Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa
File: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (raw, json)
Hash identifier: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=
Subject key identifier: 38:59:95:3A:20:90:7A:DA:CD:90:EB:66:BB:7C:C2:9C:A4:87:75:B4
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 019D2A50493AC801C668502098F996ECD140
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa
Signing time: Thu 26 Mar 2026 13:23:17 +0000
ASPA not before: Thu 26 Mar 2026 13:23:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 13076
Providers: AS: 5089
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:50:49:3a:c8:01:c6:68:50:20:98:f9:96:ec:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Mar 26 13:23:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3859953a20907adacd90eb66bb7cc29ca48775b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3f:6d:32:6a:21:37:0d:ec:ef:4a:58:38:4e:
cc:65:66:bf:c0:d0:2f:dc:9d:8d:73:86:ec:c1:03:
a3:b2:85:d3:57:df:ee:7f:80:4c:1d:b6:34:6b:d6:
ce:f9:59:ff:44:bd:8f:3e:6d:be:5f:59:04:ed:f9:
20:9b:fe:a2:c2:ae:a7:4f:ed:99:e9:1d:78:0a:4e:
f5:2f:e3:d2:48:e1:f0:fa:3b:27:de:9b:b5:21:23:
ba:8e:8d:47:aa:0f:3e:e3:45:d3:e7:88:e3:61:c6:
dd:59:56:5a:61:6c:be:c2:1e:ca:5f:50:f2:97:5a:
38:03:fe:ae:ca:d9:2d:f1:fd:64:6a:13:61:2e:cd:
1a:b8:88:f4:d9:fa:49:da:d7:42:cc:33:1e:7d:c8:
26:37:2c:af:06:5d:af:33:41:61:86:8a:7a:1d:f9:
ad:e2:f2:9a:91:6c:d4:f9:fd:79:39:94:14:f5:aa:
35:7a:c8:4e:75:88:22:78:47:18:36:33:6a:e2:34:
9a:f6:5c:15:2c:9b:22:e7:8d:f8:5e:76:e5:0f:ed:
d5:aa:41:9a:9e:d5:fb:44:34:0d:13:91:aa:d4:63:
7f:7a:bb:1a:01:be:0d:11:15:d8:08:73:3a:50:b5:
b3:44:bb:22:ad:67:b9:d6:75:af:2e:1d:d6:c3:17:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:59:95:3A:20:90:7A:DA:CD:90:EB:66:BB:7C:C2:9C:A4:87:75:B4
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13076
Signature Algorithm: sha256WithRSAEncryption
5a:b5:24:0c:2a:16:04:32:71:b2:84:6a:4d:6d:15:d8:cb:19:
26:e2:76:b8:bc:ba:ca:70:48:59:5b:30:71:94:23:52:44:6c:
77:36:19:74:1b:36:f5:62:95:54:56:1a:78:c5:15:96:76:33:
4d:c8:f8:1a:7c:39:da:4f:78:57:07:ac:cc:a9:af:dc:3b:71:
ee:6e:a1:84:0f:c0:f4:e5:b5:74:1b:1d:3f:78:3e:5a:4a:e1:
dc:4f:c0:f5:d0:3a:e3:f0:b4:3f:e0:d2:6d:1a:9f:a7:1d:07:
07:29:ee:a3:9c:e0:71:be:ba:f4:5f:7d:3d:c6:8d:43:38:7b:
e5:3d:4c:52:7a:ae:cf:ee:59:ee:f4:0a:df:d9:be:cd:4e:af:
c3:14:39:59:a6:70:86:db:29:9c:ef:74:7d:c4:68:e6:89:b9:
1c:d1:d4:8f:c1:ea:2f:d0:a2:2c:e7:0e:94:48:96:b0:98:48:
53:74:89:71:c4:41:38:0b:35:21:30:61:11:34:5e:83:af:a2:
87:7d:61:94:29:3f:9c:3c:c4:aa:87:33:58:f9:b1:fe:51:3f:
c0:2a:9b:f3:2a:89:00:b9:13:25:42:a3:ca:43:2e:5c:ea:2d:
6d:ad:ba:7d:17:d5:16:e9:dc:d1:a4:a1:e2:e1:89:d5:a9:6c:
8e:f2:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:23 2026 by rpki-client