Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa
File: HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa (raw, json)
Hash identifier: T59UJlc60g8iD9F8A5gW9lus5ZkgqKFSvYU4ouF7Krc=
Subject key identifier: 1D:68:E0:E1:CA:83:94:57:0F:6E:C9:E9:6E:02:A5:68:24:65:6D:36
Certificate issuer: /CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Certificate serial: 019F9145BC32ACB34E6D7A85049D9ADFD0F7
Authority key identifier: AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa
Signing time: Thu 23 Jul 2026 23:18:14 +0000
ASPA not before: Thu 23 Jul 2026 23:18:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219166
Providers: AS: 35708
AS: 209533
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:45:bc:32:ac:b3:4e:6d:7a:85:04:9d:9a:df:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Validity
Not Before: Jul 23 23:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d68e0e1ca8394570f6ec9e96e02a56824656d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:15:5f:d1:36:75:ec:97:ff:47:49:61:1d:
96:f2:b8:58:fe:c2:0c:25:41:c5:84:f1:87:1c:ab:
3e:1a:bb:f5:ce:04:fc:6f:4a:87:64:03:d6:02:76:
f3:4d:e5:dd:fb:ad:cf:7c:ca:5e:b9:9d:c3:1e:c9:
89:f3:6a:71:3d:9e:8f:03:6c:82:2b:47:8f:83:ca:
94:88:bc:c6:88:09:7a:cb:95:fe:92:c7:0b:eb:2d:
33:5c:4f:6c:ca:85:60:af:66:51:02:ed:2f:f6:22:
fc:c2:2a:5c:f9:03:1f:a8:11:a0:58:f6:25:2c:00:
d3:60:78:04:40:a7:93:7a:29:4f:77:83:ae:ad:b2:
0b:74:15:18:b0:c5:3e:08:70:3c:21:60:51:28:3d:
8f:2d:68:9a:77:65:0d:b6:61:19:46:db:c0:67:c2:
b3:5d:ab:39:30:5f:81:1c:8b:c7:ed:40:0e:11:54:
9f:98:3b:28:6c:43:76:aa:32:22:dc:2a:a8:39:73:
78:6d:76:18:1e:05:d2:5c:63:d5:60:47:9f:30:6b:
16:a1:03:59:27:cf:fd:f3:a0:66:0e:4d:4f:d8:df:
a9:81:b0:ea:9d:82:99:8f:4b:71:8b:66:8d:75:1d:
7d:0f:ad:2b:ea:1d:7c:20:82:4e:f9:72:c5:72:27:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:E0:E1:CA:83:94:57:0F:6E:C9:E9:6E:02:A5:68:24:65:6D:36
X509v3 Authority Key Identifier:
keyid:AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219166
Signature Algorithm: sha256WithRSAEncryption
24:36:62:dc:eb:15:fd:8a:a2:64:f1:59:c2:ce:01:be:3d:1a:
64:d8:86:8b:20:ba:83:e7:fe:df:2f:c6:27:74:d0:bd:c4:5f:
36:a4:be:f8:d1:10:05:65:87:83:25:30:38:05:14:14:19:7c:
6b:ef:4e:41:e3:80:81:71:15:d2:01:d4:73:e2:07:1d:12:2d:
b9:3b:de:a9:66:da:0c:bd:95:5d:4f:8a:d0:88:20:2d:3c:6d:
6e:f4:7e:7d:b6:68:67:a5:d4:25:db:0b:37:21:1f:4b:7c:83:
3d:18:05:ff:e7:c0:53:d1:11:39:c9:93:4f:f4:11:82:fd:5f:
2e:dd:43:17:dc:0a:12:4e:02:43:1d:61:af:57:49:1e:a9:7d:
3d:a8:ea:03:8a:1e:ad:2a:69:85:12:35:a5:99:14:dd:8a:b2:
3b:fe:b5:e9:75:40:97:b0:fc:f6:51:fb:1d:c0:8e:cc:60:5b:
c5:d6:c9:b2:ca:c4:46:c4:bd:24:c2:b5:f1:2d:c1:69:86:9e:
02:4c:9f:96:a6:a3:d4:da:b4:7c:66:e1:59:ff:4d:d1:d9:42:
9d:34:b1:3a:cf:b4:5c:06:5b:0d:24:ce:aa:24:26:f9:dd:9d:
6b:e0:2c:01:42:ed:42:5c:d7:7e:72:f7:bc:44:b0:67:a8:06:
9a:66:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:10 2026 by rpki-client