Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa
File: 690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa (raw, json)
Hash identifier: PpmrZ0y4OmHYRlFtG+Q32uLuVImrpYxd2geJcOWhBFs=
Subject key identifier: EB:DD:1A:F0:21:CD:FB:84:3D:B5:A5:08:77:10:89:EA:3F:7F:36:AD
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 019FA339AF2F66700358CB605CE8778A5E3D
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa
Signing time: Mon 27 Jul 2026 10:58:14 +0000
ASPA not before: Mon 27 Jul 2026 10:58:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 38942
Providers: AS: 5617
AS: 20804
AS: 29535
AS: 48626
AS: 50607
AS: 62047
AS: 201054
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:39:af:2f:66:70:03:58:cb:60:5c:e8:77:8a:5e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Jul 27 10:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebdd1af021cdfb843db5a508771089ea3f7f36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:cb:f6:09:7b:20:ea:95:bd:60:89:07:d7:
08:27:f9:92:b8:41:07:9b:38:8b:82:b1:64:f8:4d:
3b:31:df:61:40:57:b8:62:d2:13:44:27:94:3c:60:
7a:f5:77:2a:eb:38:d3:d0:c1:f5:1d:3f:69:3d:d2:
8e:ac:bf:34:4c:f5:3d:29:88:cb:10:6a:c7:6a:92:
c2:30:b4:71:59:5d:e1:e2:6a:0f:c0:82:21:d2:9e:
89:0d:b1:8b:22:04:39:ce:48:44:19:60:bf:7b:11:
bb:55:25:e9:84:11:d6:ed:b3:43:a1:ed:c3:e1:ec:
50:01:63:0c:62:99:b1:20:96:ee:a8:46:10:68:03:
bf:c3:96:4f:1f:95:b3:c9:75:3b:cb:96:0a:6a:a4:
75:59:ff:f3:b8:72:2b:5c:75:a6:93:f5:1e:3a:4a:
ca:11:8a:14:09:a7:c3:a1:ae:9b:6c:39:fa:0c:47:
d9:22:94:7f:76:df:b3:67:50:3e:a1:e4:36:b6:39:
15:da:2a:79:3c:df:04:f8:58:38:ba:1a:32:3b:1e:
36:b1:92:4d:b2:dd:c3:09:64:05:c2:dd:9b:c9:03:
bc:cd:3d:ac:eb:a0:75:4e:c3:e7:57:7e:6d:36:a6:
ea:e4:63:c5:72:8a:63:5f:0f:75:4b:2f:91:c8:6d:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DD:1A:F0:21:CD:FB:84:3D:B5:A5:08:77:10:89:EA:3F:7F:36:AD
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/690a8CHN-4Q9taUIdxCJ6j9_Nq0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38942
Signature Algorithm: sha256WithRSAEncryption
7e:ba:03:c0:f2:b1:5f:1f:7c:de:d3:7c:18:fa:6f:77:52:94:
4a:dc:5f:d0:27:31:73:ff:a4:a6:56:11:4f:81:eb:0e:23:50:
64:54:74:e9:73:6d:19:8e:5e:5f:a2:d5:56:56:b9:b2:96:2a:
88:90:8c:8f:d1:5f:e7:ca:94:ab:02:29:9d:d2:84:80:d6:15:
82:f6:08:c0:9e:bc:62:c1:ab:3b:c7:2c:f3:e6:d9:5f:10:ed:
58:9f:87:9e:38:80:38:42:3b:18:82:c6:80:9a:a0:41:33:78:
ec:04:7d:2c:43:9f:8c:01:8e:69:2b:07:fa:9a:53:17:4b:99:
d8:2b:a7:7a:46:1c:35:a2:9a:77:84:8a:77:1f:35:ac:42:1a:
c8:cb:3b:51:5d:7a:7c:dd:65:f8:db:6b:ac:26:e8:d6:28:4c:
6d:ef:61:2b:df:ea:c1:dd:f0:91:f0:88:69:5e:f0:e0:a5:01:
d6:36:bc:a3:05:2b:f7:50:08:e5:62:5e:14:ad:8a:1b:31:e8:
2b:a9:d2:8e:af:ab:f0:c0:96:7f:24:01:84:76:a1:19:54:2f:
04:dd:eb:d2:15:9b:ff:7b:71:41:52:30:df:f8:75:6f:ef:6f:
17:a7:fc:83:e6:21:7d:ab:5e:a0:25:3d:48:e6:b4:9a:bb:d5:
1a:d0:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:47 2026 by rpki-client