Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/KlzzYC8Q2UVlJx85f6zf8EkPNPg.asa
File: KlzzYC8Q2UVlJx85f6zf8EkPNPg.asa (raw, json)
Hash identifier: K23b9m4+V1oJoVx1ztFLX9QMWZu++2ah4sRiGDlVDmU=
Subject key identifier: 2A:5C:F3:60:2F:10:D9:45:65:27:1F:39:7F:AC:DF:F0:49:0F:34:F8
Certificate issuer: /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial: 019C8A39C304A65B909AE367478E1EB7B886
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/KlzzYC8Q2UVlJx85f6zf8EkPNPg.asa
Signing time: Mon 23 Feb 2026 11:19:26 +0000
ASPA not before: Mon 23 Feb 2026 11:19:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 60086
Providers: AS: 6855
AS: 42000
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:39:c3:04:a6:5b:90:9a:e3:67:47:8e:1e:b7:b8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Validity
Not Before: Feb 23 11:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a5cf3602f10d94565271f397facdff0490f34f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:0b:ed:66:5b:28:a9:16:9e:10:03:df:3a:
d9:dd:3d:e9:14:c6:73:c8:2b:26:7c:fc:7e:14:9d:
39:f1:4f:f1:d8:ce:06:94:5e:bd:de:d4:65:da:4d:
50:66:19:b9:be:05:c7:bf:ea:bd:de:af:e6:b8:dc:
e7:74:9e:0b:68:b8:7d:38:29:b8:07:03:43:c2:bd:
35:8f:64:40:5b:4b:92:97:d1:ee:b0:e9:7a:d7:26:
26:2b:5a:c5:c1:89:b0:03:30:e2:75:10:20:a2:0b:
eb:43:bf:98:29:72:b2:fc:47:f2:9c:a3:55:93:58:
8e:5d:af:ff:16:0b:5f:f5:ce:64:15:61:e9:2f:5e:
cc:0f:da:b5:92:92:32:6d:4e:bd:de:5b:77:90:48:
d3:d4:1a:ee:b3:20:62:13:59:d8:8c:e5:36:17:39:
f9:1a:0b:95:e4:be:9f:6e:29:af:d1:dd:85:d5:9e:
50:35:9f:9a:56:98:32:94:22:90:a3:47:28:ee:b1:
fe:7c:f5:67:dc:29:15:0c:81:5a:b1:8d:e9:48:d7:
21:34:58:81:d5:21:5a:a7:ae:00:43:df:ba:bb:c7:
aa:bb:ad:cf:35:9d:f1:91:37:9b:06:05:ab:4f:75:
ee:88:4c:3e:a6:ff:3b:60:b1:cb:24:5f:73:57:d5:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:F3:60:2F:10:D9:45:65:27:1F:39:7F:AC:DF:F0:49:0F:34:F8
X509v3 Authority Key Identifier:
keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/KlzzYC8Q2UVlJx85f6zf8EkPNPg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60086
Signature Algorithm: sha256WithRSAEncryption
bf:fe:5f:1b:ad:47:7e:25:cc:4b:36:b1:f9:13:e4:55:47:94:
aa:81:80:fa:50:19:84:11:8d:c7:3f:2e:2a:18:cc:1b:d0:0a:
0b:f9:6b:33:9a:41:17:a3:8d:96:1c:a2:2d:d9:db:12:60:1a:
54:4d:a4:cf:ee:69:26:88:93:51:c2:0f:6b:66:e9:90:ac:72:
2c:3f:b4:dd:60:4c:15:29:cf:9c:3d:f0:e5:ca:1c:10:7f:05:
78:7b:9e:a3:cb:d0:d8:3c:3a:91:be:47:cd:5b:c9:a4:ef:87:
95:76:38:3a:ad:fc:98:ce:69:e7:08:c2:ea:fa:af:39:28:b6:
bf:3c:1d:12:87:73:6c:49:59:7d:7d:df:37:15:54:99:d3:46:
83:36:dc:ce:0b:1b:d2:51:63:d2:14:a7:ea:ff:3e:58:48:51:
9f:be:3a:2a:d1:50:ed:13:1c:03:75:c7:11:81:92:59:87:04:
56:08:50:6d:06:97:87:be:51:dc:be:92:37:2a:e8:f3:8c:ac:
c3:05:e8:2d:28:96:09:18:3b:91:19:34:d0:72:35:d8:8f:ec:
1c:e1:50:46:6f:b7:0a:6c:da:0a:9d:34:3e:fc:20:32:18:4a:
40:a0:54:ff:bf:bc:9b:d2:39:6a:f5:ad:a6:b0:31:76:2e:4d:
7c:63:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:35 2026 by rpki-client