Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/CE438SQN80x5iPZkUW29526BgDA.asa
File: CE438SQN80x5iPZkUW29526BgDA.asa (raw, json)
Hash identifier: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=
Subject key identifier: 08:4E:37:F1:24:0D:F3:4C:79:88:F6:64:51:6D:BD:E7:6E:81:80:30
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 019E44FAF029DAB3231AA7726AC214B9D388
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/CE438SQN80x5iPZkUW29526BgDA.asa
Signing time: Wed 20 May 2026 10:42:36 +0000
ASPA not before: Wed 20 May 2026 10:42:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29317
Providers: AS: 8823
AS: 12657
AS: 12817
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:fa:f0:29:da:b3:23:1a:a7:72:6a:c2:14:b9:d3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: May 20 10:42:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=084e37f1240df34c7988f664516dbde76e818030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:d9:d3:b2:f7:3f:2e:62:85:cc:ec:06:8e:
6e:61:b0:59:80:e6:ed:6a:6a:50:3a:8d:73:55:d0:
49:bb:16:2f:17:ad:4a:c1:c0:71:73:10:51:f7:b7:
99:55:b7:4b:55:8c:2d:7c:2a:e2:6f:0b:96:78:42:
4d:47:86:35:cc:3e:87:ef:23:7f:61:74:11:fd:2d:
b8:46:3e:26:bc:26:e4:4c:53:e3:a0:b4:ab:a0:06:
3b:82:47:0d:a8:45:35:28:c9:43:2e:f0:73:e5:9d:
b6:35:18:2b:df:e1:80:39:35:70:6d:27:80:b8:e2:
1c:26:48:73:6f:fb:6f:33:bf:78:a6:11:fd:79:a9:
0f:7c:64:57:08:3e:fd:49:57:df:ef:da:6c:cf:81:
6e:37:36:2f:11:3f:f2:99:29:18:19:57:e2:30:d5:
a3:09:71:cb:a0:6d:7d:7b:88:40:89:59:f6:17:2e:
3f:9b:6b:b0:4e:f1:ef:17:90:94:72:95:da:4d:99:
a4:5e:bf:24:82:2a:39:d2:21:a8:f3:c1:28:64:0f:
e8:e6:01:d3:7e:4c:b0:db:cc:ad:8e:46:9d:39:3d:
3e:bd:e2:e2:a0:c4:16:fd:6d:4f:ea:9f:51:d5:8f:
59:67:eb:bc:bd:89:a5:a6:41:fd:25:46:0d:25:d7:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:37:F1:24:0D:F3:4C:79:88:F6:64:51:6D:BD:E7:6E:81:80:30
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/CE438SQN80x5iPZkUW29526BgDA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29317
Signature Algorithm: sha256WithRSAEncryption
4c:ea:86:33:26:a4:6c:80:8e:52:e8:78:0a:bd:53:e2:06:72:
91:fd:9b:3b:ad:8d:13:49:53:ef:18:e2:03:52:0d:90:99:7b:
29:ee:34:37:a2:a2:2e:52:c2:2c:c5:f6:6f:8c:2a:6f:4b:c8:
6d:f1:63:06:a3:42:65:5e:36:13:78:f6:02:2e:ea:31:1b:17:
27:be:d6:72:36:40:fa:d5:ea:87:86:ab:f6:2d:43:6e:be:6d:
52:d1:68:12:42:e5:99:65:ae:33:29:f2:01:f9:02:73:09:32:
c2:db:6a:12:6b:ca:88:b1:c8:22:b7:ee:85:d5:b3:ee:71:98:
b0:14:4b:71:a0:d2:a6:51:10:4d:60:64:e4:64:c4:04:b1:73:
f9:e9:ea:06:c9:ad:ce:27:71:ca:db:16:15:e4:8a:6b:e1:50:
58:3d:48:bc:64:48:b5:9f:1d:62:bd:5a:0c:6f:08:28:e0:20:
a5:85:0f:09:12:7e:fb:09:d1:e2:cc:c1:15:f1:89:0f:9a:27:
f8:47:14:ba:76:80:a3:7d:0f:eb:6b:0a:65:d5:9e:8b:e2:ee:
52:bb:01:30:17:50:9f:52:0c:1c:f0:6a:cc:7d:d3:3c:4f:f6:
47:95:1a:9d:39:23:8b:f7:52:37:73:b5:e2:6d:e7:a3:b5:0e:
da:47:7d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:34 2026 by rpki-client