Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/gDYEALi2Hj-tupJ_rsL3s8tznlE.asa
File: gDYEALi2Hj-tupJ_rsL3s8tznlE.asa (raw, json)
Hash identifier: 68FX2IHGNZcEoY9bCkB81Lljsq+1FZmQtZVe4paP9Q4=
Subject key identifier: 80:36:04:00:B8:B6:1E:3F:AD:BA:92:7F:AE:C2:F7:B3:CB:73:9E:51
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 019D2A3FCDE508D43C76840A51DF0BF60197
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/gDYEALi2Hj-tupJ_rsL3s8tznlE.asa
Signing time: Thu 26 Mar 2026 13:05:17 +0000
ASPA not before: Thu 26 Mar 2026 13:05:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 31077
Providers: AS: 1820
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3f:cd:e5:08:d4:3c:76:84:0a:51:df:0b:f6:01:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Mar 26 13:05:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80360400b8b61e3fadba927faec2f7b3cb739e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:45:f8:00:5f:29:fa:47:f4:e0:dd:52:86:
80:32:26:bd:68:4d:54:cf:81:09:b1:b6:19:52:e4:
47:fd:54:c1:90:c6:d7:10:ba:f8:4f:ef:1c:7c:aa:
a4:64:2f:02:a1:89:57:33:ec:0b:20:95:9d:a1:2f:
fa:7d:00:7e:67:b4:92:0b:42:6b:f1:fc:80:7a:70:
80:c7:91:51:ad:3b:ad:fc:9c:3e:9d:45:b4:d2:d0:
0d:29:ae:3b:84:72:20:85:76:81:ad:d4:cd:de:75:
4f:cb:96:55:9f:c3:d8:f9:38:1d:30:a4:84:d4:66:
6e:b1:62:38:d1:7b:0e:f3:c2:9c:29:3a:15:56:06:
b5:72:5b:b2:eb:dc:21:c3:35:07:02:45:f1:ef:d0:
22:e9:bb:2b:0f:30:ec:6b:65:56:9d:f0:74:36:e8:
01:da:2c:4d:fe:58:35:68:65:85:8e:b7:df:36:c3:
22:b5:c4:7b:47:ee:c6:f1:7a:20:77:49:86:2e:17:
2b:7a:e7:82:31:2a:89:21:dd:83:8e:67:ef:71:6c:
2a:4e:81:9d:4c:b5:88:a4:a6:62:27:a2:8a:63:69:
70:cf:9a:48:8f:a7:7e:32:4b:ea:df:65:82:fa:e5:
70:44:36:e7:a2:89:c8:ea:36:dd:f3:4a:d2:6f:63:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:36:04:00:B8:B6:1E:3F:AD:BA:92:7F:AE:C2:F7:B3:CB:73:9E:51
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/gDYEALi2Hj-tupJ_rsL3s8tznlE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31077
Signature Algorithm: sha256WithRSAEncryption
d5:8c:e0:9d:89:56:e3:25:05:06:1a:0a:c5:42:f4:96:c3:55:
2e:22:47:4b:64:0e:4a:8b:4c:4c:63:4d:fe:0a:b3:b0:a8:a2:
15:40:e4:ec:3e:4d:77:dd:89:2e:15:51:cb:85:12:90:f7:81:
06:56:3b:52:92:93:b8:ae:bc:4f:61:19:8d:a3:5a:ac:91:f9:
bc:d3:9a:35:13:e8:c3:dc:9b:53:7e:04:36:c9:9a:c7:61:48:
b3:6d:24:af:35:86:43:be:d4:9c:29:f3:04:88:64:ab:aa:28:
23:20:49:99:39:83:24:24:dc:27:57:23:68:3b:dd:f3:4c:c8:
0d:89:20:29:89:94:e9:08:a0:45:47:ad:1b:d9:28:a8:5c:ef:
d1:df:71:ec:2a:e5:bd:4c:8e:19:5d:77:e2:d2:c2:1c:47:eb:
26:16:03:c5:91:ea:2b:ad:1e:79:dc:5a:28:ba:ea:d8:b6:92:
9b:ee:0d:b8:07:27:d9:06:3c:09:a0:c9:4b:38:b8:94:c2:12:
7e:f7:63:23:95:ed:fd:68:64:82:bd:c6:c6:12:87:31:2a:3b:
fe:01:39:c4:0f:7e:e0:df:da:8d:07:fc:0b:c6:7c:98:d0:8b:
e8:24:b9:e1:b4:96:d0:2f:90:f4:14:96:3d:8d:8b:1c:1f:67:
6d:3a:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:34 2026 by rpki-client