Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/Hykty8ZT3B_khffcWdZGH8-bqU4.asa
File: Hykty8ZT3B_khffcWdZGH8-bqU4.asa (raw, json)
Hash identifier: 1q5LAz7I6wf4mRO+VjAfuoGiwZX81t5qBHaYtssjPNg=
Subject key identifier: 1F:29:2D:CB:C6:53:DC:1F:E4:85:F7:DC:59:D6:46:1F:CF:9B:A9:4E
Certificate issuer: /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial: 019C86AD8E7434E2D6C1E43453422E38CE55
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/Hykty8ZT3B_khffcWdZGH8-bqU4.asa
Signing time: Sun 22 Feb 2026 18:47:26 +0000
ASPA not before: Sun 22 Feb 2026 18:47:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211008
Providers: AS: 31898
AS: 34927
AS: 41051
AS: 44324
AS: 214757
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:86:ad:8e:74:34:e2:d6:c1:e4:34:53:42:2e:38:ce:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Validity
Not Before: Feb 22 18:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f292dcbc653dc1fe485f7dc59d6461fcf9ba94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:cc:d9:ce:fb:5e:a0:6b:a3:fd:1d:5b:23:
6a:c3:ed:31:b1:ed:87:d0:3c:a6:d2:e2:c6:a3:13:
9b:0b:19:9d:b3:22:48:52:62:95:43:41:ab:f8:5b:
cd:d4:42:90:f8:1a:61:47:f9:d7:da:07:72:1d:c5:
e0:7b:e5:05:2a:f5:40:f7:05:ad:0e:dd:29:93:d0:
1d:4a:fa:53:44:aa:9c:61:a7:1a:b9:26:f3:c8:9a:
a6:ac:6f:7c:e6:80:11:37:a9:a2:7e:c8:9b:68:54:
87:4c:ef:ce:95:ed:7e:03:f3:df:a4:a3:cb:6d:e7:
58:56:50:d6:ef:af:79:55:9a:e0:ff:42:0f:03:d5:
64:f4:e7:5b:d1:6d:65:5c:fc:3c:17:c0:7c:ee:fd:
05:fa:e7:73:93:c0:40:6d:ff:67:65:67:01:e9:7f:
2b:ed:8f:92:c1:f3:53:a2:95:9b:27:d0:af:88:4b:
b9:5b:ca:2c:34:88:d5:44:8f:5c:87:b5:e0:0b:cc:
93:e6:88:84:79:3b:21:1a:61:cd:a7:78:ea:40:4d:
56:61:32:a8:90:2f:27:36:c5:c8:5d:f2:bb:64:d1:
b3:cd:42:7a:c7:d9:5d:5e:11:97:bb:e6:e0:38:fb:
a7:a2:61:1a:1e:9f:c4:74:a3:26:99:4e:60:2e:b6:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:2D:CB:C6:53:DC:1F:E4:85:F7:DC:59:D6:46:1F:CF:9B:A9:4E
X509v3 Authority Key Identifier:
keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/Hykty8ZT3B_khffcWdZGH8-bqU4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211008
Signature Algorithm: sha256WithRSAEncryption
9b:c7:5f:47:62:16:03:8e:d7:ee:b4:25:83:21:38:87:56:1e:
04:f2:23:6f:ad:57:58:98:04:37:d6:55:7b:6b:87:81:9a:05:
5c:ee:4b:60:ec:da:7b:84:38:2c:3c:6d:4f:a6:d6:4d:a1:21:
cc:28:9a:2c:03:ed:dc:b6:a6:2b:8c:55:6d:ac:80:ff:63:1b:
52:00:f1:87:11:51:ff:f2:29:79:90:35:63:4c:f2:14:52:1f:
a1:69:38:39:77:38:a4:a6:65:a7:e0:f9:b0:a4:1b:33:5f:ce:
da:b1:05:0a:07:b1:51:65:38:97:bd:9b:87:65:fd:b1:40:4c:
d0:7c:ca:af:48:2b:70:8d:8f:65:54:24:5f:db:65:9d:8b:25:
f8:a1:d7:5a:e8:c7:60:9c:ad:1e:b4:98:d4:e5:21:41:4c:c6:
3e:a0:e3:6f:61:7c:7d:0f:eb:07:bb:93:5e:0c:90:d3:38:04:
aa:d7:cd:c2:f0:67:5c:d5:46:5f:ed:7c:c3:d1:87:67:f3:27:
10:86:0a:29:1d:39:39:32:f0:4a:ba:dd:42:d6:c4:c3:98:b0:
ce:27:d8:3f:45:aa:94:c6:7b:21:24:6f:12:dc:a7:26:0b:6f:
75:57:5c:e5:81:1e:94:5c:76:cb:c8:34:58:38:3d:f9:d9:71:
37:8a:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:01:45 2026 by rpki-client