Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/YHBsZomTG35HAfmE_uB3LbMxZEo.asa
File: YHBsZomTG35HAfmE_uB3LbMxZEo.asa (raw, json)
Hash identifier: GX8nCIEdgXEZ2URE92YvWD2jw8z2DJ0jEPDWiYwJ7ec=
Subject key identifier: 60:70:6C:66:89:93:1B:7E:47:01:F9:84:FE:E0:77:2D:B3:31:64:4A
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019D4E9A42F449DFFCCA0E303DB2343B33F8
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/YHBsZomTG35HAfmE_uB3LbMxZEo.asa
Signing time: Thu 02 Apr 2026 14:30:25 +0000
ASPA not before: Thu 02 Apr 2026 14:30:25 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 44922
Providers: AS: 16276
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:9a:42:f4:49:df:fc:ca:0e:30:3d:b2:34:3b:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Apr 2 14:30:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60706c6689931b7e4701f984fee0772db331644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:7b:02:56:d8:88:ff:e7:ed:0f:34:0e:b3:
d2:97:54:2a:d4:a3:cb:77:24:0d:21:42:bb:65:3a:
ab:d6:cc:91:22:a7:bb:46:a4:e7:aa:88:f9:86:9c:
8f:6e:3b:66:94:d4:3b:30:ba:49:5d:3e:95:dc:49:
06:dc:4e:73:1c:30:2c:df:dd:ff:b0:a6:8d:48:46:
9a:d2:da:ab:58:44:c7:ec:e6:57:84:de:96:66:31:
69:cc:c6:58:57:fe:c6:a2:b6:6a:0c:4b:07:0a:e0:
c5:ce:96:ad:90:77:36:68:4b:f9:9a:03:7b:ca:cf:
7a:0c:8d:88:83:1b:77:b6:b0:c1:b5:35:a1:6f:08:
e0:b2:ed:3b:09:a9:93:6f:04:7b:fa:64:d2:e6:74:
7a:d8:ea:66:65:e4:8c:23:c2:49:45:6b:c5:f6:d1:
45:4a:64:1c:c5:4e:a1:98:57:10:de:10:d2:72:5c:
0d:c4:8f:f6:56:6f:e0:cf:0e:39:d0:8a:4f:45:f9:
82:2c:11:30:5e:43:ba:b6:4e:2e:23:4c:0b:85:f0:
c3:61:b6:48:8d:2d:50:5a:3d:5f:1a:d0:5c:cb:86:
ff:16:18:40:d4:8d:b9:80:bb:43:6b:df:1a:0b:c6:
d7:3c:f5:33:8c:5b:f4:5c:ca:d2:a0:d5:cc:1e:7c:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:6C:66:89:93:1B:7E:47:01:F9:84:FE:E0:77:2D:B3:31:64:4A
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/YHBsZomTG35HAfmE_uB3LbMxZEo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44922
Signature Algorithm: sha256WithRSAEncryption
63:2e:29:07:fb:77:80:83:f7:23:d8:f0:99:3a:22:5e:27:22:
14:9a:18:5a:03:1d:53:04:35:28:08:9b:bb:c3:61:48:fe:e9:
47:be:31:dc:7d:f3:3e:64:ea:5b:76:06:0c:dd:94:cf:9d:6c:
f7:b2:e2:98:5c:84:6d:b3:73:0c:5b:b2:50:b3:47:c1:e6:45:
7a:a4:7d:cf:b7:07:21:38:38:eb:91:7f:ad:bf:80:5d:81:f5:
a8:1d:66:5f:43:44:55:4f:ed:73:ad:36:bd:52:79:c6:d8:50:
73:ca:b1:fa:f0:4b:e2:96:c0:62:35:b7:cd:85:cd:2f:aa:98:
09:1d:0c:66:a0:47:67:3d:64:62:ce:74:69:32:aa:ff:9b:51:
89:a1:b5:e1:31:af:33:cf:fc:6a:95:4f:45:3f:77:19:f2:27:
b2:eb:4e:8e:1a:32:09:2b:10:31:71:1a:53:3c:eb:2e:6e:c5:
92:09:20:3a:a0:60:97:38:26:db:43:54:86:8e:ec:41:69:6a:
ae:50:74:c3:b1:94:c3:89:21:b7:44:0a:ca:ad:38:0a:b0:39:
a9:61:26:07:c8:14:62:8e:88:fd:df:a9:56:cc:f8:eb:a4:79:
75:9f:f0:26:9b:31:1c:19:84:58:e0:7e:45:46:8d:00:0b:d8:
0f:60:01:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:43 2026 by rpki-client