Autonomous System Provider Authorization
$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/AS219418.asa
File: AS219418.asa (raw, json)
Hash identifier: iaRvn9nOOjZZtyPFGRsaQCPWyIYIEPJx77RGcLpTrY0=
Subject key identifier: 85:C8:8C:FD:4C:E4:43:6A:3B:A0:B1:7E:D6:D8:01:2A:EC:1A:63:9F
Certificate issuer: /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial: 36AD29DC77E06F94195877E1E7086C87997F6B52
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access: rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
Signing time: Mon 13 Jul 2026 21:31:40 +0000
ASPA not before: Mon 13 Jul 2026 21:26:40 +0000
ASPA not after: Mon 12 Jul 2027 21:31:40 +0000
Customer ASID: 219418
Providers: AS: 47272
AS: 197324
AS: 204464
AS: 213449
AS: 215147
Validation: OK
Signature path: rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 07:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ad:29:dc:77:e0:6f:94:19:58:77:e1:e7:08:6c:87:99:7f:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
Validity
Not Before: Jul 13 21:26:40 2026 GMT
Not After : Jul 12 21:31:40 2027 GMT
Subject: CN=85C88CFD4CE4436A3BA0B17ED6D8012AEC1A639F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:8f:83:1f:23:d4:96:3d:a9:cc:f6:87:80:
fa:76:89:d3:b9:64:20:c6:44:bd:1c:13:e6:45:73:
66:b2:27:b8:ff:10:39:6f:58:28:71:8e:f4:92:31:
59:8b:26:67:29:1c:ac:46:0b:9b:f9:39:3d:f4:b6:
a7:12:34:aa:3c:0d:24:22:51:c1:47:03:0c:49:f6:
91:96:d7:af:a6:d3:d6:31:d5:39:eb:c8:b5:f6:3b:
05:16:fa:5f:45:01:c2:4b:bd:e3:30:34:0f:23:2f:
03:46:9d:91:dc:eb:15:c3:28:88:e8:48:eb:d6:a5:
b1:81:3e:d5:80:67:80:7d:a6:83:af:08:55:4a:fd:
ee:f3:d2:a6:f9:4d:90:21:a9:be:29:c4:ad:b2:b7:
b9:1b:39:70:70:3b:06:3c:d1:59:2b:1a:7a:e2:65:
39:9c:ce:03:0e:8d:44:b5:e1:e7:9b:28:c4:99:b4:
3c:3a:11:28:6d:94:e2:ec:8e:07:ff:c9:e8:7c:73:
52:59:35:94:06:c6:91:c9:3c:9c:63:40:f9:66:fd:
f8:36:04:84:2c:e0:56:f1:2a:da:5e:56:40:2d:dc:
92:bc:c8:94:03:19:23:f4:eb:21:1e:d9:41:fc:e0:
52:3a:a0:7c:29:3d:06:48:bf:58:8f:6e:96:9e:12:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C8:8C:FD:4C:E4:43:6A:3B:A0:B1:7E:D6:D8:01:2A:EC:1A:63:9F
X509v3 Authority Key Identifier:
keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject Information Access:
Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219418
Signature Algorithm: sha256WithRSAEncryption
ad:19:67:63:93:37:9f:a0:71:62:83:7d:b8:d4:27:9d:ba:96:
b3:cc:e7:15:ba:e9:2b:ba:22:d6:cf:b7:41:e1:9b:1d:4e:63:
a2:49:e6:2e:98:7b:29:9d:7e:5a:b3:06:e7:e9:ba:56:1b:bd:
87:18:ad:82:41:12:c3:9b:30:7e:6f:2f:a4:1c:9b:0d:4d:98:
e8:29:66:4b:10:4c:ad:1b:30:b5:ce:41:02:c7:23:97:a2:26:
d0:81:52:1c:87:7a:45:fd:01:09:d5:4e:ca:26:e9:73:a7:f1:
40:12:a7:6c:29:18:12:22:a4:5f:ff:82:00:fa:f7:2e:b9:3a:
df:fa:7b:3d:7f:2b:4a:d8:b7:f6:77:b8:7a:26:e5:52:f0:a2:
45:b5:39:bb:66:fd:2b:00:2a:fb:70:73:33:cf:80:d6:d4:66:
68:06:5f:75:2f:5e:82:3c:6a:ce:72:a4:eb:d1:0d:c1:95:b8:
d6:4f:68:fd:98:dc:51:05:4f:a4:e8:79:ff:d9:94:d3:65:0c:
54:cc:96:de:b1:00:a7:90:d6:28:3f:11:4e:15:3c:1f:24:88:
f1:8d:7c:0d:59:cd:6c:de:e1:6b:e4:25:23:1d:94:93:41:51:
ff:27:9c:28:aa:e6:02:71:91:22:17:bc:86:b4:94:00:d2:68:
20:22:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:33 2026 by rpki-client