Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/IpDjDaen4M-VqbxT-HsQgW2lzN0.asa
File: IpDjDaen4M-VqbxT-HsQgW2lzN0.asa (raw, json)
Hash identifier: rQjAT1n9bsLsCJwTibsu+CoF2MQ8QmY/T0w14G7X9uY=
Subject key identifier: 22:90:E3:0D:A7:A7:E0:CF:95:A9:BC:53:F8:7B:10:81:6D:A5:CC:DD
Certificate issuer: /CN=8b18de6736e258b5f1a008d529922229a2932393
Certificate serial: 01A0A4E9AD1B8742AD970602ED32DEBC1745
Authority key identifier: 8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/IpDjDaen4M-VqbxT-HsQgW2lzN0.asa
Signing time: Tue 15 Sep 2026 11:52:52 +0000
ASPA not before: Tue 15 Sep 2026 11:52:52 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 197700
Providers: AS: 3320
AS: 8220
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:e9:ad:1b:87:42:ad:97:06:02:ed:32:de:bc:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b18de6736e258b5f1a008d529922229a2932393
Validity
Not Before: Sep 15 11:52:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2290e30da7a7e0cf95a9bc53f87b10816da5ccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:de:2b:be:14:44:63:59:28:69:b4:90:0c:
fc:30:80:d3:b1:57:8a:88:f3:3b:ef:d7:e2:83:72:
0d:9c:eb:6f:03:35:0c:93:a4:ff:e9:61:75:04:dd:
2b:2d:c2:28:37:d3:4a:b9:54:98:8e:48:8e:d6:dd:
db:3c:e4:8f:39:98:eb:47:fc:bc:f9:cc:50:6c:a4:
4f:4b:6a:a2:32:aa:2b:2e:df:3f:12:64:e4:3a:0a:
76:38:9e:08:3d:66:06:04:a8:4f:0f:dc:c5:af:d3:
4f:e3:b4:17:ee:41:b8:e7:78:e3:43:e2:83:c5:4a:
b8:23:5e:92:3a:32:2d:46:fa:21:c4:cf:fd:26:04:
97:1c:31:97:e6:92:36:93:f3:0b:75:cf:bb:ec:3e:
98:57:3d:f6:f2:98:4e:ec:4e:d2:5f:08:f7:36:5d:
d9:53:94:fc:17:14:29:e3:cb:37:3c:78:9c:0a:25:
32:24:b7:00:35:a1:0e:ac:ff:89:70:71:12:4a:13:
8f:ef:19:58:88:24:ba:17:1b:a7:b5:92:12:a3:e6:
50:0e:90:e1:e9:d9:63:95:b2:19:a1:96:c5:e9:63:
97:73:3b:f7:9f:c0:31:50:12:ec:4f:52:b8:72:a6:
fe:5c:06:1c:98:45:dc:dd:24:d7:a1:3a:0b:df:cc:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:90:E3:0D:A7:A7:E0:CF:95:A9:BC:53:F8:7B:10:81:6D:A5:CC:DD
X509v3 Authority Key Identifier:
keyid:8B:18:DE:67:36:E2:58:B5:F1:A0:08:D5:29:92:22:29:A2:93:23:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixjeZzbiWLXxoAjVKZIiKaKTI5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/IpDjDaen4M-VqbxT-HsQgW2lzN0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9dad8d-8525-4915-be0f-b07bfdaa35d5/1/ixjeZzbiWLXxoAjVKZIiKaKTI5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197700
Signature Algorithm: sha256WithRSAEncryption
76:33:1b:53:7b:8e:a4:44:4a:f9:6d:25:67:c1:bc:2a:db:43:
8d:41:bb:9d:59:c3:67:04:f2:7f:7c:45:22:27:8e:b7:33:0a:
ec:4d:b2:b2:a0:13:cd:9f:26:b8:47:69:19:a1:17:85:7c:74:
59:29:65:98:13:fa:f2:4d:a0:db:e3:d7:6b:38:85:34:15:83:
59:dd:d3:e8:8b:6f:d6:79:d3:92:e2:c4:98:5d:38:d2:af:48:
21:80:57:b6:a5:25:ca:7d:00:f1:e4:b9:87:0a:66:2c:df:d8:
be:d1:2c:a9:de:52:c4:9d:9e:a8:ce:91:de:75:f3:1c:b8:21:
8f:fd:10:16:e1:a1:fe:cb:c9:ed:b3:87:b1:01:08:c2:6d:2f:
d8:44:14:af:d1:87:38:ba:41:56:ca:12:cd:5b:61:f4:53:b2:
e6:8c:cc:d4:d2:ad:d1:a0:4e:a9:1e:58:b2:e8:6b:eb:81:9c:
98:f9:63:d0:6e:36:93:9d:2e:ad:e3:f9:c6:96:0e:19:f5:de:
15:2f:30:a8:6d:2b:89:b2:bf:e1:41:91:40:94:53:a9:f7:5c:
cb:85:72:7a:4e:6e:fa:cf:f4:47:36:12:c1:a4:87:5d:20:96:
29:76:d8:93:46:2f:c3:e7:94:5a:42:d3:6c:c0:52:fd:6c:14:
20:b8:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:18 2026 by rpki-client