Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/upnWlRa5n55UGIS-uedbjFxnuTc.asa
File: upnWlRa5n55UGIS-uedbjFxnuTc.asa (raw, json)
Hash identifier: VoYN03JzVjSDUqUBzQyjBuxdD0CesiCZ5FDXvsUuaMM=
Subject key identifier: BA:99:D6:95:16:B9:9F:9E:54:18:84:BE:B9:E7:5B:8C:5C:67:B9:37
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019D8AD666E5BEDB9D3204C1B037614A2201
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/upnWlRa5n55UGIS-uedbjFxnuTc.asa
Signing time: Tue 14 Apr 2026 07:13:20 +0000
ASPA not before: Tue 14 Apr 2026 07:13:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205122
Providers: AS: 1299
AS: 2914
AS: 33185
AS: 35280
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8a:d6:66:e5:be:db:9d:32:04:c1:b0:37:61:4a:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Apr 14 07:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba99d69516b99f9e541884beb9e75b8c5c67b937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:9b:89:95:e5:74:b0:14:38:c1:0a:b2:e2:
0a:af:76:7c:a1:89:42:19:a5:8d:72:58:e1:a0:4a:
de:c0:c2:9e:f8:77:97:00:50:a8:22:ec:c5:ef:29:
38:f4:e3:18:53:9b:77:ab:95:dc:f8:5f:9e:0b:13:
d7:56:8c:b7:71:dc:58:77:30:20:e0:4e:c2:f3:82:
f5:da:bd:32:30:a1:4c:d0:f3:d1:15:de:d2:b1:39:
e7:14:02:d5:e1:35:7c:28:a2:c0:b2:e2:f6:b7:8b:
68:ae:61:ca:a9:33:b8:32:85:a9:8a:ff:1c:5b:27:
da:19:ce:e3:d3:0d:74:49:34:0a:4d:4d:5a:2b:56:
54:76:6b:9b:f6:f5:5b:5c:2f:72:4c:b2:50:85:8f:
dc:9a:6d:45:d7:b2:e4:45:c2:03:e3:f4:26:3d:a5:
07:14:48:e6:71:5f:5a:db:66:27:e0:f6:3c:41:43:
13:2e:4c:b2:f6:9a:5a:33:38:ec:4f:4c:99:85:da:
48:d7:38:37:b2:36:68:35:c5:39:1a:61:da:4a:43:
a4:23:78:27:bd:93:70:f7:03:f3:6e:2e:98:be:de:
46:15:21:1e:ff:e1:8e:a9:c3:86:ab:c6:87:c6:cb:
2b:68:30:8a:da:a1:aa:e7:97:82:dd:cc:e5:ea:7e:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:D6:95:16:B9:9F:9E:54:18:84:BE:B9:E7:5B:8C:5C:67:B9:37
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/upnWlRa5n55UGIS-uedbjFxnuTc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205122
Signature Algorithm: sha256WithRSAEncryption
1b:56:2b:e2:a3:e3:1e:48:96:b4:d4:3f:2d:72:12:fe:b1:5b:
ca:6e:54:1b:e1:1e:e7:d9:08:fb:e3:3a:24:44:eb:e6:23:10:
87:5e:fa:e7:22:66:74:22:1e:6b:bc:da:2c:81:0c:62:63:a2:
da:b0:43:25:11:21:7e:a1:47:6f:c9:51:69:02:21:58:fd:68:
4a:8f:60:98:e2:fb:7a:b3:f1:31:c1:80:9a:28:b3:8f:fc:3d:
a6:0e:3d:d8:fd:fb:f6:5e:f9:c0:44:23:8b:58:5d:8d:2d:7f:
15:18:16:5b:b2:b2:d0:a8:0c:bb:aa:ec:41:58:f6:43:aa:e8:
93:d7:35:ef:52:e6:46:28:5d:d7:3f:b5:d8:76:0a:9a:29:15:
a8:0e:0f:97:21:3a:43:ef:a2:3e:b3:50:5c:93:23:c6:cb:91:
7f:d8:c6:3e:08:1d:3b:5d:5e:e5:95:8c:05:14:c0:6b:55:a1:
f4:c5:3f:c6:2d:c7:4e:13:c4:e1:79:ca:81:90:6b:d7:81:24:
59:de:a2:94:b5:4b:63:02:04:8c:46:0c:df:bd:90:c9:0f:4d:
ad:cf:3d:f7:dc:d7:cf:94:47:f3:1f:4d:34:86:a3:ba:81:5a:
cc:1a:9e:1c:77:49:ee:ff:78:d5:c4:bb:e7:da:db:7f:32:e0:
f6:05:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:08 2026 by rpki-client