Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/Ke8dRoJirH5sttFYCwiO0qmo8d8.asa
File: Ke8dRoJirH5sttFYCwiO0qmo8d8.asa (raw, json)
Hash identifier: 9z4rwbkYRmg1s501aTWgWzIblUDGnI/cKBSZyE4AZAU=
Subject key identifier: 29:EF:1D:46:82:62:AC:7E:6C:B6:D1:58:0B:08:8E:D2:A9:A8:F1:DF
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 019D760C70F9B0A48B4D7A791058E5D94DC5
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/Ke8dRoJirH5sttFYCwiO0qmo8d8.asa
Signing time: Fri 10 Apr 2026 06:20:20 +0000
ASPA not before: Fri 10 Apr 2026 06:20:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 49974
Providers: AS: 3292
AS: 43557
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:0c:70:f9:b0:a4:8b:4d:7a:79:10:58:e5:d9:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Apr 10 06:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29ef1d468262ac7e6cb6d1580b088ed2a9a8f1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:13:68:a2:c5:d2:03:3a:cc:a2:b5:3f:59:
e7:6c:36:25:1d:1d:02:db:9a:2f:bc:db:a1:49:59:
f4:f1:5b:6a:a0:e0:92:03:1a:4b:15:d3:7e:84:59:
71:3e:88:0c:7a:8d:fc:c5:e2:dd:bb:34:0f:d2:42:
5d:c2:5e:4d:21:17:cd:4a:82:bb:ea:e6:e9:ff:11:
3e:43:56:68:bc:d3:f3:ed:3c:ab:9c:a2:b5:40:d8:
6e:59:09:9c:59:a7:9a:c2:c2:98:21:de:cd:76:c6:
91:e4:6f:ef:52:d0:67:27:50:3f:34:7d:20:f6:8f:
c1:60:69:a0:78:bf:e8:fb:89:d5:0b:4d:ba:79:16:
02:9f:9b:dc:91:3a:4f:e0:be:3e:fd:86:6e:0e:74:
bc:bf:00:a5:81:24:24:78:08:a3:6d:84:14:79:4d:
4d:72:01:35:c8:74:58:7f:ea:4f:10:b9:62:1c:50:
d3:a9:b6:2d:70:03:78:0e:28:2c:de:56:d9:d4:54:
18:8d:50:5b:17:ea:da:2c:af:9d:9e:42:79:b3:ac:
ac:35:c5:9c:a8:1f:6d:6d:3d:bd:70:77:70:b9:c9:
a8:76:3e:1b:49:68:a6:e1:0a:c6:8c:53:a1:24:29:
6d:e7:3f:ea:b3:58:68:67:a1:e1:ba:71:4d:88:6e:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EF:1D:46:82:62:AC:7E:6C:B6:D1:58:0B:08:8E:D2:A9:A8:F1:DF
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/Ke8dRoJirH5sttFYCwiO0qmo8d8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49974
Signature Algorithm: sha256WithRSAEncryption
00:49:09:39:1c:3d:31:68:ae:82:fb:b3:fd:48:cf:a9:4c:85:
68:9d:63:f0:0a:2a:a6:f7:2e:d0:4c:b3:49:b2:c8:5c:c8:7a:
81:35:49:c0:d4:dd:e0:dc:95:b7:3e:3e:6a:a1:9d:84:14:fc:
36:7f:42:4f:c0:b5:2f:e3:d3:d9:0c:1e:91:a7:74:65:d3:a2:
32:7b:e4:d4:1a:c0:a9:0a:01:40:c8:f5:c2:93:7e:d1:01:a9:
e9:62:d2:3d:39:0d:16:3f:f8:ae:be:06:df:b6:e3:f1:99:f5:
94:e5:e7:5f:7f:bd:5c:a1:9e:47:f4:77:3f:91:a2:45:de:2d:
63:61:50:39:8a:08:cc:ed:4e:22:15:8d:ef:ae:5a:ca:0d:85:
49:38:aa:43:c8:9b:be:17:4a:31:47:4e:a0:ad:fb:82:88:85:
e6:c7:68:df:23:b6:ed:8a:6b:63:49:ce:d2:64:b2:e9:4c:85:
7b:d0:48:71:ca:71:21:e8:f1:a1:bf:f7:58:15:14:8d:2d:64:
79:a9:22:5f:76:04:29:2e:3a:2d:b9:0f:b5:f0:ea:60:6a:c5:
44:2b:80:62:1f:fd:2a:cd:b6:75:df:ac:c0:9a:4c:7b:e2:46:
b4:45:ae:03:a2:e1:01:9c:3f:1f:38:70:43:20:4c:c8:76:ef:
96:57:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:36 2026 by rpki-client