Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/Xr8HVCskQg6xun5prnCIzcZjkDo.asa
File: Xr8HVCskQg6xun5prnCIzcZjkDo.asa (raw, json)
Hash identifier: cbQLfUVcOltrT3hKriMzYIhs+4k54zFLAF9idDihC80=
Subject key identifier: 5E:BF:07:54:2B:24:42:0E:B1:BA:7E:69:AE:70:88:CD:C6:63:90:3A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 01A12F7E2614552EA06EBBC3FBF26D75721E
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/Xr8HVCskQg6xun5prnCIzcZjkDo.asa
Signing time: Mon 12 Oct 2026 09:42:38 +0000
ASPA not before: Mon 12 Oct 2026 09:42:38 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213317
Providers: AS: 25091
AS: 56987
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:7e:26:14:55:2e:a0:6e:bb:c3:fb:f2:6d:75:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Oct 12 09:42:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ebf07542b24420eb1ba7e69ae7088cdc663903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:10:d5:d2:69:d7:41:bb:31:3c:ce:5f:a6:
04:04:1c:2d:50:be:9e:94:81:6b:ae:52:42:e5:59:
c6:f3:9f:b6:09:2e:89:bf:79:44:d1:8b:d8:e6:58:
e8:d2:c4:83:d3:78:f2:73:23:36:53:17:88:74:ad:
ae:7e:1d:7f:51:16:6f:55:9b:b3:c2:ed:5a:5c:48:
f7:34:c1:0b:c9:52:2b:6c:b1:6f:69:db:90:78:ca:
bc:fb:65:ed:8e:07:2e:75:45:08:87:ec:3e:46:01:
41:67:92:04:52:5a:49:fe:13:0c:e5:b8:e6:44:96:
60:ba:7a:e8:32:e5:0b:19:6e:c0:1a:a4:39:f8:be:
34:a9:4f:d1:97:9d:07:3d:a1:53:f1:06:c6:31:35:
ac:af:ca:c0:16:4a:2f:e8:f6:11:fe:26:60:49:13:
85:43:b4:7b:91:f7:74:9f:3d:ed:d7:61:c5:35:7c:
38:2f:f0:fb:bc:ce:84:eb:fa:64:53:26:cf:86:8f:
78:71:a5:6e:3b:48:8c:69:26:43:38:7b:68:6c:91:
13:92:46:7e:4e:b4:3f:f7:0c:16:48:26:fa:d8:b2:
b2:19:44:24:ab:d1:85:14:51:bc:fa:63:26:45:82:
14:20:bb:3a:e9:80:80:c1:21:50:bb:b1:e4:71:88:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:07:54:2B:24:42:0E:B1:BA:7E:69:AE:70:88:CD:C6:63:90:3A
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/Xr8HVCskQg6xun5prnCIzcZjkDo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213317
Signature Algorithm: sha256WithRSAEncryption
22:f3:33:11:40:65:d7:0c:63:67:39:5f:87:37:77:1f:14:51:
91:8c:ea:a0:d4:68:9c:44:e7:f4:d5:69:16:d8:ca:d5:de:d3:
ca:bc:ac:f9:b9:73:1a:f4:c0:69:2c:c9:8e:fd:60:15:fe:12:
c3:3f:00:99:eb:40:c5:d4:b8:a7:b6:d5:2a:e7:42:0e:87:c7:
e2:c7:ef:56:4e:cf:a8:55:4c:29:cc:a1:92:79:f8:b3:be:90:
48:e9:e1:9e:a4:a5:d7:67:0a:57:fe:f0:0d:83:2f:4e:02:37:
3e:15:f3:98:96:9c:2c:65:52:c0:81:9c:37:3c:13:35:14:53:
31:82:a0:44:04:9c:55:ed:1f:bc:90:91:8e:c8:b4:95:fb:a8:
9b:b0:b4:ca:c5:13:4c:ff:20:76:44:cf:79:ca:ae:38:5f:eb:
df:da:2d:67:81:e9:aa:4b:c0:7f:1f:07:a4:9b:e4:7b:17:02:
8f:d8:e4:41:ad:73:7c:31:c1:43:b8:0f:90:a3:e0:a7:54:19:
e4:f2:03:a0:e3:dd:1c:8f:5a:fe:06:50:70:01:3d:87:3d:47:
11:9c:5b:9e:4e:af:aa:aa:45:bd:ce:08:0a:ea:b8:60:6e:eb:
d9:30:59:08:3f:9e:7b:ee:c6:36:9b:35:d5:25:9d:4c:11:d2:
60:f0:cc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:43:11 2026 by rpki-client