Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.pudu.be/repo/pudu/0/AS47689.asa
File: AS47689.asa (raw, json)
Hash identifier: ANoTRVUPGph4si8XfbXQ8R+ITuIVkLcuwWYe6NGAfFE=
Subject key identifier: 68:A6:82:09:CA:2A:28:05:97:AD:9E:9B:93:C3:C9:46:B5:42:FF:7A
Certificate issuer: /CN=73a83c810157e3e8511eebe39cfcad16fa329700
Certificate serial: 7FA75AAC0B799588611D680A3BFB756F6EB6443D
Authority key identifier: 73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
Subject info access: rsync://rpki.pudu.be/repo/pudu/0/AS47689.asa
Signing time: Wed 04 Nov 2026 17:24:42 +0000
ASPA not before: Wed 04 Nov 2026 17:19:42 +0000
ASPA not after: Wed 03 Nov 2027 17:24:42 +0000
Customer ASID: 47689
Providers: AS: 1299
AS: 6939
AS: 21738
AS: 23033
AS: 34465
AS: 34549
AS: 34927
AS: 54148
AS: 395823
Validation: OK
Signature path: rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl
rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.mft
rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 18:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a7:5a:ac:0b:79:95:88:61:1d:68:0a:3b:fb:75:6f:6e:b6:44:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73a83c810157e3e8511eebe39cfcad16fa329700
Validity
Not Before: Nov 4 17:19:42 2026 GMT
Not After : Nov 3 17:24:42 2027 GMT
Subject: CN=68A68209CA2A280597AD9E9B93C3C946B542FF7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:39:d4:ae:43:21:cb:42:7f:2e:fe:6e:5c:
ea:8d:64:c2:21:87:02:ff:fd:5f:28:dd:52:4b:f3:
77:cd:27:55:51:83:d2:de:b6:0c:97:c3:91:4f:1a:
3d:e2:69:f8:fe:19:b1:65:5f:ac:70:e7:5a:e5:3d:
ec:d6:f3:8a:00:c9:b1:4d:72:5e:68:c3:59:c0:b0:
83:c6:c1:64:e1:63:4b:0c:42:08:b4:ee:90:4a:66:
1e:fd:b2:02:f4:e4:3c:d9:65:57:00:b8:68:eb:9d:
55:d6:0d:dc:19:e6:c0:b2:7e:93:e1:71:09:0d:c3:
a2:3a:7e:96:c3:23:ce:dd:41:64:59:fb:78:1c:a2:
8f:1f:fd:78:3b:b8:cd:4a:c0:a1:d8:0d:ff:be:5d:
c2:21:aa:0a:17:ca:ed:bb:84:ef:70:b3:86:c9:c4:
1f:f0:4d:9f:88:bc:b7:7a:fd:e8:ae:72:0a:91:72:
0c:64:18:76:ff:74:a8:14:6c:ee:ae:c6:cb:6c:0f:
c2:62:3c:74:dd:3d:bc:12:d6:5a:dc:7b:52:0e:32:
b7:85:03:c3:4d:6b:ef:f1:76:14:f6:4b:58:da:40:
65:3f:2e:30:bc:f7:98:01:9f:50:fc:f9:96:c5:f2:
ff:c6:16:8f:d9:b3:70:e4:24:6a:b2:22:7b:0d:45:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:82:09:CA:2A:28:05:97:AD:9E:9B:93:C3:C9:46:B5:42:FF:7A
X509v3 Authority Key Identifier:
keyid:73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/0/AS47689.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47689
Signature Algorithm: sha256WithRSAEncryption
5f:83:6d:31:cb:70:92:3c:f9:0b:71:16:62:5f:d8:fc:37:f8:
bd:01:1a:54:e9:80:70:88:0c:3f:52:09:ab:64:dd:70:aa:5f:
48:bc:1a:b4:f6:c3:24:a1:f9:e0:af:70:c6:4b:62:0c:6a:f9:
7b:34:aa:bf:42:7f:5e:35:b8:85:63:99:0f:f3:3c:0a:b0:74:
67:59:69:cb:a2:3c:c8:ab:26:fd:e1:89:dc:92:79:28:ae:79:
46:36:31:f4:70:47:f6:54:3a:cb:c7:17:0a:28:3f:2b:f7:ca:
50:4f:f8:37:f1:3b:a5:90:dd:97:89:99:cc:e2:93:d7:b6:17:
f7:90:27:20:d4:46:7f:08:b9:16:73:d3:d9:6e:5d:1c:59:ea:
20:91:42:cc:da:86:3a:8e:d7:e2:6c:95:c7:23:16:4f:ef:e4:
22:49:15:01:c8:41:d2:da:1f:fc:e8:dd:c3:19:16:0b:2c:3f:
3d:f6:9e:02:dc:94:35:92:4a:79:13:10:2e:81:91:29:3c:bd:
e8:27:22:18:94:41:e0:f2:70:f2:bb:4a:1b:28:e3:8d:5c:50:
24:5c:9e:fc:7a:74:6d:c6:f6:2a:82:3a:b5:af:01:fa:31:47:
23:93:f8:f0:01:f4:6a:dc:dd:87:13:e5:1e:f5:ad:73:7d:59:
14:da:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:07:14 2026 by rpki-client