Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/3gIp0do7jiNRekvTGYYcxp0N4KQ.asa
File: 3gIp0do7jiNRekvTGYYcxp0N4KQ.asa (raw, json)
Hash identifier: NdEXhwinGvt8QXFqMCRPd1EsUHvL+9wNCdKJKLs61vs=
Subject key identifier: DE:02:29:D1:DA:3B:8E:23:51:7A:4B:D3:19:86:1C:C6:9D:0D:E0:A4
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 019D66D3205F8E7D0CA5F0183522CC79A54C
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/3gIp0do7jiNRekvTGYYcxp0N4KQ.asa
Signing time: Tue 07 Apr 2026 07:23:25 +0000
ASPA not before: Tue 07 Apr 2026 07:23:25 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205597
Providers: AS: 34549
AS: 202409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:d3:20:5f:8e:7d:0c:a5:f0:18:35:22:cc:79:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Apr 7 07:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de0229d1da3b8e23517a4bd319861cc69d0de0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:be:6b:29:0d:ec:89:cf:77:ad:84:d0:fd:c4:
75:0c:73:4e:b9:f3:10:d9:b0:be:03:ac:9e:fe:7b:
ba:51:91:f5:d8:68:96:bf:96:a9:2f:54:3c:2a:b2:
63:61:26:3c:75:49:b9:df:da:0e:31:ff:c0:cb:c2:
cc:f5:01:bb:cc:e2:26:8a:75:67:32:8b:04:f8:c3:
7f:a0:d0:10:26:eb:1f:9b:ae:b6:a8:f0:17:8f:d9:
8e:06:f0:05:93:b7:c3:b1:5e:52:b1:bb:96:76:be:
c5:95:ed:7b:52:56:ec:59:2b:21:f1:46:0a:9b:a3:
ed:d2:f6:63:59:83:db:34:ed:55:85:39:c6:68:2f:
c1:8b:d5:23:fe:28:08:f9:36:51:5f:05:3b:f7:57:
08:a5:3d:be:22:4e:1b:a6:06:de:a1:9b:3d:87:ea:
b8:89:db:7f:87:8c:08:f3:90:fa:de:b0:5c:c5:d7:
ad:a6:b7:0e:10:c1:17:a6:80:10:a6:33:d6:72:cc:
71:55:09:56:c7:f5:56:f5:12:20:7e:f6:7d:17:3b:
a1:26:b5:37:47:58:7c:bf:41:70:93:bc:39:be:87:
ea:f4:0f:8c:a8:b4:2c:0c:a1:fa:d0:55:ea:be:12:
e7:67:d3:6c:9a:59:e4:67:12:08:fc:53:91:cd:d9:
b4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:02:29:D1:DA:3B:8E:23:51:7A:4B:D3:19:86:1C:C6:9D:0D:E0:A4
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/3gIp0do7jiNRekvTGYYcxp0N4KQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205597
Signature Algorithm: sha256WithRSAEncryption
6d:a5:5d:aa:d8:8e:cb:66:86:20:29:7d:d1:fd:1b:e4:db:06:
b0:44:c4:0b:11:35:82:01:6c:39:5f:23:4d:9a:0b:89:64:16:
d5:6c:49:cc:2a:86:5d:c2:b1:97:b6:fb:c8:bc:16:7e:9e:cf:
a2:60:cc:9c:e4:d7:0b:71:cf:57:ff:1c:4a:a1:bd:a9:30:2d:
e6:ae:cb:fa:f7:ed:0b:86:69:1e:f7:d5:d8:15:87:33:c5:cc:
83:7c:09:d9:88:7f:3a:f2:f5:45:7b:da:d0:24:f6:8f:d4:f9:
ad:cf:b2:d1:7d:6e:6c:8e:a5:27:2f:43:2a:e8:44:ef:96:97:
4a:96:16:bb:aa:ba:03:8a:c5:94:29:80:a3:2c:dd:29:62:c3:
50:ee:c6:e4:5f:6d:a9:0e:bb:16:c5:43:d2:d4:3a:ba:d8:ae:
30:4d:94:17:22:02:fc:7f:56:42:37:ab:c6:9f:0f:e5:ea:18:
f9:c8:5c:1d:2b:65:7e:20:a2:68:32:a1:42:21:17:1e:08:49:
c8:ca:fa:a9:3c:d6:7b:e0:5f:0d:d8:20:1c:c4:b3:21:50:0e:
8c:cc:02:98:32:78:02:57:41:13:93:78:bc:47:7e:69:e9:be:
8a:1a:f2:c1:a8:ce:91:5d:1f:4d:f5:19:d7:e6:cf:1a:f8:ed:
c6:89:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:19:39 2026 by rpki-client