Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/ca2_ka3kebG4xHwE6CZSEy0WpnA.asa
File: ca2_ka3kebG4xHwE6CZSEy0WpnA.asa (raw, json)
Hash identifier: nEWMHuIMfgnCR89CtrdeQhiYg+87GPGGAfi7uNBVLmw=
Subject key identifier: 71:AD:BF:91:AD:E4:79:B1:B8:C4:7C:04:E8:26:52:13:2D:16:A6:70
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019FA32BF2D1B29588A3BCB5422EC78B8B7F
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/ca2_ka3kebG4xHwE6CZSEy0WpnA.asa
Signing time: Mon 27 Jul 2026 10:43:14 +0000
ASPA not before: Mon 27 Jul 2026 10:43:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 48626
Providers: AS: 5617
AS: 20804
AS: 29535
AS: 38942
AS: 50607
AS: 62047
AS: 201054
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:2b:f2:d1:b2:95:88:a3:bc:b5:42:2e:c7:8b:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Jul 27 10:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71adbf91ade479b1b8c47c04e82652132d16a670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:ec:e7:1e:c9:ff:e7:21:17:68:dd:ff:8d:
09:de:e0:8b:18:d2:c4:cb:7b:98:e2:da:29:f6:e5:
c7:96:60:31:61:73:f6:14:34:74:fc:2f:51:2e:82:
d7:74:0f:8b:45:f8:a9:d3:17:06:ac:a8:c6:b0:3b:
58:c2:90:31:d0:90:78:19:20:2e:a6:33:44:ff:e5:
06:dc:d0:e4:2e:0d:f1:6e:a2:c2:bf:e3:b6:fe:89:
6b:58:46:df:f7:91:b9:bb:e8:2c:fd:e0:a8:33:c9:
53:af:44:c9:df:5f:dd:5b:40:ed:55:ce:5a:4e:18:
28:d6:88:7b:10:db:27:3c:36:71:36:5b:58:8c:a7:
2a:c1:8b:46:93:55:04:cd:e7:81:75:e7:ff:80:d3:
37:07:97:bb:2a:62:c1:2f:6d:eb:5a:3b:01:da:3e:
6f:01:79:ab:99:c4:68:14:1b:a3:dd:a0:ab:d8:ba:
23:04:60:51:8b:3b:68:cd:f5:17:03:6f:1e:49:bd:
40:00:e4:40:9e:4c:3d:23:ed:de:ca:c0:0c:24:d7:
2e:6e:53:9b:d3:e6:13:a8:57:a1:50:9b:2f:eb:7f:
06:81:3b:b9:28:74:bf:40:34:b9:7e:74:6d:87:4c:
8e:7a:bf:b8:f8:6e:ca:b8:5a:2c:2c:1e:1a:c5:46:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:BF:91:AD:E4:79:B1:B8:C4:7C:04:E8:26:52:13:2D:16:A6:70
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/ca2_ka3kebG4xHwE6CZSEy0WpnA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48626
Signature Algorithm: sha256WithRSAEncryption
03:d5:0b:bf:72:cc:08:ca:05:3d:91:87:67:e0:26:70:82:1c:
8f:48:70:28:9f:42:51:24:a7:9a:86:1b:bf:69:38:d6:65:72:
e8:0b:7b:c8:5e:5b:de:2a:cc:fe:f0:a0:7d:2a:57:43:fc:71:
56:4c:6d:d7:43:b6:c0:f0:8b:0e:1e:67:55:dc:81:85:13:14:
c9:a9:82:c3:48:c6:16:ec:29:93:e5:c5:69:0f:9f:ca:fa:b5:
49:76:9a:ee:a5:66:5f:26:c8:30:3f:5e:37:e1:fa:dc:de:17:
ff:c8:72:61:fa:90:1a:8e:27:96:1e:cd:a1:9b:bd:42:dc:a5:
de:85:a8:ee:0b:51:5f:fd:e3:dd:c6:8b:d3:2e:df:c6:c8:b2:
09:ee:31:ac:d4:ea:59:57:b1:aa:71:35:80:fb:dc:e0:dd:22:
84:ea:e3:ad:77:20:a9:76:32:3e:a1:e8:bf:b7:5d:de:8a:fe:
d0:7f:2e:de:6f:95:a9:54:01:94:d4:e8:e8:96:42:59:26:65:
c2:24:ce:75:a6:52:0f:1f:29:a2:c8:3f:f3:67:53:b9:01:ec:
d5:5c:d1:f6:c2:b3:31:28:dc:d4:67:fc:be:63:c5:4a:f9:5c:
7f:50:81:d4:dd:e9:47:89:76:4c:2c:8a:39:3b:5c:fd:5d:91:
0a:61:2b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 12:31:31 2026 by rpki-client