Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/drsHyJd54bQmTrK79sYayH7gZU0.asa
File: drsHyJd54bQmTrK79sYayH7gZU0.asa (raw, json)
Hash identifier: PhsvxaQWRgPrAHzHZsRm4M1zdIRNOuacc65APqiAfno=
Subject key identifier: 76:BB:07:C8:97:79:E1:B4:26:4E:B2:BB:F6:C6:1A:C8:7E:E0:65:4D
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 019D8B426EEDA434D5EE8C79214DF94D9B23
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/drsHyJd54bQmTrK79sYayH7gZU0.asa
Signing time: Tue 14 Apr 2026 09:11:19 +0000
ASPA not before: Tue 14 Apr 2026 09:11:19 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 24824
Providers: AS: 1299
AS: 3257
AS: 5385
AS: 8437
AS: 35280
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:42:6e:ed:a4:34:d5:ee:8c:79:21:4d:f9:4d:9b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Apr 14 09:11:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76bb07c89779e1b4264eb2bbf6c61ac87ee0654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:b3:4d:54:47:21:fe:68:a3:4f:18:7e:d5:
1f:11:59:9d:0a:6e:a5:c1:df:61:e1:31:0c:41:97:
b6:f9:4d:e3:92:f0:ca:d1:dd:6a:72:93:e8:f3:75:
20:b1:e6:68:ee:bb:2a:02:64:ac:91:30:0d:9d:4a:
ca:29:ef:d5:96:42:8a:f1:e4:11:c6:ba:41:11:ef:
e0:02:de:f4:93:dd:8f:d8:7f:35:2d:95:77:a5:2b:
86:7c:14:42:b0:18:7e:c3:51:a6:dc:5b:54:56:f6:
4c:a3:60:ad:ad:dd:5b:40:21:79:e9:6b:a5:d9:4c:
ae:a8:c2:01:5b:65:d3:a7:8c:e6:5e:ed:a8:ac:11:
fd:3c:d2:05:99:66:d6:ae:0e:de:dc:45:1f:d4:15:
44:2a:f7:f7:bb:4e:fd:9a:36:c0:4b:9c:86:34:fb:
24:83:d8:57:14:6a:09:59:93:24:4e:34:26:86:66:
13:e1:67:d2:59:60:d2:e5:66:12:7f:fc:17:0f:14:
bc:e9:31:1f:b3:d8:1b:d6:fc:c9:45:48:c9:7d:e2:
10:af:38:92:88:37:c7:f5:3c:0d:15:ec:c8:22:dc:
2b:dc:f9:88:38:57:21:c3:5b:af:45:2b:02:eb:84:
88:51:8f:47:df:ec:ee:36:19:8c:f5:08:33:45:66:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BB:07:C8:97:79:E1:B4:26:4E:B2:BB:F6:C6:1A:C8:7E:E0:65:4D
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/drsHyJd54bQmTrK79sYayH7gZU0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24824
Signature Algorithm: sha256WithRSAEncryption
7e:df:5c:de:9a:73:97:df:43:1a:95:21:55:39:65:4d:e8:93:
ec:74:46:67:7a:b9:8d:19:c2:d5:cb:67:ec:97:16:8b:b1:80:
50:f2:a7:d5:ff:14:46:7b:01:04:bf:dc:94:c4:61:46:1f:86:
7b:38:25:e7:a2:87:b8:d6:3b:e2:5f:9f:bf:1d:33:ea:49:1f:
f6:92:f1:39:51:af:50:92:a7:16:72:83:b1:de:11:c0:ca:ff:
86:17:cb:a5:8e:1b:df:4a:7c:44:19:0e:77:62:47:e6:c5:5a:
23:14:1d:79:6a:d5:cc:ad:ea:30:db:27:47:8b:72:7b:c1:b4:
58:80:8a:d9:73:06:40:1d:cb:00:31:f9:12:5e:94:30:f3:a1:
9c:4e:37:e6:59:08:cc:91:6f:0b:a4:7a:1e:43:24:fc:f6:f9:
89:1c:b6:4b:02:ae:4e:16:2d:1e:b1:41:17:41:01:28:0e:55:
20:fd:31:0f:c6:cd:f7:3a:e4:ac:d0:89:0b:cd:76:39:04:f5:
e7:74:ee:68:27:26:64:b6:fa:e1:99:02:d3:b2:26:84:56:70:
00:ad:b3:e2:73:45:95:f1:fe:50:38:1f:4b:66:8b:d3:61:7d:
7c:51:6d:fd:b9:75:f5:cb:79:1f:76:17:22:6a:66:d0:df:f5:
7b:43:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:12 2026 by rpki-client