Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/LkIQdTCDAyRkTL--fns1mcSje7M.asa
File: LkIQdTCDAyRkTL--fns1mcSje7M.asa (raw, json)
Hash identifier: 7eizC5wFY7b2dkwAA5Tl7GOcBdql3G3vRPprad1SEao=
Subject key identifier: 2E:42:10:75:30:83:03:24:64:4C:BF:BE:7E:7B:35:99:C4:A3:7B:B3
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019D3E03EBCD11B4B63299F058CDC1843ADD
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/LkIQdTCDAyRkTL--fns1mcSje7M.asa
Signing time: Mon 30 Mar 2026 09:12:17 +0000
ASPA not before: Mon 30 Mar 2026 09:12:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 35097
Providers: AS: 0
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:03:eb:cd:11:b4:b6:32:99:f0:58:cd:c1:84:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Mar 30 09:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e42107530830324644cbfbe7e7b3599c4a37bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:ae:89:29:d3:03:82:45:05:65:ee:ad:39:
30:a0:de:8d:d0:9c:11:bd:04:2e:ac:4d:20:6f:1c:
51:12:e9:b6:da:2d:8e:69:8f:eb:ce:14:11:40:1c:
5d:dd:8e:4e:dd:9f:34:a7:c1:57:bf:9b:1a:aa:05:
d3:05:95:dd:ed:5b:09:62:a3:6e:30:aa:79:fe:7f:
57:17:da:54:55:19:2b:d9:04:96:d8:5d:97:64:38:
68:82:42:3c:62:02:08:57:a9:b7:b8:1f:a6:80:7e:
43:ca:12:a9:af:6b:4d:fb:b7:b1:3b:e9:9b:37:88:
38:36:4c:0e:9a:65:85:28:e3:c2:c3:8f:6c:12:a8:
0b:c6:c5:03:42:4d:54:1e:5d:cd:4d:62:41:ec:75:
60:7b:93:88:ed:d3:31:32:eb:10:a8:ca:61:bd:f9:
4a:24:60:86:bc:12:4e:ee:58:67:ee:09:5a:10:d4:
77:90:8c:46:5e:d2:f2:b7:a2:50:1a:61:1f:6e:b0:
a8:56:a5:3e:f1:34:b0:6a:fc:c5:d4:aa:66:d2:51:
d2:a2:b4:55:0d:76:92:04:6e:9d:0f:0d:f3:4b:77:
96:48:1d:d2:16:13:dd:2f:4d:bf:69:2c:2f:5c:de:
4c:80:1b:2b:de:d8:45:00:e4:05:f8:f3:e7:3b:b9:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:10:75:30:83:03:24:64:4C:BF:BE:7E:7B:35:99:C4:A3:7B:B3
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/LkIQdTCDAyRkTL--fns1mcSje7M.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35097
Signature Algorithm: sha256WithRSAEncryption
28:6a:de:b3:2c:65:c0:ae:62:3a:db:68:bd:77:f5:18:c6:bd:
30:09:9d:d9:68:9a:db:02:34:71:36:64:58:a9:ed:b7:04:63:
da:ac:09:b5:80:b9:d2:f3:43:f9:28:88:b4:71:c3:50:08:18:
98:cc:99:df:99:ea:41:bb:d5:af:ab:5e:51:ba:82:fb:89:bb:
0c:18:e7:60:7d:ca:5c:2d:26:90:2a:8e:d5:14:ab:4f:6a:a2:
a9:11:82:f8:c8:fb:d2:d2:03:2a:2d:cc:e5:52:96:26:f5:de:
e0:77:d2:5d:6a:8b:fb:92:53:8e:2f:ad:29:ce:77:c3:6f:33:
67:be:b0:00:1b:2c:ab:ae:86:a1:6c:9d:aa:a7:cc:1c:4d:76:
02:1e:06:47:9b:ed:9e:e8:1c:a9:40:69:05:3f:41:3c:b8:3a:
e0:35:02:30:ce:32:2d:89:37:d9:2c:2f:0e:ce:eb:a9:2e:0e:
2c:df:7e:78:e3:3b:6e:91:da:c3:c1:5e:c3:5a:8f:0f:31:21:
f6:19:48:65:18:92:91:63:49:c5:ba:9a:c5:07:77:2c:4a:a8:
7f:d9:59:e3:35:39:55:5e:5d:7b:ea:8d:97:20:07:58:ec:4c:
a7:f3:18:7f:ee:eb:7b:e3:53:b0:14:88:4b:b9:30:ac:7a:51:
b3:a4:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:37 2026 by rpki-client