Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/QHnSPc_iyYx73aagt0YMYfdiM0Y.asa
File: QHnSPc_iyYx73aagt0YMYfdiM0Y.asa (raw, json)
Hash identifier: QZ3il6eB3YvgHpgJPVxZdQn4/Yi7ILWzMMFPduBtonI=
Subject key identifier: 40:79:D2:3D:CF:E2:C9:8C:7B:DD:A6:A0:B7:46:0C:61:F7:62:33:46
Certificate issuer: /CN=435e9a97fef8353b848352376046952dda0fabd8
Certificate serial: 019E96D8C888B411A0E3CDC2A353F8D61C0A
Authority key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/QHnSPc_iyYx73aagt0YMYfdiM0Y.asa
Signing time: Fri 05 Jun 2026 08:14:09 +0000
ASPA not before: Fri 05 Jun 2026 08:14:09 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204539
Providers: AS: 5405
AS: 6939
AS: 44324
AS: 137409
AS: 213449
AS: 213605
AS: 214933
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:96:d8:c8:88:b4:11:a0:e3:cd:c2:a3:53:f8:d6:1c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e9a97fef8353b848352376046952dda0fabd8
Validity
Not Before: Jun 5 08:14:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4079d23dcfe2c98c7bdda6a0b7460c61f7623346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:37:36:80:34:82:81:90:c7:4b:ec:b6:dd:
c4:9f:2a:31:a0:ef:ff:c1:31:fb:85:2b:1c:11:67:
e3:be:e9:fc:c0:54:da:5b:e1:36:ff:d2:35:51:b1:
27:5c:21:4d:0d:59:5a:e6:7a:13:ca:28:57:d9:4d:
84:36:08:b8:1c:53:d0:35:00:8a:17:03:6e:28:bc:
95:65:f7:e7:17:5f:87:f3:0c:ce:6f:0a:ad:5d:e7:
af:96:09:09:d8:65:8b:38:69:44:fe:fc:ab:55:ca:
d8:d0:ac:14:ac:e4:ea:ad:aa:ea:c8:00:a3:c3:a7:
11:05:7f:e3:d7:fb:64:86:21:96:47:39:1d:12:6c:
21:53:bd:7a:52:0a:82:68:53:47:f8:02:0c:0d:af:
41:0c:7c:e3:c3:bb:a0:aa:55:91:2c:92:84:6a:8f:
f0:23:0a:72:d8:ec:4a:8e:5c:55:f4:d7:0c:e6:ca:
80:d9:7b:63:30:31:5f:6e:f1:f5:1b:ef:96:3a:8b:
0e:11:6a:94:3d:b7:9d:c7:a8:ae:61:e8:f4:f6:32:
73:92:29:36:7e:09:c8:02:9b:b5:32:67:ca:b4:7b:
cb:10:b3:cb:af:68:8b:a1:6b:2f:9a:2f:bb:81:8a:
f6:32:d8:61:b1:05:a9:b5:ff:ca:88:e6:3c:80:31:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:D2:3D:CF:E2:C9:8C:7B:DD:A6:A0:B7:46:0C:61:F7:62:33:46
X509v3 Authority Key Identifier:
keyid:43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/QHnSPc_iyYx73aagt0YMYfdiM0Y.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204539
Signature Algorithm: sha256WithRSAEncryption
2a:b6:3e:97:ed:d9:43:03:f2:05:75:57:b9:76:fa:db:b4:92:
c2:6b:47:64:3d:0a:92:02:e7:09:bb:ad:c1:44:a8:eb:b3:35:
88:6f:a7:ce:9f:fb:61:1b:6d:e0:dd:46:30:58:4f:7a:7a:5f:
c2:35:2f:29:a5:88:a5:ed:63:38:06:2d:ac:2b:3e:b1:61:f2:
60:67:d3:90:5f:47:ee:61:92:a4:1c:46:d0:ce:02:55:bf:72:
14:db:53:d1:4b:47:b0:9d:81:85:ec:02:f3:5d:10:6b:cf:b8:
29:68:c0:1a:ba:22:d4:ba:4b:97:81:29:0e:04:10:1e:3a:14:
5a:47:ea:38:ad:0b:0f:94:7a:ed:14:7d:ce:f1:39:c6:b5:93:
1e:6a:b3:65:b2:25:98:28:e4:85:e7:c8:6f:cc:85:13:c5:72:
d4:ff:a1:f1:76:2d:81:1b:d8:67:10:c3:b1:94:f2:c7:15:57:
f8:ed:bb:90:9e:7a:31:b3:6d:30:b0:1c:da:66:fd:5a:6e:d2:
ac:dc:4a:8b:45:eb:06:49:cf:8c:8d:40:e7:44:02:0b:e9:38:
4a:2e:13:97:b3:88:af:8d:25:f8:72:ab:36:c0:c7:42:94:09:
7e:6d:39:56:48:a4:66:6f:19:23:0e:d1:56:44:04:e4:61:07:
cc:ad:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:28 2026 by rpki-client