Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/Tfu-iHC5BstpfhPolGNfbxse7fg.asa
File: Tfu-iHC5BstpfhPolGNfbxse7fg.asa (raw, json)
Hash identifier: YEZ17YdmoGtQ82f52dQj0LGU10zUa6Zk7/Q1gmzCL9U=
Subject key identifier: 4D:FB:BE:88:70:B9:06:CB:69:7E:13:E8:94:63:5F:6F:1B:1E:ED:F8
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019F9B40F95DA58C26209F08AAC435B631DD
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/Tfu-iHC5BstpfhPolGNfbxse7fg.asa
Signing time: Sat 25 Jul 2026 21:49:14 +0000
ASPA not before: Sat 25 Jul 2026 21:49:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219172
Providers: AS: 16276
AS: 23470
AS: 24875
AS: 44620
AS: 51722
AS: 210814
AS: 211421
AS: 212027
AS: 215120
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9b:40:f9:5d:a5:8c:26:20:9f:08:aa:c4:35:b6:31:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jul 25 21:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dfbbe8870b906cb697e13e894635f6f1b1eedf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:ba:94:46:44:49:e7:6e:10:9d:34:ff:22:
e4:e1:eb:1e:fd:c8:54:4d:0d:ee:28:d0:9a:df:9b:
47:c2:92:fd:21:f8:6c:c5:9f:ea:76:fe:d8:ff:7a:
3d:58:97:c2:7f:c8:c6:4c:82:39:bb:df:bc:9b:de:
07:da:1b:cd:66:ec:ec:0e:1a:e9:1a:b3:b6:30:6a:
05:4b:01:68:c7:ff:7b:09:7f:22:5f:ab:73:15:14:
f8:38:9f:f6:32:4f:99:30:c9:a8:f0:ac:03:02:6b:
05:3c:5c:68:3f:f9:16:1d:84:54:79:eb:1c:f9:de:
87:1a:be:03:de:6e:dc:ce:52:ac:21:7d:3a:26:a6:
27:7f:c7:b5:66:e6:82:81:8a:86:58:49:33:c9:0e:
fe:5e:70:15:06:73:31:13:42:40:af:c3:15:60:b8:
4e:cd:30:93:d2:97:e9:da:f5:f5:d8:ad:0a:be:c3:
85:bf:bf:85:2d:dd:35:47:43:b2:7e:97:95:e8:4d:
9e:fb:c7:07:60:4a:6f:94:c6:7a:ac:c9:f7:1f:2a:
b7:95:cf:55:e2:2b:5b:e2:90:bf:b8:02:62:92:80:
0e:06:f4:9d:02:24:3c:98:e4:c6:35:41:57:2e:05:
8e:0f:15:85:d8:1c:b9:cd:5e:84:61:f4:ca:22:95:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FB:BE:88:70:B9:06:CB:69:7E:13:E8:94:63:5F:6F:1B:1E:ED:F8
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/Tfu-iHC5BstpfhPolGNfbxse7fg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219172
Signature Algorithm: sha256WithRSAEncryption
7b:dc:2c:40:1b:5c:16:09:d0:9c:11:cc:a3:de:df:c9:38:ab:
46:81:08:fc:64:5a:f2:e2:62:91:40:88:57:8e:99:b7:9d:07:
54:55:95:fe:6e:7f:d3:c2:f8:e9:a4:e2:9e:6d:f4:84:c1:4c:
c2:26:bd:d8:aa:d4:5a:e3:89:16:04:6b:75:42:fc:e6:2c:ce:
f4:ae:5a:3f:49:cb:7b:90:f2:79:6c:72:31:e5:34:78:a7:33:
81:98:a2:aa:23:f3:c9:06:d9:c2:86:58:a4:d2:2d:bf:b2:0c:
92:0c:38:40:17:5e:ef:aa:2b:ec:c6:ee:6b:6e:b8:f5:3c:8c:
38:0b:67:b4:dd:75:21:48:b2:42:1f:5b:ba:64:37:5a:c2:ae:
fb:2c:bc:ae:ba:60:f1:35:11:55:ef:ad:8a:05:f7:4d:60:26:
7d:6b:57:73:79:38:53:ae:e0:f6:f4:ba:50:04:43:de:48:7e:
b5:f0:f8:ff:5d:16:0e:12:05:ce:46:31:6f:ce:61:1d:40:bf:
07:bf:16:95:5a:d2:99:5f:f5:76:e2:56:aa:9a:fd:f7:3c:f4:
a0:a4:0a:8e:bd:9f:d3:b0:0c:09:28:38:6b:bf:b5:f6:d7:71:
3c:30:cb:8b:24:4b:ce:49:be:b2:fc:29:d2:a3:85:e2:9a:d6:
c3:b6:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:06 2026 by rpki-client