Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/K20WduXL32Z9sRN6JTcaaNFfv6o.asa
File: K20WduXL32Z9sRN6JTcaaNFfv6o.asa (raw, json)
Hash identifier: eljNQ3knW9FFba+2dFnvJt5ol1ykbM89I+rKzOVsymM=
Subject key identifier: 2B:6D:16:76:E5:CB:DF:66:7D:B1:13:7A:25:37:1A:68:D1:5F:BF:AA
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 01A0114A2849ACEAE109F98415CAD6809E5C
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/K20WduXL32Z9sRN6JTcaaNFfv6o.asa
Signing time: Mon 17 Aug 2026 19:54:27 +0000
ASPA not before: Mon 17 Aug 2026 19:54:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 16186
Providers: AS: 174
AS: 1299
AS: 50304
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:4a:28:49:ac:ea:e1:09:f9:84:15:ca:d6:80:9e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Aug 17 19:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b6d1676e5cbdf667db1137a25371a68d15fbfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:d8:36:92:15:41:e0:e4:27:36:fa:69:6a:
a8:36:fe:d1:a2:47:90:02:ab:65:e1:ba:01:0f:35:
5b:1d:ec:67:16:7e:b0:38:b1:c8:62:12:3b:64:d2:
4f:4c:84:2c:40:aa:3c:d9:d9:5e:b8:86:b4:19:35:
56:7c:63:5d:40:92:70:93:d0:bf:1b:0a:f7:96:cc:
08:8b:2e:d8:a9:54:59:95:ff:1d:e8:9f:3f:62:6e:
4b:6e:ec:cb:6f:a0:30:71:05:83:7c:86:c3:10:20:
01:87:8f:bc:20:bb:cf:d4:55:dd:ed:c3:14:96:d1:
f6:c8:de:b7:dc:9d:49:f1:ae:3a:7b:24:12:62:64:
40:e9:75:0b:b4:8a:b8:0f:dd:11:9c:a6:56:3b:1c:
10:ed:3f:98:f6:a2:78:9f:1d:44:85:68:ba:cf:12:
4b:4c:f3:30:92:dc:78:bd:0e:f1:a7:64:88:c5:4d:
2e:ad:39:66:fa:a5:5c:15:5f:10:20:91:f6:49:87:
03:34:ab:27:c7:10:f5:10:38:b2:b1:ba:2a:5e:41:
23:2a:9e:a2:88:75:2b:6a:e1:9b:61:36:e0:af:be:
9b:c6:37:3e:e0:8d:16:34:d1:27:f2:69:a3:ce:63:
f3:86:42:20:f0:0a:9a:50:e2:95:74:04:88:80:3b:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:16:76:E5:CB:DF:66:7D:B1:13:7A:25:37:1A:68:D1:5F:BF:AA
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/K20WduXL32Z9sRN6JTcaaNFfv6o.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16186
Signature Algorithm: sha256WithRSAEncryption
02:66:f9:40:c4:95:84:61:6b:64:c3:3b:7c:b6:98:93:d0:89:
3f:3a:23:9d:ae:e1:83:12:05:04:48:81:ac:ad:23:1f:c0:9e:
1e:a4:72:63:74:f5:79:7e:d4:41:1c:bd:11:33:a8:00:22:bb:
06:7e:48:b6:44:9a:e7:41:95:57:a5:b2:58:1e:a4:01:54:66:
26:2b:a2:5a:ff:54:f9:1b:99:c7:65:a0:03:01:c0:28:7a:f1:
a4:25:d2:aa:b7:11:a7:ff:68:b2:e2:8f:2a:36:32:69:55:21:
9d:6d:a8:e3:be:31:df:17:fd:cd:a6:8c:e8:3c:e9:24:05:ad:
24:3a:40:09:73:b0:72:d2:d7:30:3f:5b:2a:5c:49:f4:b9:72:
ac:64:f8:3f:84:9b:e0:12:75:4f:17:36:3e:6a:62:f7:1e:6e:
95:e4:55:aa:1b:1e:f6:f4:80:6d:80:3f:51:d0:92:f8:e1:ee:
0b:23:84:0d:03:b0:ae:30:f2:46:fb:63:92:f9:7b:a9:63:6b:
32:64:58:f6:5e:0b:66:b6:94:09:64:52:87:ce:ff:3b:db:83:
8d:8d:8a:f7:52:79:f2:f2:46:94:70:24:17:4b:d1:38:95:82:
be:16:ec:7d:13:16:2f:d9:20:c0:3a:92:3b:12:cf:64:3f:3b:
44:3e:a9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:22:47 2026 by rpki-client