Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa
File: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (raw, json)
Hash identifier: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=
Subject key identifier: 49:4F:7F:B4:1E:65:C1:F1:CF:2F:FE:0A:B7:84:4E:C0:51:E5:50:C2
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 019D7194083F98995EB03C738ECE702AD74A
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa
Signing time: Thu 09 Apr 2026 09:30:19 +0000
ASPA not before: Thu 09 Apr 2026 09:30:19 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211040
Providers: AS: 202914
AS: 216275
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:94:08:3f:98:99:5e:b0:3c:73:8e:ce:70:2a:d7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Apr 9 09:30:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=494f7fb41e65c1f1cf2ffe0ab7844ec051e550c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:06:4b:54:4f:dd:26:6c:00:c2:e9:80:7e:
aa:4f:ca:a1:ed:26:09:dc:4e:e1:f6:17:5c:86:52:
88:d1:70:7d:f3:c5:72:da:c6:91:2f:b0:29:4b:49:
d6:71:31:ce:f0:5e:51:6f:4a:59:07:69:9d:e6:d2:
23:74:65:a2:53:39:87:f0:44:92:44:b3:9a:0a:c2:
0f:60:4a:c0:60:b5:03:6e:4d:fa:5d:b9:76:2a:38:
ae:5d:27:be:57:c8:e7:d1:f7:67:fa:fa:90:97:5b:
5e:20:70:5c:64:f7:31:5f:34:23:b2:da:81:16:1f:
63:73:ca:7f:89:6c:09:f1:53:2f:28:25:c8:17:3b:
94:25:44:79:79:d0:d7:62:bb:dd:97:88:a7:fe:87:
91:6b:8a:a3:2c:dd:48:40:e1:aa:2f:d3:55:0b:0c:
c6:58:04:d8:b0:10:69:b4:d2:10:1b:ab:b8:e0:05:
ac:ac:91:8d:79:7b:9c:8f:ca:5e:be:e7:7c:ca:d6:
c4:c8:71:d2:77:06:00:ea:7e:4c:64:3b:12:86:3e:
86:f0:85:b8:e4:7e:05:da:46:e5:a9:1e:30:85:67:
83:6a:27:14:dd:ac:1e:46:db:7f:0a:26:37:ed:e2:
5b:a3:c5:a6:73:25:f4:bb:75:3d:b1:61:d8:c0:61:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:7F:B4:1E:65:C1:F1:CF:2F:FE:0A:B7:84:4E:C0:51:E5:50:C2
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211040
Signature Algorithm: sha256WithRSAEncryption
cc:1c:b5:1b:0e:a5:f9:73:99:df:a2:85:7e:89:37:0e:4e:18:
08:34:67:9c:68:61:02:88:7f:51:64:f2:93:97:31:4d:c8:ff:
50:af:35:ed:d9:44:bc:f2:12:18:cc:5e:3b:b0:cb:39:e0:34:
86:9a:0f:32:b6:c4:4a:78:8e:ac:c2:11:6c:e7:80:a8:c3:de:
e4:94:26:ed:e0:9a:c1:f8:25:dd:75:bc:24:f7:72:8b:72:99:
f6:2f:53:b1:98:41:71:4b:e5:63:b1:3a:12:41:0c:18:27:42:
0a:14:18:36:df:84:c5:5c:01:49:f3:a6:b8:e2:10:05:83:6d:
3f:60:94:72:9a:9b:c2:b1:91:82:7b:97:1f:17:d4:3a:88:82:
41:70:27:56:f9:96:a7:0d:b0:4f:7c:f2:cb:52:45:10:2d:8b:
e7:5d:17:a6:f7:7d:f9:1c:86:95:bf:f9:93:66:e2:33:ff:27:
c7:bf:19:b6:78:8f:e5:1f:e0:eb:cf:71:cd:4c:a4:c9:7b:6c:
72:40:74:34:c9:e7:fc:0b:91:60:23:a9:8e:71:98:b0:1e:4e:
5d:1d:48:5a:37:c8:68:4e:ff:b4:5b:83:88:5d:cf:78:8d:13:
45:a7:ca:84:1a:bc:9c:71:ee:c6:b5:96:30:ac:0f:a7:1c:34:
b6:90:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:06 2026 by rpki-client