Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa
File: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (raw, json)
Hash identifier: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=
Subject key identifier: DF:32:2B:73:46:96:63:15:FD:74:A3:27:09:F3:8C:C1:03:DA:E6:DF
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 019D528FC0240A74EB43AFC9A339F5017FD6
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa
Signing time: Fri 03 Apr 2026 08:57:25 +0000
ASPA not before: Fri 03 Apr 2026 08:57:25 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 51346
Providers: AS: 3216
AS: 12389
AS: 17557
AS: 28910
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:8f:c0:24:0a:74:eb:43:af:c9:a3:39:f5:01:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Apr 3 08:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df322b7346966315fd74a32709f38cc103dae6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:d6:cc:65:09:5b:17:0b:34:98:4a:e8:8a:
ba:46:dc:91:ef:e7:64:66:a3:63:b1:31:59:f5:60:
e2:ed:28:6d:72:9a:05:26:0f:80:8c:51:cf:e7:3f:
70:49:55:36:30:1d:2a:30:ba:53:39:4c:95:37:61:
d5:46:1d:f0:dc:66:8f:80:c2:86:01:ee:87:7f:f1:
f9:57:8a:1b:19:86:65:85:b6:a5:61:c5:e3:82:bc:
c5:11:dd:5b:da:22:5a:83:9a:83:2c:9b:24:5c:53:
9b:e7:ac:4e:d7:eb:14:bd:8e:7b:a8:e0:41:85:d5:
91:de:66:5a:28:29:44:e9:48:66:5e:a0:75:50:e5:
97:1f:ac:9c:b0:0f:20:79:56:c8:35:2f:18:52:cc:
be:7b:c7:93:d9:31:b9:67:8a:ec:89:5b:ef:ad:1a:
6a:4e:a0:a4:85:d2:dd:06:4a:e9:1f:19:4a:2a:34:
70:55:61:bc:e3:db:b6:be:03:bd:75:47:69:67:a6:
b2:76:c9:7d:6b:d9:0e:b4:44:6d:67:7e:1a:d7:6d:
a5:d5:57:4a:72:3e:cc:84:96:08:f4:fa:25:0f:62:
01:5f:43:b0:46:85:96:db:8e:07:1d:34:33:bb:22:
8f:11:6f:fd:cc:71:15:04:e8:0f:1c:4d:a5:9a:25:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:2B:73:46:96:63:15:FD:74:A3:27:09:F3:8C:C1:03:DA:E6:DF
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51346
Signature Algorithm: sha256WithRSAEncryption
60:ee:99:b4:43:ff:9a:d2:87:f3:38:2f:c8:5e:6d:7b:1e:a2:
2f:36:e2:cb:04:bd:86:ed:2a:25:dc:1c:d3:27:41:b7:1c:04:
5e:1b:19:e2:af:c5:17:5f:32:2c:d8:21:bd:35:e8:52:87:84:
8c:42:05:c7:cb:b4:5a:2f:e3:0d:6e:0a:54:3b:3e:62:f3:fe:
7f:65:6a:bc:76:fe:b2:7b:a6:8d:df:24:74:35:f6:6e:1b:19:
95:8d:83:80:9b:9b:1f:90:e6:73:b8:3d:eb:6c:c9:04:d7:08:
de:c6:95:37:94:cc:55:c9:4a:de:cc:54:60:15:ac:fb:fc:95:
ad:c2:c3:61:2b:4d:8a:a9:3e:b2:f9:4f:78:cb:fa:8d:9d:9e:
5c:30:a7:dc:2a:40:0c:93:fc:e6:ce:03:cd:8e:8c:b9:07:a2:
b1:6d:41:78:88:74:09:58:c0:65:ac:9c:7f:bc:7f:cb:4f:4c:
b5:ce:be:0a:b3:a2:31:a8:1e:96:9e:fd:ae:e1:0e:80:5b:53:
b3:1b:dc:8d:59:da:34:f7:93:b2:58:ff:13:0a:9e:10:c8:f3:
95:f9:4f:82:fb:8d:a6:45:24:4e:a6:4e:77:12:98:2e:ef:a4:
09:21:df:11:16:b5:d5:66:b2:43:16:ee:77:ae:a0:f6:1c:5b:
89:bf:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:42 2026 by rpki-client