Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/4kefMU7_dHh0pjF04I0GNuOZzgw.asa
File: 4kefMU7_dHh0pjF04I0GNuOZzgw.asa (raw, json)
Hash identifier: Dg793cyO+GCKIEjFm8zI8tkDaVZ6JxafokaSOxdxvjg=
Subject key identifier: E2:47:9F:31:4E:FF:74:78:74:A6:31:74:E0:8D:06:36:E3:99:CE:0C
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 019FA90FD2AA54B4D4946F63F6749641CD2C
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/4kefMU7_dHh0pjF04I0GNuOZzgw.asa
Signing time: Tue 28 Jul 2026 14:10:14 +0000
ASPA not before: Tue 28 Jul 2026 14:10:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219240
Providers: AS: 35661
AS: 40994
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:0f:d2:aa:54:b4:d4:94:6f:63:f6:74:96:41:cd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Jul 28 14:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2479f314eff747874a63174e08d0636e399ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:d4:7f:1d:37:c1:40:c9:27:fb:77:ec:0f:
9d:ea:c7:da:b2:fb:96:f2:a6:d1:28:d3:ae:4a:a9:
42:15:e0:40:ff:39:22:c8:08:2a:04:94:95:65:40:
61:66:62:40:f2:2a:5e:24:b2:20:54:88:da:eb:6f:
97:e1:f2:79:aa:de:5e:58:a1:78:b9:20:c9:6d:23:
98:68:2c:fd:48:d6:23:0f:a6:82:c2:c2:d1:98:eb:
c4:b0:53:7b:e5:13:07:67:80:89:80:81:b0:8e:d9:
83:43:9b:90:04:01:b4:0b:a7:7a:24:65:cf:6b:61:
69:23:a7:a0:a0:37:dd:54:22:b6:da:72:c3:74:a3:
84:5c:0b:ad:74:ac:c8:74:75:6f:86:e0:cc:cc:34:
51:07:01:6a:4a:a8:54:77:53:99:ac:60:f6:a4:7d:
6d:9e:1c:cd:dc:18:0f:16:d4:5f:67:e1:47:88:43:
04:16:aa:28:db:27:09:a1:dc:0b:c2:5d:f9:7e:73:
a1:5c:3c:0c:97:47:a7:28:b1:4a:38:14:58:cf:da:
7c:8c:c9:19:bd:50:50:f4:89:50:fc:32:8b:f6:8e:
f7:b4:28:b4:a4:a4:99:04:45:ed:99:1a:31:3e:af:
10:0f:23:7e:43:40:12:57:61:1e:fe:3e:eb:90:1f:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:9F:31:4E:FF:74:78:74:A6:31:74:E0:8D:06:36:E3:99:CE:0C
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/4kefMU7_dHh0pjF04I0GNuOZzgw.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219240
Signature Algorithm: sha256WithRSAEncryption
92:ff:6b:14:7d:22:0c:e3:a3:d4:b8:22:b0:6e:47:22:67:56:
4c:df:a0:26:b4:f7:a2:00:bf:c7:b3:bb:c8:f9:67:6a:4b:68:
63:ae:28:5d:c1:17:9e:37:3e:a0:7a:f1:25:1e:73:12:5b:22:
72:19:a8:69:01:a7:c5:b0:65:f6:08:0b:7e:68:35:ac:0b:b0:
70:6a:1a:ef:bf:87:a8:a0:ce:00:59:76:91:5b:c6:b7:ac:50:
ac:35:7e:c7:b9:17:da:ac:fa:48:36:31:18:cb:9f:7b:fa:48:
fa:2c:db:15:67:e1:de:51:47:ef:4d:cb:f2:73:fd:1f:ab:d3:
4a:00:3d:a4:d1:0a:d0:b7:f3:63:f8:55:c1:09:9b:55:4d:5f:
e4:56:ff:f8:96:3e:d1:c4:c1:6e:71:e2:11:3c:01:29:4f:20:
5e:1a:79:3d:d4:b1:e5:60:99:94:77:08:b9:9d:12:f3:fc:46:
5d:b0:9c:3d:02:4c:91:03:fc:7f:14:da:74:73:bd:97:f2:5f:
ee:a5:e2:58:d0:9a:67:2c:aa:e8:ec:c5:26:58:ce:63:1c:fe:
9e:5a:a9:37:e3:71:de:cb:5c:c9:1e:65:dc:cd:ba:97:52:34:
22:2c:8e:8e:dc:f3:01:cf:a9:2e:76:ff:2f:6c:15:f3:d9:df:
76:26:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:44:08 2026 by rpki-client