Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/KfCvlR8vu0qoz40NwG_o9ivr0L0.asa
File: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (raw, json)
Hash identifier: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=
Subject key identifier: 29:F0:AF:95:1F:2F:BB:4A:A8:CF:8D:0D:C0:6F:E8:F6:2B:EB:D0:BD
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019C9A68857765E98D29EC7507850FA7F01E
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/KfCvlR8vu0qoz40NwG_o9ivr0L0.asa
Signing time: Thu 26 Feb 2026 14:44:26 +0000
ASPA not before: Thu 26 Feb 2026 14:44:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34040
Providers: AS: 16019
AS: 29113
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:68:85:77:65:e9:8d:29:ec:75:07:85:0f:a7:f0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Feb 26 14:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29f0af951f2fbb4aa8cf8d0dc06fe8f62bebd0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:bf:2e:2c:53:06:b6:be:29:43:3b:71:ba:
e7:47:a0:a2:88:e5:b3:df:6e:8f:d6:6c:09:8a:46:
e8:3c:00:48:27:b2:3f:c4:ce:ee:13:19:8f:e6:87:
23:78:d3:a6:be:7d:51:d8:7b:de:ca:3b:be:cb:09:
57:3a:38:b1:30:38:3d:c9:b2:73:ff:71:8a:1d:01:
c9:49:7b:58:7a:24:04:4a:2e:53:2f:96:6e:48:1e:
75:a3:61:2e:63:c2:e1:ea:a0:cd:07:be:c3:2f:a0:
d6:6d:35:9a:d0:41:9f:17:37:2f:8d:bf:18:fa:c6:
e5:b2:8e:76:aa:23:da:ae:a9:03:64:72:d5:a7:2a:
4d:9d:d0:46:82:17:ac:89:3c:a2:b9:61:d3:c3:8e:
d9:3c:2e:ff:9a:6c:cc:7a:b6:72:9e:06:23:c7:5c:
30:a2:09:4d:f6:69:9e:b6:1a:49:57:44:9f:04:61:
66:98:90:28:f5:20:65:b6:8c:50:af:84:87:13:6f:
f5:a0:bc:5a:24:f6:a9:c5:5e:1a:53:ec:9c:11:9a:
a8:be:c4:2d:21:57:c8:96:6a:9b:6a:ad:4b:ab:2d:
1a:fb:9c:2d:e2:f1:44:0a:3f:c1:fc:e4:7f:19:30:
63:ff:54:2c:4a:25:37:84:0b:27:4b:db:53:24:dd:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:AF:95:1F:2F:BB:4A:A8:CF:8D:0D:C0:6F:E8:F6:2B:EB:D0:BD
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/KfCvlR8vu0qoz40NwG_o9ivr0L0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34040
Signature Algorithm: sha256WithRSAEncryption
1a:54:a6:e8:a0:29:b1:15:ea:52:bf:24:85:59:40:f8:f1:56:
18:19:9e:e7:d4:fc:99:00:55:c0:c7:58:c7:e5:ca:9f:83:6a:
25:51:ba:24:35:d0:0d:eb:8a:2f:97:ca:c1:61:82:bf:93:3f:
2e:d1:19:38:71:07:f5:c0:fb:6b:fb:00:cc:3b:58:e5:83:30:
35:49:cd:93:d4:1a:32:9d:3a:e0:36:fb:29:49:66:21:17:d1:
72:4f:b1:f0:ea:bd:ca:88:4c:c6:ca:dc:49:be:8d:b5:e3:b1:
b2:1b:54:d7:bf:7b:73:56:4c:41:03:97:0d:3f:3f:7c:ab:c6:
3f:19:3b:95:01:49:dd:6c:15:83:d9:a6:90:82:96:ba:88:ba:
98:08:7b:db:c0:ee:20:81:1e:27:c3:ba:f2:58:1d:a6:9a:36:
ad:3a:e0:fb:a2:76:2d:fa:55:4f:4b:93:c4:99:34:f2:c2:ae:
37:60:3d:af:b1:04:a5:ba:28:e0:f8:a2:e7:e3:c3:32:a0:4b:
de:89:7f:8a:3f:9a:8a:88:57:df:39:04:2f:bd:a8:74:51:2e:
49:2e:89:4c:89:c1:49:6e:41:81:e1:6d:0a:7e:56:d2:fe:45:
13:77:4d:de:4e:1f:a4:ec:6d:07:0c:a4:bd:98:c6:27:a8:86:
67:75:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:14 2026 by rpki-client