:49:5a:e0:65:cc:86:41:26:6c:ea:7d:4b:44:c9:69:2e:
68:f4:23:df:75:19:26:fb:d0:b6:44:b1:bf:dc:3a:3c:c1:f7:
f9:66:a9:89:11:ee:07:74:f7:f7:04:89:bc:f3:b6:70:fa:ee:
da:23:22:9f:3c:d7:72:f0:9d:32:28:12:d6:95:04:e8:81:a5:
23:64:c8:50:ce:05:64:72:65:bf:17:2f:ad:9f:a8:5e:97:92:
00:39:c6:21:0e:12:4c:7d:3f:f3:07:f4:53:35:cc:ed:34:e5:
ab:9c:21:b3:0b:86:44:95:43:f4:ef:4b:80:da:db:4b:74:d6:
0a:35:7c:f4:0d:c8:a5:f2:a2:ea:87:ad:96:97:92:b7:30:8c:
1e:46:4e:94:af:20:df:36:e1:05:dd:15:5f:e4:df:ac:12:b5:
2a:66:ee:7b:73:24:b8:8b:e8:c2:fd:f1:b5:63:af:61:f0:39:
b1:ed:fb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:33 2026 by rpki-client