Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/H7q4kz0RynAHprvrCBHVQwemyck.asa
File: H7q4kz0RynAHprvrCBHVQwemyck.asa (raw, json)
Hash identifier: lF4HoOFJdk/5+3/3TmvUoLKkxen3fP0BoEBpUizxP1w=
Subject key identifier: 1F:BA:B8:93:3D:11:CA:70:07:A6:BB:EB:08:11:D5:43:07:A6:C9:C9
Certificate issuer: /CN=10fdbe14552f0c38ba833e638a3077aafba4e6db
Certificate serial: 019FA372D6CE06DE2DBCD093157E374C915E
Authority key identifier: 10:FD:BE:14:55:2F:0C:38:BA:83:3E:63:8A:30:77:AA:FB:A4:E6:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/H7q4kz0RynAHprvrCBHVQwemyck.asa
Signing time: Mon 27 Jul 2026 12:00:39 +0000
ASPA not before: Mon 27 Jul 2026 12:00:39 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212932
Providers: AS: 174
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:d6:ce:06:de:2d:bc:d0:93:15:7e:37:4c:91:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fdbe14552f0c38ba833e638a3077aafba4e6db
Validity
Not Before: Jul 27 12:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fbab8933d11ca7007a6bbeb0811d54307a6c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:1a:de:ac:a9:fa:a7:04:87:27:88:fc:75:
3c:46:05:00:30:f4:c6:04:d7:c1:e4:08:47:1c:9b:
c6:90:2c:92:80:92:9d:98:ce:10:bc:88:12:2c:6b:
d3:78:e1:3c:a0:e5:06:c9:07:27:d5:c5:4d:74:4e:
af:94:31:46:41:81:dc:28:e0:6a:ff:80:28:04:8d:
6d:0c:d4:d9:08:33:f6:93:76:7e:b2:31:71:63:53:
ad:75:82:9b:03:69:a5:ae:b7:6c:a5:c3:d0:d3:23:
de:88:31:92:72:dc:4b:99:cc:c8:3d:48:37:ec:18:
eb:97:99:f3:8e:03:66:0b:21:12:87:b0:17:95:ba:
47:c0:28:f8:f3:ef:96:6b:0e:3a:62:d0:49:c4:f3:
4a:8d:36:55:2e:e0:20:24:a2:be:ff:15:77:49:84:
d3:9e:a8:f5:4d:78:2f:e8:c6:10:a1:1b:79:94:61:
28:70:4c:71:6d:fc:05:81:b3:ac:89:1e:8b:40:18:
c4:c3:a2:26:b7:bb:0a:97:1c:0b:21:d8:a1:07:af:
5b:96:8e:da:13:23:42:55:86:29:93:76:78:ca:16:
7d:52:a5:6d:86:5a:0d:a9:31:bc:05:32:8c:54:97:
08:a1:b0:ec:98:64:e7:b1:d4:47:11:2c:74:de:c8:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:B8:93:3D:11:CA:70:07:A6:BB:EB:08:11:D5:43:07:A6:C9:C9
X509v3 Authority Key Identifier:
keyid:10:FD:BE:14:55:2F:0C:38:BA:83:3E:63:8A:30:77:AA:FB:A4:E6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP2-FFUvDDi6gz5jijB3qvuk5ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/H7q4kz0RynAHprvrCBHVQwemyck.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1c1505-3ef7-487d-ab31-9faeade33199/1/EP2-FFUvDDi6gz5jijB3qvuk5ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212932
Signature Algorithm: sha256WithRSAEncryption
b4:fe:48:22:44:08:41:9f:9b:b2:ce:0f:59:bb:47:05:bb:c2:
99:20:43:76:92:cf:7d:7a:d9:f7:e4:bc:a9:b4:3f:df:9b:81:
0c:61:01:7b:d7:65:35:7f:9c:00:a0:61:98:fc:c7:b9:07:df:
b4:a5:b8:07:9e:b8:43:8d:30:cb:19:7b:0c:3a:40:71:cb:9f:
df:0f:ce:01:0d:b2:53:e6:2e:af:1a:21:f6:11:6d:ff:96:09:
2f:47:fe:c4:8d:f0:2d:1c:42:d9:52:8b:9b:ea:9b:ef:f5:6f:
09:e4:a4:9a:90:c2:aa:94:5d:9e:af:dd:c5:cb:ee:e8:94:db:
e3:0e:de:c4:f0:3d:f5:a5:15:f8:fe:30:b4:2a:79:66:b7:45:
34:b7:dc:18:9c:62:1a:8e:14:fe:e8:6d:04:2a:1c:3a:ec:fd:
8a:20:14:17:93:06:15:01:8a:cf:b7:29:ce:e0:04:43:f6:9c:
7e:47:06:e4:83:64:a4:49:ff:ec:bd:c9:7b:f4:e6:67:42:93:
7d:15:47:f5:ab:8e:78:c0:01:c1:34:e9:df:5a:12:59:e8:fc:
0d:18:d7:b1:54:f3:11:bc:db:a4:1d:bc:bb:00:d6:9e:2a:ee:
b0:79:7e:c2:84:5f:b6:4e:d5:d5:91:db:a1:7c:8b:6f:9f:66:
e8:80:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:24 2026 by rpki-client