Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/oEH5CL4Krryfh-iShKBtkq07VfQ.asa
File: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (raw, json)
Hash identifier: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=
Subject key identifier: A0:41:F9:08:BE:0A:AE:BC:9F:87:E8:92:84:A0:6D:92:AD:3B:55:F4
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019D90BEDA5A845A1E677F90F84D934E3EE5
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/oEH5CL4Krryfh-iShKBtkq07VfQ.asa
Signing time: Wed 15 Apr 2026 10:45:19 +0000
ASPA not before: Wed 15 Apr 2026 10:45:19 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 57525
Providers: AS: 1267
AS: 3269
AS: 12874
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:be:da:5a:84:5a:1e:67:7f:90:f8:4d:93:4e:3e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Apr 15 10:45:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a041f908be0aaebc9f87e89284a06d92ad3b55f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:88:7b:fe:28:8e:1f:2f:e7:6d:19:17:96:
7f:a7:9d:2b:d1:4a:2a:ad:bc:2d:cb:83:b5:55:db:
f3:f7:49:43:fa:64:fa:28:39:b3:e5:d4:d2:4c:23:
9d:21:80:16:0e:d6:36:d7:71:d5:57:b4:60:f7:aa:
5b:7d:94:f1:53:ab:ce:3e:48:f4:14:12:14:d6:3b:
32:ed:bf:32:11:41:65:4e:54:68:91:52:55:66:26:
f9:ea:92:9c:95:1e:a0:c4:47:35:ce:94:36:ea:ef:
a2:ae:89:43:35:3c:1e:00:60:3d:a8:77:3e:ea:19:
be:c4:57:99:fa:df:90:dc:16:ab:19:b3:29:1d:41:
30:69:98:86:52:bb:bb:5b:24:7c:6c:0c:53:54:e4:
94:9d:92:f8:f8:f2:35:a2:da:aa:44:ca:bc:e1:33:
a1:11:1a:16:f1:e7:54:64:d3:00:b6:6a:9a:bb:41:
bd:86:b9:59:c9:ea:8b:cb:ce:1e:8d:b2:c4:11:a0:
c5:87:eb:f4:14:78:bf:d7:46:00:b7:80:06:92:e6:
a2:fe:5f:69:d3:d9:05:c6:cd:77:35:f5:2a:19:68:
34:f9:2c:d1:c5:aa:13:76:76:a6:1e:d0:35:8f:c8:
99:60:cf:9c:ec:0d:70:53:74:a9:af:32:eb:a3:bb:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:F9:08:BE:0A:AE:BC:9F:87:E8:92:84:A0:6D:92:AD:3B:55:F4
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/oEH5CL4Krryfh-iShKBtkq07VfQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57525
Signature Algorithm: sha256WithRSAEncryption
2f:32:99:6b:82:2c:b5:55:f6:79:75:f6:fd:2d:be:ce:17:76:
73:3e:76:82:6a:09:e5:d9:43:d5:76:a6:3d:31:fb:cf:e8:74:
bf:7f:54:17:97:1b:0c:3a:85:1d:68:29:16:5f:ce:57:50:16:
a7:35:f6:f0:50:ba:23:f7:56:d6:8f:6d:b6:bd:f5:81:db:1a:
4d:31:4e:31:69:51:53:15:85:2b:59:f4:3f:88:a1:bb:fd:8d:
ea:fd:99:84:34:cc:2e:09:3a:eb:0a:18:f1:15:bf:2f:56:23:
32:0a:82:50:f5:99:59:82:8b:0b:a1:68:11:4a:e3:60:c1:41:
06:f6:a0:c5:07:fe:8f:d6:08:a9:15:31:19:0f:21:f0:24:16:
b1:e5:96:6b:28:27:7e:9b:4c:93:76:78:e9:6e:09:c5:7a:9b:
e3:fd:76:57:2b:35:9a:03:c3:51:bd:6f:58:ce:5c:65:cc:49:
ef:08:ef:27:60:a7:3a:d0:60:4c:fc:fe:aa:b9:8c:50:3f:e1:
e2:9a:45:d2:e9:8c:b6:92:3a:7a:47:4f:a6:35:bf:89:08:29:
cc:b2:77:c8:05:2c:4b:bb:ef:c7:d2:c6:d2:29:e5:c8:f5:04:
1a:43:9f:83:07:73:ac:23:76:bf:22:eb:33:fb:e9:0f:eb:1a:
71:c0:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:45 2026 by rpki-client