Autonomous System Provider Authorization
$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/2/AS219418.asa
File: AS219418.asa (raw, json)
Hash identifier: 5xy+Qqo7weeLV+Mh1cf12o+jn5ZxdJnxo/myV7tUrwA=
Subject key identifier: 36:81:35:6E:5E:01:92:F7:FB:20:DB:FF:D5:22:12:4F:1C:F1:3A:31
Certificate issuer: /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial: 6B5D5F63E31C67EE4FD80F841DAAA1F71470079E
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access: rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
Signing time: Thu 17 Sep 2026 01:45:16 +0000
ASPA not before: Thu 17 Sep 2026 01:40:16 +0000
ASPA not after: Thu 16 Sep 2027 01:45:16 +0000
Customer ASID: 219418
Providers: AS: 34927
AS: 47272
AS: 197324
AS: 204464
AS: 212635
AS: 213449
AS: 215147
AS: 215685
Validation: OK
Signature path: rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5d:5f:63:e3:1c:67:ee:4f:d8:0f:84:1d:aa:a1:f7:14:70:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
Validity
Not Before: Sep 17 01:40:16 2026 GMT
Not After : Sep 16 01:45:16 2027 GMT
Subject: CN=3681356E5E0192F7FB20DBFFD522124F1CF13A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:3a:7a:1d:3b:b0:18:47:23:93:c7:1a:f6:
f5:3a:fe:17:b6:4b:b6:00:c0:c9:5f:b5:9e:02:ee:
c6:fb:e1:e2:d7:d2:c6:5a:6a:81:02:bc:e6:55:f8:
13:ba:c1:d0:a3:e4:d5:ed:98:b0:46:d3:d5:0b:b1:
a2:b0:0b:3a:54:79:70:e0:c3:5c:26:e0:2a:81:5a:
9c:40:04:f6:d4:74:62:8e:bc:3a:5a:7a:98:64:e6:
7e:e0:e8:25:27:25:c5:49:8a:85:9d:51:9d:40:77:
70:9b:2a:15:7b:51:53:68:28:fe:af:7a:d7:e0:34:
32:27:88:94:ae:9e:f2:08:67:2a:2b:bc:be:97:d6:
6e:f0:96:2e:27:e1:bd:6e:78:b5:f8:dc:f3:dd:ab:
2f:ad:d8:4e:58:ea:68:cb:9d:1e:85:44:7a:e8:f0:
78:09:d1:12:ce:e6:ab:a0:25:45:c5:f6:bb:2f:07:
91:2f:5e:0b:63:e2:9d:cb:51:7d:7c:09:b2:31:d1:
7c:e3:86:6e:78:e8:8d:2b:0c:c4:55:fb:60:43:01:
36:9b:f1:83:83:37:8d:cc:e9:de:7d:1d:e3:5b:6d:
7f:ec:69:5a:00:91:39:c6:46:25:6a:c6:8e:c3:09:
dd:fc:d5:79:a4:9b:8f:27:27:23:03:0b:84:bf:4f:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:35:6E:5E:01:92:F7:FB:20:DB:FF:D5:22:12:4F:1C:F1:3A:31
X509v3 Authority Key Identifier:
keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject Information Access:
Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219418
Signature Algorithm: sha256WithRSAEncryption
5c:25:47:cb:64:0d:d2:70:d1:7d:45:ef:81:09:82:0a:79:a1:
be:ca:14:6d:48:0c:3a:71:1e:3e:dc:2c:b8:3a:1d:cb:d7:f1:
06:e8:82:1d:d7:23:75:e5:89:fe:6b:e1:71:93:c7:b9:e8:14:
69:11:54:ec:ab:7a:bc:42:c5:63:8d:38:13:d4:3f:4c:85:50:
5a:09:d6:22:b1:e9:12:9c:82:6f:77:57:46:a1:02:cb:bc:19:
b4:43:f0:08:f3:6b:32:02:e7:2f:97:52:9a:79:e8:97:3e:28:
30:f7:f3:66:eb:5c:95:f5:d5:45:1a:ab:d8:5b:9c:fc:82:4f:
24:ea:a9:eb:f4:cc:08:75:80:97:0b:71:0b:c1:19:28:60:92:
2b:4b:ce:16:24:62:a9:e5:3d:cf:fe:2d:de:b7:5e:65:91:71:
7a:06:21:d1:5c:86:00:41:2c:7a:93:b4:ba:2b:f8:6c:5c:8d:
8a:bc:de:ae:0e:cd:4a:af:85:24:52:b7:65:26:87:bd:64:92:
d0:19:a9:47:62:41:31:a2:c9:6c:54:f2:73:83:83:15:73:94:
f5:76:32:45:fb:49:ee:02:96:58:f2:f2:78:be:7f:e7:b0:8b:
cf:20:36:7e:a6:c0:e6:41:7c:09:75:b5:da:cc:ab:72:7e:9b:
1e:7f:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:45 2026 by rpki-client