Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/ulaKHTP3c5tBZDHemkuSbOt6KAY.asa
File: ulaKHTP3c5tBZDHemkuSbOt6KAY.asa (raw, json)
Hash identifier: uz4BenAV5XeIkrt6XX4i5cH6l4ldBgJse/iswU0CJ6U=
Subject key identifier: BA:56:8A:1D:33:F7:73:9B:41:64:31:DE:9A:4B:92:6C:EB:7A:28:06
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 01A023B906722FB0A06CEC868A23837E45C3
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/ulaKHTP3c5tBZDHemkuSbOt6KAY.asa
Signing time: Fri 21 Aug 2026 09:48:43 +0000
ASPA not before: Fri 21 Aug 2026 09:48:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 58308
Providers: AS: 6939
AS: 29075
AS: 39305
AS: 59689
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:b9:06:72:2f:b0:a0:6c:ec:86:8a:23:83:7e:45:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Aug 21 09:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba568a1d33f7739b416431de9a4b926ceb7a2806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:46:42:98:01:ac:c6:af:00:9e:ad:c4:63:
7a:3c:ae:67:a6:85:96:d4:c6:58:c3:7a:a8:b5:7e:
9c:e7:5a:6e:de:a3:96:6b:2e:46:f4:bf:02:d7:12:
ca:8b:cf:6b:ef:6d:4b:60:3d:61:ff:0d:ad:81:bd:
f1:f5:3a:4e:a1:c3:6a:c8:51:e3:57:24:e5:fd:04:
cc:f6:98:38:10:13:2b:5e:af:85:81:3e:7d:48:9d:
20:d6:12:9f:4a:74:a4:f4:b1:8f:0d:83:51:62:d9:
98:6b:c3:10:23:b0:7c:38:b2:ea:eb:95:3d:08:4d:
30:92:ac:33:c2:5b:5f:de:74:f1:a2:3b:ad:eb:92:
00:3f:44:4c:7f:af:67:ef:10:5b:ed:2a:52:64:e6:
0a:8d:e1:74:72:7c:cc:05:95:9d:31:ba:73:cd:a1:
80:4e:95:20:df:fd:89:38:5b:9d:ec:f7:99:4d:0b:
32:26:1f:15:b8:82:3b:02:f1:27:4a:51:7d:dd:57:
44:c5:b5:14:f5:1b:fb:d9:db:d5:79:d9:35:bf:4c:
87:d0:02:ac:d6:a1:c0:f5:e2:fd:aa:4a:f7:84:35:
6c:ba:81:c0:01:34:0d:cb:c1:b7:0a:1a:06:42:72:
b7:4b:24:7d:16:08:1c:87:e7:c2:2b:0f:e3:90:c1:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:56:8A:1D:33:F7:73:9B:41:64:31:DE:9A:4B:92:6C:EB:7A:28:06
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/ulaKHTP3c5tBZDHemkuSbOt6KAY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58308
Signature Algorithm: sha256WithRSAEncryption
22:f0:4f:ff:15:bd:e4:dd:97:97:1b:fd:65:bd:07:35:dd:90:
b0:0d:f6:c2:82:61:24:f6:a4:43:fe:6e:14:8f:95:a6:59:49:
6d:ee:b9:04:9b:8e:0c:38:e3:e7:44:d9:40:94:6e:90:c5:07:
1c:6d:eb:8e:2e:55:cc:06:13:89:2f:cf:c8:97:8d:5b:6c:df:
d8:70:cf:9a:0c:d2:7c:f8:95:72:17:fe:cf:b5:ff:77:5d:e9:
b1:0b:d9:85:0c:06:15:dd:7d:eb:9c:1e:5d:64:7e:e0:66:27:
1a:32:65:77:69:84:ec:59:bb:98:80:63:4b:79:71:9a:e8:b2:
3b:3e:d2:d1:05:95:25:d5:f7:aa:a5:bb:97:d3:aa:32:20:63:
1a:8b:6e:2a:55:e6:ed:41:92:c2:d0:a9:b8:72:14:e3:fa:f0:
56:93:fc:11:f4:cf:89:81:0b:8a:86:57:b1:35:b7:7b:92:d8:
6e:d3:e4:d0:6f:c4:3c:74:c1:fe:1c:61:7f:96:fe:f3:23:37:
5d:d0:6d:34:e6:3e:d1:6d:66:91:87:64:cc:ae:73:07:85:70:
be:32:57:df:7b:b4:6b:77:18:58:31:f7:be:76:9b:1f:c3:33:
b1:10:b4:1c:40:bd:2b:4a:3e:a1:c2:ee:63:08:64:0f:b5:e0:
8e:79:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:02 2026 by rpki-client