Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/3pzPfip2XT8VFVQRc6zhDFom7z4.asa
File: 3pzPfip2XT8VFVQRc6zhDFom7z4.asa (raw, json)
Hash identifier: KHMn3BeOnJHGQkWq9E9H+WYoE/KxiD16e8EHfT7Wrxo=
Subject key identifier: DE:9C:CF:7E:2A:76:5D:3F:15:15:54:11:73:AC:E1:0C:5A:26:EF:3E
Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial: 019C7F894039576F9CC227177C511CDA2E3E
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/3pzPfip2XT8VFVQRc6zhDFom7z4.asa
Signing time: Sat 21 Feb 2026 09:30:27 +0000
ASPA not before: Sat 21 Feb 2026 09:30:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 47311
Providers: AS: 6939
AS: 24198
AS: 45735
AS: 58389
AS: 58495
AS: 133210
AS: 398999
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7f:89:40:39:57:6f:9c:c2:27:17:7c:51:1c:da:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Validity
Not Before: Feb 21 09:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de9ccf7e2a765d3f1515541173ace10c5a26ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:85:b6:72:9e:b6:69:f9:d1:b5:40:fa:b5:
bd:8a:91:d9:42:5f:28:8a:67:d1:e6:f3:b1:5e:9e:
55:f5:64:48:72:69:b9:f5:b7:e9:85:57:d9:9c:d4:
84:00:37:d2:04:0f:e7:f3:14:60:23:c0:df:cb:b6:
04:04:47:e9:31:71:2f:a2:67:59:b5:5a:7e:77:8f:
40:68:ba:6e:4e:5c:15:29:3a:93:04:da:1b:2e:46:
71:19:10:5c:91:82:08:5f:cf:be:19:1b:e7:7e:6e:
8c:d3:4a:c6:ca:39:65:63:99:93:be:6a:c0:46:ae:
68:33:87:90:4c:3f:02:17:56:41:d8:a5:01:51:27:
49:fc:27:59:49:37:e5:e0:99:35:e1:05:d1:a6:91:
43:d5:d6:f1:2a:91:a1:25:22:33:5d:43:63:b6:0d:
a2:a9:1d:b6:1a:e7:7b:ac:09:04:f1:23:70:72:a2:
eb:17:89:f7:eb:a9:18:a9:a7:13:f2:a3:d7:5f:ed:
66:18:e5:46:df:fd:26:6b:4d:ad:54:7b:5b:5b:de:
4e:64:a8:7b:4b:35:1c:03:6b:63:36:e0:23:a8:c6:
23:fa:5c:b7:4c:4a:26:2c:3c:76:c9:d9:6f:d1:d7:
4a:26:cb:29:6a:03:9a:b3:66:a1:83:a1:1c:d4:16:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:CF:7E:2A:76:5D:3F:15:15:54:11:73:AC:E1:0C:5A:26:EF:3E
X509v3 Authority Key Identifier:
keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/3pzPfip2XT8VFVQRc6zhDFom7z4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47311
Signature Algorithm: sha256WithRSAEncryption
22:5c:13:83:4c:06:63:41:8b:e2:4b:1d:55:a1:da:af:f9:3c:
db:10:41:2d:a0:34:ef:09:d2:07:50:7c:59:2d:6a:df:23:45:
3d:52:84:33:10:6a:33:94:07:ba:cb:6c:81:97:d1:0b:7d:16:
e4:5e:b7:2b:0c:94:db:8d:59:47:af:b4:0c:30:b9:92:54:c3:
ed:a4:1d:3d:98:27:23:71:36:6b:44:7d:22:00:09:f6:ed:5d:
fd:d8:55:31:8b:00:37:13:e6:c2:36:a3:b0:79:ca:c7:7f:ff:
d5:a2:92:6c:b6:0f:f2:a1:1f:65:33:81:3c:1b:da:76:ca:52:
c4:26:b3:ca:8f:36:f1:fe:02:bd:b2:ac:48:45:25:b3:b3:65:
fe:1e:a2:75:19:ac:4e:20:c9:4a:8f:1f:e0:21:48:59:96:a3:
96:c1:5c:c6:56:05:f0:64:64:06:16:e8:19:52:0c:a3:1b:15:
cf:6e:6c:9f:17:a2:b6:53:7a:52:82:c9:c5:f5:2d:e7:73:e9:
3d:f3:89:65:a0:33:38:8d:68:2f:1c:93:64:d0:dd:1b:91:65:
27:a0:bf:43:84:78:48:79:93:1d:fa:1b:32:64:52:2f:8f:13:
ea:21:1b:e3:96:e2:e0:7f:88:49:3c:d3:7c:ea:6d:d1:3b:14:
59:70:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:50 2026 by rpki-client