Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/kaNSS3H8CcGwyEb9L0LHfodkCbI.asa
File: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (raw, json)
Hash identifier: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=
Subject key identifier: 91:A3:52:4B:71:FC:09:C1:B0:C8:46:FD:2F:42:C7:7E:87:64:09:B2
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019C903F812929E13613AE06616F09E1FCD6
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/kaNSS3H8CcGwyEb9L0LHfodkCbI.asa
Signing time: Tue 24 Feb 2026 15:23:26 +0000
ASPA not before: Tue 24 Feb 2026 15:23:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 21305
Providers: AS: 35647
AS: 60280
AS: 60330
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:3f:81:29:29:e1:36:13:ae:06:61:6f:09:e1:fc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Feb 24 15:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91a3524b71fc09c1b0c846fd2f42c77e876409b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:70:85:d2:56:3c:7e:1c:ad:90:be:0f:c9:
3a:4b:91:46:9f:10:8a:fd:94:b7:46:e9:d1:e4:1c:
34:69:db:1b:f9:6f:c6:a9:bf:a2:0a:8f:2e:17:e4:
68:d7:8c:d8:b0:b2:89:ec:21:82:07:96:27:c0:b9:
e5:1f:61:55:46:23:8d:ba:d4:9e:bd:4e:3e:b5:14:
c6:97:d5:f9:bf:e3:46:7d:0e:b9:9a:16:a7:f3:86:
b2:93:11:ab:56:cb:e1:fa:98:d9:f5:54:d4:b0:c2:
73:f9:09:1c:19:bf:72:82:45:e8:80:69:47:4e:31:
d6:d9:d3:05:fd:de:a4:15:2b:23:b3:3a:f9:3c:9b:
8f:a0:d2:bf:53:32:bc:30:a4:4a:f6:b4:18:48:f0:
83:49:f4:9d:40:bd:92:51:21:d1:4f:db:d4:bc:ab:
fe:47:68:8e:bd:5d:9c:6f:35:06:e5:91:d9:75:9e:
b2:2d:50:db:59:9b:4d:d3:dc:4c:ce:e5:26:2c:be:
81:45:cb:59:ca:7e:28:00:4b:81:ab:ce:de:9c:19:
cb:8a:41:15:a4:c7:8f:65:e9:19:64:3d:1e:7c:c9:
6a:c8:66:97:d3:1b:2b:e2:5e:b2:c9:55:c5:8e:cb:
5c:b3:69:f9:e3:26:95:a2:21:b3:e7:31:92:33:9e:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:52:4B:71:FC:09:C1:B0:C8:46:FD:2F:42:C7:7E:87:64:09:B2
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/kaNSS3H8CcGwyEb9L0LHfodkCbI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21305
Signature Algorithm: sha256WithRSAEncryption
44:ca:4f:84:b8:c9:ea:31:a7:26:ba:ff:92:ff:9f:2e:bb:77:
42:b8:3e:7b:41:ae:aa:c9:7f:a6:51:a7:a3:3b:38:f0:a3:4d:
33:7a:5a:4e:72:4d:c3:51:fd:77:6c:98:da:1a:3f:63:7e:72:
84:28:95:ca:2e:fa:b4:5b:e0:ca:3b:9c:c6:46:89:c9:33:d4:
ce:86:60:74:19:09:b6:33:81:26:d0:0b:3b:45:ef:7b:17:1b:
49:82:94:14:18:4a:7b:bd:3a:fd:6e:96:f2:a1:6a:79:1b:af:
1f:a6:8e:0c:59:de:53:29:17:3b:a1:69:ab:9b:79:a9:cb:7e:
64:9e:7a:60:1c:b9:d4:aa:88:10:52:b7:55:91:5f:0a:15:b2:
15:5d:da:bc:32:19:b4:0c:e8:ad:dc:f3:89:e0:ed:b0:49:91:
ce:e1:6c:05:93:fb:1c:dd:0d:d0:73:33:14:0b:6e:f2:b7:8e:
1c:57:a3:35:5a:8e:a1:6e:cc:a9:c9:6f:58:b5:2d:c5:c1:d1:
ff:e9:72:7a:26:58:60:15:21:5d:64:c6:26:5b:5d:bb:e5:b8:
ae:62:b1:ef:90:e7:d9:fc:60:9e:d7:5c:c8:2e:3a:04:83:4e:
c5:c4:a9:26:53:27:f2:35:0c:36:d1:cf:fa:75:aa:66:42:20:
e1:78:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:03:26 2026 by rpki-client