Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/o_hUBXndKvvbdzISAd6rD0cHoMk.asa
File: o_hUBXndKvvbdzISAd6rD0cHoMk.asa (raw, json)
Hash identifier: NgnlpeJggKrHizTOEK4IHp9zymg05RTjL+zoELCPJcw=
Subject key identifier: A3:F8:54:05:79:DD:2A:FB:DB:77:32:12:01:DE:AB:0F:47:07:A0:C9
Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Certificate serial: 019E743BA6ECFEDCCC71509F696DEADB94D4
Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/o_hUBXndKvvbdzISAd6rD0cHoMk.asa
Signing time: Fri 29 May 2026 14:55:26 +0000
ASPA not before: Fri 29 May 2026 14:55:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 61967
Providers: AS: 25560
AS: 34309
AS: 44592
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:3b:a6:ec:fe:dc:cc:71:50:9f:69:6d:ea:db:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34
Validity
Not Before: May 29 14:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3f8540579dd2afbdb77321201deab0f4707a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:74:02:26:bd:b0:15:be:08:1e:b9:2c:84:
ba:0c:c6:70:df:9b:60:8a:84:72:f9:a7:a5:9e:84:
37:b0:7f:94:03:ba:85:2d:a0:89:7f:1f:64:a8:86:
28:5a:47:bf:26:c1:06:6e:50:5a:32:bd:a0:c9:af:
09:67:8d:2d:45:b2:dd:02:b2:08:40:66:44:83:0c:
8e:a9:f5:b3:f0:23:6b:56:b8:fb:92:91:6c:28:11:
ae:30:df:b2:bc:69:dc:a2:b0:b9:83:65:63:eb:fc:
39:f1:91:18:5e:3f:15:46:97:cd:f4:b9:19:3a:d4:
22:49:c3:f6:ab:b7:d7:a1:5f:1f:4d:ef:32:00:58:
c5:53:45:e1:59:98:42:44:5f:79:c6:06:96:e1:d3:
cd:02:84:d5:98:30:b1:a9:23:24:3c:b3:fc:fd:3c:
c3:4b:fb:6b:84:3e:8f:cd:b4:6a:c4:59:cf:e9:fd:
d6:5a:dd:e2:bd:3e:b1:ff:63:84:f6:ed:cf:43:41:
ff:15:5f:42:c9:c3:38:b6:8e:5b:ea:95:30:b6:b0:
50:c5:7b:5c:e1:36:50:13:ed:12:be:0a:1d:ae:4a:
1b:9e:f5:d5:f1:64:00:79:5c:af:30:45:c8:9c:df:
2c:47:2c:b4:0e:b2:af:c3:35:db:dd:34:34:1f:e0:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:54:05:79:DD:2A:FB:DB:77:32:12:01:DE:AB:0F:47:07:A0:C9
X509v3 Authority Key Identifier:
keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/o_hUBXndKvvbdzISAd6rD0cHoMk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61967
Signature Algorithm: sha256WithRSAEncryption
56:d5:31:f7:28:b2:4f:0c:d2:dc:01:36:c8:55:70:14:03:a6:
db:d5:d8:23:e2:69:f3:06:2b:b7:cc:5c:e0:a7:62:85:b5:a3:
fc:f4:8b:fe:6e:4a:08:8b:6b:49:a3:c2:12:be:40:8a:cd:2d:
ef:0a:11:30:1d:df:bf:69:a8:28:15:95:c1:c7:26:d0:44:94:
f9:25:b7:53:32:e4:e1:d0:68:25:a7:9a:5f:01:0f:ee:84:61:
fc:ad:ba:27:57:2d:8b:21:c4:80:e9:9d:87:e8:ad:55:c6:30:
63:12:d7:70:06:40:27:93:a8:a0:f8:98:f9:4c:70:9d:32:7f:
f0:33:88:00:a5:5d:c0:9b:6d:e7:ed:03:ca:dd:ad:06:07:45:
bc:98:19:06:2e:cf:f1:45:37:49:b3:d8:3e:19:f0:c3:36:2b:
6a:fe:17:e1:38:8f:a6:0a:79:64:72:7e:f2:61:2e:e3:14:cf:
cf:b0:dc:21:18:bb:b0:d0:1a:68:1c:f2:ed:af:91:21:d7:0f:
04:ff:94:73:89:f8:15:3a:37:55:98:fc:d3:31:42:66:e3:f8:
c8:01:13:10:7f:36:40:ce:03:19:e3:96:80:e8:a0:1f:36:4a:
69:f3:7b:b5:0c:28:f4:e9:9f:6e:23:19:98:4c:db:1d:15:c0:
79:2f:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:09 2026 by rpki-client