Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/HcMClhCRmKE60lpZDx5-BSB1cFo.asa
File: HcMClhCRmKE60lpZDx5-BSB1cFo.asa (raw, json)
Hash identifier: RaiOYBO+NLhX7PmnS7SoVK0FIJWQ+F4Nt0bFD9R8aRc=
Subject key identifier: 1D:C3:02:96:10:91:98:A1:3A:D2:5A:59:0F:1E:7E:05:20:75:70:5A
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 01A07C7D49462A410315A5152AF7B83C2E27
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/HcMClhCRmKE60lpZDx5-BSB1cFo.asa
Signing time: Mon 07 Sep 2026 15:29:40 +0000
ASPA not before: Mon 07 Sep 2026 15:29:40 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 203868
Providers: AS: 6939
AS: 8772
AS: 34927
AS: 41051
AS: 152368
AS: 205941
AS: 209533
AS: 210152
AS: 210475
AS: 212895
AS: 214481
AS: 214757
AS: 215685
AS: 219331
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:7d:49:46:2a:41:03:15:a5:15:2a:f7:b8:3c:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Sep 7 15:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1dc30296109198a13ad25a590f1e7e052075705a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:73:47:7c:ed:5d:4c:a7:42:c7:c7:02:b8:
24:10:c7:01:96:2a:34:14:40:76:cb:e4:da:74:2f:
55:5a:36:d9:d2:0e:0e:df:16:0b:3b:14:90:3a:ba:
11:f2:a6:ab:0b:93:74:1a:e6:a8:9d:21:8b:e2:fa:
96:5a:06:78:b0:d6:ea:89:1f:64:e3:65:0b:98:68:
d5:19:9f:af:bb:e7:24:46:60:ec:70:e2:5a:cd:72:
70:66:fd:b6:ce:bf:e1:73:e9:ea:5f:36:df:34:4e:
8c:7b:28:a4:ae:62:ce:26:be:c3:26:1e:c3:e1:14:
83:ec:4b:9f:18:4f:0b:fc:bf:f6:3d:3d:da:a9:d4:
9b:3e:49:65:ce:4f:c4:c7:c2:50:e6:f4:b5:59:07:
16:0d:07:44:7b:c9:be:c4:62:00:41:91:e3:20:1e:
69:92:db:40:d1:9f:59:6e:cc:03:6c:80:d9:24:ac:
5c:d7:f1:e9:e8:a8:4b:79:22:26:c0:dd:4b:d2:5a:
03:00:65:9a:47:8c:ba:1d:d9:05:5d:7c:f7:c0:8d:
37:0c:2f:07:fa:55:55:e6:f4:04:4e:86:aa:b9:cd:
a0:da:60:0e:5f:49:b9:cd:71:01:43:70:09:c1:f4:
83:84:8b:d0:c6:fd:e5:b5:5e:10:98:3f:47:f1:ed:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:02:96:10:91:98:A1:3A:D2:5A:59:0F:1E:7E:05:20:75:70:5A
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/HcMClhCRmKE60lpZDx5-BSB1cFo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203868
Signature Algorithm: sha256WithRSAEncryption
b4:99:92:36:79:19:4c:9b:12:96:76:4e:d3:cc:f5:e6:a7:c7:
81:4a:16:9b:14:38:4c:9b:4b:25:3a:29:9d:5a:f0:47:0c:d0:
5a:2f:bb:3e:60:a6:56:ab:74:d0:81:1d:bf:7c:c4:b7:33:d0:
f6:b2:26:fb:7c:60:3f:6c:29:8d:60:b9:51:bc:21:7a:ff:8f:
81:63:eb:6a:1a:ae:66:20:7b:57:62:a1:eb:9b:f6:c1:f3:c5:
dc:3d:3d:20:50:46:86:cf:85:24:d1:61:77:53:92:b4:99:36:
bd:4f:48:8d:eb:2b:b3:2f:e0:57:bc:32:67:67:2f:67:87:c0:
fa:f8:46:38:c2:b6:a4:db:02:09:a1:d5:74:5e:55:57:05:0e:
9d:67:77:26:58:5d:ec:02:92:24:3c:32:1b:89:3f:e5:05:d2:
cf:68:cd:76:b4:81:1b:35:bc:fb:90:ce:1a:e2:77:1e:b6:b0:
6c:bd:c5:81:50:49:e9:98:ad:65:73:dc:72:9f:47:28:6f:e0:
51:31:d7:7e:b2:d5:2e:f7:6a:20:93:a0:58:c0:0a:46:b9:7e:
77:78:dc:3a:f4:71:b7:d0:fa:e5:23:b9:90:6b:dd:72:20:47:
8b:c5:d7:64:fa:2a:c8:4a:90:f9:7f:05:a5:4c:28:44:76:72:
2f:d8:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:35 2026 by rpki-client