Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa
File: NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa (raw, json)
Hash identifier: wbUaskZvxVYhABFMYZHgXLXqscELVMuo7ua+/E/mtdY=
Subject key identifier: 36:43:91:4A:5A:6C:37:34:CD:7F:86:2E:E9:B3:48:F6:AA:D5:DB:14
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019D8AF1DE1D8A4A09F10110C3D16141CC69
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa
Signing time: Tue 14 Apr 2026 07:43:20 +0000
ASPA not before: Tue 14 Apr 2026 07:43:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29405
Providers: AS: 174
AS: 1299
AS: 3257
AS: 3356
AS: 9002
AS: 199803
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:f1:de:1d:8a:4a:09:f1:01:10:c3:d1:61:41:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Apr 14 07:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3643914a5a6c3734cd7f862ee9b348f6aad5db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:0e:fe:dc:e6:56:18:37:fb:5f:04:5e:c7:
e8:9c:69:f0:d1:3c:91:39:68:ca:bf:d6:56:81:50:
f3:59:e4:3a:de:55:6b:95:22:6e:c5:42:58:c3:b9:
2b:89:fd:81:c8:43:59:fa:6f:eb:e9:13:6c:ee:35:
d2:54:ad:e7:e8:3b:36:81:fd:38:aa:cc:e3:e5:30:
44:c4:bc:97:fb:e8:9d:11:04:4b:12:4e:98:5b:0d:
13:42:ae:36:11:dc:9e:d4:96:85:6c:2d:c9:ae:ec:
48:eb:f9:e1:09:ce:6c:5a:df:48:d5:ba:b2:8f:69:
d5:cf:da:52:2e:10:a7:36:47:20:ff:96:db:0b:44:
a2:a2:f6:ac:86:cc:3f:18:44:7b:d8:7a:fc:04:22:
72:26:d9:27:ee:b5:31:3e:23:6c:62:c0:6c:ca:62:
d5:ba:a5:a6:fc:28:a7:cc:ec:92:24:4b:02:e8:00:
56:01:73:0d:2f:6a:c0:be:e1:f4:83:b5:18:18:89:
a4:5f:10:43:0a:bb:3b:ab:a6:c4:58:df:43:c9:a5:
f9:23:94:4b:c3:00:3c:89:de:b0:b0:0a:b7:55:cc:
d3:41:49:5a:e2:31:3a:fb:75:f7:43:06:60:df:21:
ac:71:71:39:ea:7b:e2:9f:dd:b9:30:b7:27:5d:9c:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:91:4A:5A:6C:37:34:CD:7F:86:2E:E9:B3:48:F6:AA:D5:DB:14
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29405
Signature Algorithm: sha256WithRSAEncryption
8a:91:05:ca:b6:d8:58:2d:74:f3:c4:5b:51:82:0f:50:9d:f3:
e7:e8:79:44:8a:db:0a:83:fc:47:2e:a4:b6:ff:a4:05:35:c9:
9a:30:ea:38:7a:cb:66:b5:ef:2f:c6:f8:4a:68:15:ac:cc:87:
be:57:df:13:7d:2f:14:ae:24:d2:53:a5:33:48:cb:47:07:26:
87:d6:a3:68:b3:ca:95:e5:59:71:7b:02:da:13:d4:e8:96:bf:
6c:dc:9f:46:14:a6:d8:be:17:00:25:13:c5:a7:a6:88:81:2f:
ae:32:bf:38:01:1b:22:15:26:67:20:be:f1:d7:cb:44:0c:03:
68:ac:3b:29:8f:79:5d:86:7d:8b:e7:ee:6a:68:3a:a7:c5:df:
c9:7a:d8:76:b0:68:e3:8b:0b:6c:62:a6:4e:b1:1b:c5:cf:2d:
1d:7b:c1:30:6e:23:8d:0f:21:79:dd:10:f1:9a:47:f8:e7:24:
e6:b6:30:47:c4:d3:f7:09:06:d4:aa:89:ac:65:28:8e:e2:e0:
ed:d0:50:d9:49:e7:fb:5b:75:66:75:35:24:27:c8:81:07:3e:
a1:26:e0:7d:f0:86:0f:24:b8:d3:54:49:4d:36:a0:8f:f3:c0:
86:2e:ec:af:af:37:31:62:e0:f0:41:d0:41:f5:8f:04:35:a1:
9c:c3:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:11 2026 by rpki-client