Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/XU-lnejjTfdYfkel9cu2qcj3jOg.asa
File: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (raw, json)
Hash identifier: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=
Subject key identifier: 5D:4F:A5:9D:E8:E3:4D:F7:58:7E:47:A5:F5:CB:B6:A9:C8:F7:8C:E8
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019DA2958331465912CD39F66317674D80AB
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/XU-lnejjTfdYfkel9cu2qcj3jOg.asa
Signing time: Sat 18 Apr 2026 21:53:20 +0000
ASPA not before: Sat 18 Apr 2026 21:53:20 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 56582
Providers: AS: 9121
AS: 59796
AS: 208972
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:95:83:31:46:59:12:cd:39:f6:63:17:67:4d:80:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Apr 18 21:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d4fa59de8e34df7587e47a5f5cbb6a9c8f78ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:06:cc:4f:79:7b:5e:60:e4:95:0d:5f:cf:
a8:99:88:e5:d2:11:aa:96:34:a5:39:c7:42:75:fa:
8f:36:17:f7:a8:92:31:88:97:5a:31:61:66:8e:8e:
03:88:1d:74:12:a3:8f:a0:8a:c9:48:66:5e:5f:c8:
66:7d:1a:26:55:95:41:a3:f5:79:7f:0d:e6:0e:2d:
1f:c6:a6:1d:a9:1d:58:8a:34:30:98:ee:4b:bf:9f:
2e:ed:56:1b:fb:04:80:db:a4:4d:ec:b4:d5:a9:7e:
c0:49:09:ee:fa:ce:d5:e0:80:aa:c9:5f:7b:b8:53:
2f:9f:72:7f:66:d6:02:07:bf:5e:a5:8a:6b:73:c2:
9d:55:b4:a6:4d:87:15:8a:cc:d4:02:d1:e9:87:c5:
fc:26:74:0c:0e:6e:b7:5a:f9:c7:bc:a2:8b:7f:a2:
77:fe:23:de:91:b3:c4:13:4f:7a:22:03:b4:e7:a2:
4a:39:88:f7:29:c9:01:67:4f:4f:8c:00:a0:98:fe:
17:d2:58:53:71:fc:14:b2:48:5d:a3:18:e5:b1:1e:
1b:8e:7d:e3:1c:4b:5b:91:28:4b:5a:9b:61:f8:23:
9e:92:d3:41:85:3d:d8:63:24:4b:1c:e5:d6:46:05:
1c:67:59:72:6c:7c:a4:19:8e:a6:26:a3:1b:f8:44:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:A5:9D:E8:E3:4D:F7:58:7E:47:A5:F5:CB:B6:A9:C8:F7:8C:E8
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/XU-lnejjTfdYfkel9cu2qcj3jOg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56582
Signature Algorithm: sha256WithRSAEncryption
95:8c:63:84:aa:60:da:de:b8:ac:2b:2e:a8:d4:65:8c:90:fd:
af:d6:13:2b:3e:fe:50:3c:e6:09:ff:ac:51:9b:23:19:ae:26:
64:92:79:1b:06:e9:a4:bc:d6:0a:4d:03:b5:24:d0:f7:0b:16:
ff:5d:5d:e8:e7:c1:b5:34:7a:1e:ef:a7:e0:82:97:4a:59:ae:
0d:a9:d6:20:4c:55:d6:ca:99:e8:6b:73:fd:6f:92:e0:fc:d7:
8a:dd:3b:72:78:1b:0e:0e:bd:79:39:05:27:ba:e1:3e:f4:a8:
30:d1:1e:c2:9a:12:1f:93:88:32:e7:38:2b:87:d9:42:b9:82:
93:04:7f:ee:3d:b8:ac:2a:d1:34:a5:07:81:21:f3:3b:9d:7c:
0f:5d:c9:a7:02:cf:fb:a6:18:5b:44:80:92:3f:bc:2a:e9:e3:
4d:bd:56:cc:ec:b3:49:fb:12:94:09:2e:b4:91:a0:b0:9d:dc:
8a:a7:89:68:97:a3:c8:4d:8e:96:df:dd:d0:09:e9:a6:3c:4d:
e1:2f:26:82:16:a6:65:c0:d4:dc:f6:d9:ee:00:65:34:05:b1:
67:c9:d0:09:b9:69:3f:fa:98:c5:8d:fa:50:9b:01:c9:47:e3:
19:75:78:10:aa:b4:e7:9d:8b:ab:3a:f0:5c:18:bd:ff:40:e2:
33:0d:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:23 2026 by rpki-client