Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/unh_o8NIvrMgt45E_3KPTeBDvfE.asa
File: unh_o8NIvrMgt45E_3KPTeBDvfE.asa (raw, json)
Hash identifier: lQg1Z82pM+Spelst7TD4At4EkcBZ5HEieO0Rhy9jfbA=
Subject key identifier: BA:78:7F:A3:C3:48:BE:B3:20:B7:8E:44:FF:72:8F:4D:E0:43:BD:F1
Certificate issuer: /CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
Certificate serial: 01A08A92D41D7527B89FED04E100E4AE316F
Authority key identifier: 19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/unh_o8NIvrMgt45E_3KPTeBDvfE.asa
Signing time: Thu 10 Sep 2026 09:07:53 +0000
ASPA not before: Thu 10 Sep 2026 09:07:53 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 210699
Providers: AS: 34872
AS: 35661
AS: 198831
AS: 215114
AS: 399486
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:92:d4:1d:75:27:b8:9f:ed:04:e1:00:e4:ae:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
Validity
Not Before: Sep 10 09:07:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba787fa3c348beb320b78e44ff728f4de043bdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:f5:c6:e5:83:2f:54:96:6e:e6:78:88:c0:
f4:4a:a5:4e:99:b0:f1:1d:6d:80:49:7f:47:1c:5a:
b7:ed:8f:c0:39:7b:2f:b3:ce:2e:9b:a4:34:3b:dc:
21:44:b7:73:ac:b3:29:08:68:cd:18:a4:17:df:9d:
13:c7:45:f9:75:8e:3d:7f:a3:55:7f:a3:25:e2:f8:
6a:6b:b2:d3:1b:c7:ed:47:af:5e:7d:0c:1b:ac:98:
9f:d0:63:58:dd:e7:79:86:e4:4b:dc:d4:51:13:9f:
c6:ab:2d:66:54:e7:ed:66:80:4c:50:9b:18:c9:f1:
97:63:8e:72:a2:a4:42:cb:99:90:1a:95:2c:14:bd:
5d:00:cd:58:5c:a7:f9:20:2f:67:16:72:f5:7e:2b:
7f:c4:0c:1c:a6:78:6b:4f:ee:8b:5b:e2:f2:05:f5:
1b:79:10:c7:82:54:67:e6:f7:17:ba:ae:a4:db:ec:
8f:3d:28:43:3e:a5:0c:b7:bc:a0:f8:da:14:9e:96:
4e:af:7b:91:05:99:18:b5:58:46:7e:5e:2f:94:f0:
67:0b:83:ff:cb:c8:60:f8:fd:db:f2:9e:e6:46:36:
ec:fc:3c:c1:19:91:d1:0a:c8:95:e1:f2:b9:29:79:
41:7b:3d:7b:68:49:c4:31:08:15:87:06:91:ff:27:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:7F:A3:C3:48:BE:B3:20:B7:8E:44:FF:72:8F:4D:E0:43:BD:F1
X509v3 Authority Key Identifier:
keyid:19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/unh_o8NIvrMgt45E_3KPTeBDvfE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210699
Signature Algorithm: sha256WithRSAEncryption
63:3d:01:13:4d:37:9b:2a:b0:fc:3c:d7:65:ba:a9:9d:e2:6a:
7c:49:ce:39:fc:16:3c:83:51:69:7a:fb:b4:73:84:13:89:37:
42:8d:f8:bc:fb:c1:49:ac:9d:38:9c:04:c9:a1:20:96:c9:2c:
7c:64:7f:2e:9b:99:4a:f9:8f:8b:96:5c:37:0a:17:c8:5a:d9:
87:24:78:23:48:a4:fb:86:32:a8:70:8e:11:30:fc:72:24:fe:
5c:22:03:df:91:8d:91:b2:e6:c1:fa:e9:19:12:e6:e0:54:89:
c6:2b:40:8b:99:78:6e:1f:2e:5b:4c:55:ee:94:97:4e:f5:88:
98:21:a2:1b:ed:e8:c5:01:14:55:c1:83:06:3e:b0:67:ef:0a:
50:af:ce:89:1d:c2:a0:d5:ff:d1:7e:c3:6f:0a:e2:2d:a6:f5:
a7:81:fc:ad:b0:70:94:4b:da:ab:c0:a4:60:a1:7f:ca:c7:39:
25:d0:f9:5c:5c:00:c1:68:03:79:8d:a9:1f:6b:a1:1f:7d:b2:
d8:33:86:00:5f:d7:96:db:dd:1e:ac:d3:b1:8d:4b:f1:8d:3b:
72:17:c0:b8:44:07:93:26:13:00:be:75:d2:6d:ba:16:8e:9d:
76:24:a3:5b:35:b8:31:61:49:e4:12:71:6a:f5:4b:f3:37:73:
2f:63:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:51 2026 by rpki-client