Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/FMhSDB2bcbnNZRwsRENksHVKZ2w.asa
File: FMhSDB2bcbnNZRwsRENksHVKZ2w.asa (raw, json)
Hash identifier: OqqqK9AEW4hV2BzFVL2uOSThouiaUH9MYZU2kT9VKbo=
Subject key identifier: 14:C8:52:0C:1D:9B:71:B9:CD:65:1C:2C:44:43:64:B0:75:4A:67:6C
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019C2E658C1FD16E4284FCA27A476A23A66D
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/FMhSDB2bcbnNZRwsRENksHVKZ2w.asa
Signing time: Thu 05 Feb 2026 15:22:12 +0000
ASPA not before: Thu 05 Feb 2026 15:22:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34953
Providers: AS: 1299
AS: 2914
AS: 3320
AS: 5405
AS: 6461
AS: 6939
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:65:8c:1f:d1:6e:42:84:fc:a2:7a:47:6a:23:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Feb 5 15:22:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14c8520c1d9b71b9cd651c2c444364b0754a676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:18:6a:ad:0d:a7:ce:05:8f:46:50:ba:ec:
18:08:36:32:0e:7f:b4:0f:00:d7:7b:57:c9:d7:e1:
fe:13:53:8d:00:69:89:61:31:e2:2f:ad:d9:26:48:
3e:fb:27:18:fe:fa:61:4f:00:9a:11:be:25:0e:be:
14:f5:0f:18:c4:03:e5:ec:be:1d:6a:f8:29:3e:e7:
14:0e:5b:4d:1b:7f:41:c8:35:28:0e:bf:27:2e:21:
28:e3:92:da:6e:2f:d7:47:72:00:7e:8e:a3:e5:be:
b6:54:32:7e:7e:e8:da:b6:8e:2d:b6:c0:31:16:0a:
4d:51:13:b5:47:82:43:05:86:47:56:e2:9f:55:c2:
98:70:10:89:9d:46:90:e7:90:3b:c8:90:c1:46:e5:
ec:96:fa:01:37:32:29:d4:68:29:20:29:3f:87:e2:
fe:0d:3e:08:0f:0f:51:0a:4e:4f:9b:91:86:3e:b6:
e7:cd:fe:22:68:e1:45:c3:76:d9:fe:68:60:81:c7:
63:8d:c5:3b:92:1c:98:fd:04:b9:ba:47:fb:01:f8:
18:e6:fd:7a:28:5d:67:59:eb:b2:ef:56:69:5e:14:
dd:be:e6:d4:51:57:de:00:da:e2:e0:0c:f7:56:a5:
a7:c9:fd:a1:73:3e:fc:04:e6:95:c7:29:ee:af:7d:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:52:0C:1D:9B:71:B9:CD:65:1C:2C:44:43:64:B0:75:4A:67:6C
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/FMhSDB2bcbnNZRwsRENksHVKZ2w.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34953
Signature Algorithm: sha256WithRSAEncryption
a4:b3:9b:4f:74:1e:2e:80:23:98:fe:42:58:32:d6:3d:d6:c5:
92:d5:9e:cf:92:70:ee:73:fa:90:fc:f7:59:31:d6:ea:34:17:
09:73:fc:40:b8:95:66:9b:e7:88:98:bd:76:b5:1d:12:00:6e:
45:0b:db:03:d3:99:c9:c1:18:85:25:ed:9f:e4:3a:4f:cc:21:
f1:f6:fd:0e:8a:65:65:8a:f4:26:a6:20:a0:3e:6c:34:a1:25:
ea:ef:72:e4:7b:da:34:b7:2b:d7:b5:1b:fc:b8:2c:35:a5:c3:
a6:d1:da:cf:86:85:ed:0f:88:5e:d5:b5:46:43:c1:28:5f:ad:
75:57:6a:ed:71:6b:b8:97:ff:4b:77:d7:a0:ba:40:18:a9:79:
69:2f:69:ac:27:60:f1:09:1d:60:19:64:44:0a:15:88:dc:41:
16:ed:e8:04:1a:f0:30:17:75:7b:d2:44:ad:ef:20:1f:bb:37:
2e:82:04:49:55:75:f3:cd:a8:b6:3e:5e:06:4c:58:22:c0:87:
70:70:ac:2b:1e:54:48:4c:dd:cd:5c:eb:a5:48:17:58:15:17:
e2:5b:a3:86:38:44:2e:1c:ab:ea:9c:7b:20:d6:b2:5f:d0:4e:
7e:28:46:2c:ec:91:cc:2e:26:70:54:06:86:e9:78:a3:cf:1d:
44:f6:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:32 2026 by rpki-client