Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/Km70r9ZluIFWUWDTroK0EcNtFeU.asa
File: Km70r9ZluIFWUWDTroK0EcNtFeU.asa (raw, json)
Hash identifier: 4KIjNcxdlDbHOAyZqsFN/eOm7U/uPtAQN9uazXQ+ATk=
Subject key identifier: 2A:6E:F4:AF:D6:65:B8:81:56:51:60:D3:AE:82:B4:11:C3:6D:15:E5
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 019D6C941FF84878F173D1269340C90853A6
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/Km70r9ZluIFWUWDTroK0EcNtFeU.asa
Signing time: Wed 08 Apr 2026 10:12:20 +0000
ASPA not before: Wed 08 Apr 2026 10:12:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 31445
Providers: AS: 174
AS: 3252
AS: 3257
AS: 3356
AS: 9002
AS: 12741
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:94:1f:f8:48:78:f1:73:d1:26:93:40:c9:08:53:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Apr 8 10:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a6ef4afd665b881565160d3ae82b411c36d15e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:e6:61:11:b6:66:fa:fd:4e:95:b6:45:dd:
fc:06:4e:ec:f9:e4:dc:f7:db:98:9f:96:7c:42:79:
a7:8e:d9:f8:21:18:c4:c5:4f:14:22:0e:1e:a8:e9:
43:07:72:92:d2:93:28:7f:10:83:15:19:a6:a5:7f:
5e:be:02:72:27:2b:eb:53:9a:bb:e4:9f:b4:f7:58:
25:37:ef:a4:e5:88:3c:64:40:2a:77:bd:ab:04:22:
77:05:29:56:fa:98:b0:32:cb:a9:fd:ad:88:b9:f1:
01:9f:49:1a:83:8c:ab:06:2e:41:32:8c:71:d5:70:
38:8a:60:14:c1:da:02:ab:56:ad:81:02:29:69:3d:
34:dd:7e:33:74:bb:95:7c:04:00:81:8a:77:95:ec:
5f:f2:cc:7e:d7:5a:a5:2d:18:6f:a1:48:74:ed:65:
2e:dc:b7:ec:10:86:63:c8:e9:3d:ef:f6:18:06:c6:
c3:f8:cf:f6:ca:0a:89:e1:3b:11:ec:76:42:9d:6a:
56:8d:c6:c3:62:15:47:32:ee:87:22:bb:0d:48:28:
02:6d:06:00:7f:45:df:6a:56:88:86:51:70:cc:09:
70:4f:89:cc:3d:46:60:c7:86:2c:3d:46:c8:5b:b7:
85:7b:ce:f6:d4:4e:ad:06:94:73:80:ed:e3:f9:e3:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:F4:AF:D6:65:B8:81:56:51:60:D3:AE:82:B4:11:C3:6D:15:E5
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/Km70r9ZluIFWUWDTroK0EcNtFeU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31445
Signature Algorithm: sha256WithRSAEncryption
a4:9d:86:6d:bb:2a:4b:7d:83:2e:5a:8b:a8:32:0c:63:c2:30:
62:6b:46:ad:42:06:4c:91:2f:63:61:eb:53:1f:fd:4f:1a:ee:
c8:93:51:d2:be:79:d4:13:9d:e1:61:d8:1a:7d:5b:f0:91:2b:
54:e7:6d:a1:a5:c2:30:1c:af:4e:53:ac:b1:be:f9:2f:3d:0f:
34:7e:a5:1b:92:0d:de:57:28:e9:17:83:dc:43:49:57:1c:10:
cf:dc:cc:d4:05:d6:28:91:e2:a4:c0:8d:a0:2d:98:bb:b1:56:
fb:83:aa:33:38:c8:78:33:be:fc:9e:ee:64:d7:57:c6:af:d5:
a6:d0:4a:9b:aa:3f:da:39:e9:92:2a:b0:5c:59:20:40:88:8b:
04:c0:14:74:46:27:3f:1a:3e:12:b8:00:95:ae:23:34:cf:0a:
25:2a:d6:89:3f:4d:e7:74:ae:1a:86:33:81:5e:76:a4:b3:50:
d3:d3:94:e5:fa:31:95:aa:83:c5:17:31:36:ec:0f:3e:48:af:
b0:dd:55:f9:6b:b0:4f:4e:be:6a:f2:53:4e:8f:9b:49:88:fb:
99:3d:2e:c0:d1:29:b9:a7:05:21:ae:1d:e8:f5:c0:25:f4:ba:
e4:3f:c5:81:bd:88:4c:2c:7a:41:27:02:7f:fc:40:f4:a5:56:
17:d4:39:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:22 2026 by rpki-client