Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa
File: IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa (raw, json)
Hash identifier: w9lR4ON+b59p837ru2OLVhKsOC/JMVjvCSI6iRqeFUs=
Subject key identifier: 20:70:1F:31:8C:48:14:9D:A9:99:C1:D8:8E:E3:25:03:B3:68:3D:08
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019C918399E11D293EE54E6EC13F05165B11
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa
Signing time: Tue 24 Feb 2026 21:17:26 +0000
ASPA not before: Tue 24 Feb 2026 21:17:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 59970
Providers: AS: 6830
AS: 39392
AS: 47232
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:83:99:e1:1d:29:3e:e5:4e:6e:c1:3f:05:16:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Feb 24 21:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20701f318c48149da999c1d88ee32503b3683d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:da:17:fe:91:30:a1:89:fc:19:7e:6d:2b:
1a:a7:24:a0:18:8d:a9:02:66:bd:c0:22:ef:cd:05:
d0:31:ca:e9:82:b0:5f:66:0b:c0:7d:4b:71:7e:be:
2c:11:a1:a5:e3:b2:de:4d:44:f4:45:8d:18:13:d9:
8a:3c:d5:fc:70:68:08:d4:0a:48:a5:e0:a8:bc:40:
cb:ce:27:bb:4e:ae:c4:82:5b:1a:d4:b4:8a:5d:64:
d1:51:ac:be:c2:26:31:30:a0:f6:35:d6:d6:89:fb:
ae:75:b8:38:1a:fb:1a:8e:35:61:48:ef:a1:37:6a:
84:56:89:fb:55:f3:bc:64:32:16:bc:f5:62:d8:06:
1e:24:b5:8f:37:f5:ee:b4:0e:7b:21:4a:c1:37:13:
26:cd:46:bd:d5:26:c9:af:0d:ca:54:58:3c:16:88:
f0:a7:d2:52:bc:91:e7:15:b8:c7:7c:59:ac:9d:07:
de:27:0b:67:c5:d7:5f:59:f3:9e:11:b0:af:a8:f4:
a8:20:0e:7a:d9:a7:2e:a7:84:78:7f:f0:dd:af:31:
bb:26:79:b1:d6:be:9d:26:6b:64:30:ef:7a:fe:ce:
1a:7d:b6:d1:5c:11:e3:00:29:2b:ad:df:1c:7e:fb:
a9:98:ba:28:69:78:3e:4a:12:cc:56:bc:72:73:ae:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:1F:31:8C:48:14:9D:A9:99:C1:D8:8E:E3:25:03:B3:68:3D:08
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/IHAfMYxIFJ2pmcHYjuMlA7NoPQg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59970
Signature Algorithm: sha256WithRSAEncryption
23:54:d7:3e:d2:b8:5c:d9:de:cb:16:33:b0:d9:91:21:fa:60:
82:10:68:d2:de:11:32:03:72:44:ba:7f:d8:56:44:c9:9f:c3:
29:1d:5f:26:77:38:b2:0b:44:3c:25:78:4e:fe:2a:02:e1:5e:
df:50:2f:e2:49:41:6b:81:fb:eb:4e:ab:d9:e9:1b:88:69:59:
93:05:61:2c:5c:d0:70:88:b7:04:18:a2:bf:d5:f4:fd:94:34:
68:8d:96:6f:d8:a4:47:00:36:02:0f:3c:bd:54:10:3e:c6:e0:
61:86:36:04:ff:3d:a0:51:de:d1:84:14:d8:ba:67:8e:27:0f:
08:5d:f3:3a:e8:b3:ed:6b:bd:ed:43:ac:38:e3:6b:99:d2:75:
35:f8:c7:d3:0a:d3:af:38:a3:69:1d:f8:f9:0b:ba:59:8f:3a:
81:8c:2c:60:a6:63:0d:4c:32:a3:7e:a8:6b:94:68:a2:d4:84:
bc:48:d8:88:25:5c:48:9e:09:3a:35:ab:20:4e:d3:01:3d:dd:
4c:20:26:4c:ac:5d:6b:87:69:ee:9f:b7:56:38:1d:86:21:20:
52:0a:5d:04:d5:7a:c3:25:cd:aa:39:e4:6d:4a:93:54:cd:7e:
8c:ed:a1:48:6f:c7:bd:b0:29:1e:0d:5a:d9:6f:89:de:74:3e:
05:97:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:31 2026 by rpki-client