Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/w4BNxua4BvHLjU8oagE0g6luhTQ.asa
File: w4BNxua4BvHLjU8oagE0g6luhTQ.asa (raw, json)
Hash identifier: +evuik2l1cwnr9LjRH7lRHDWJgap73JBZqWBrAR2Ms0=
Subject key identifier: C3:80:4D:C6:E6:B8:06:F1:CB:8D:4F:28:6A:01:34:83:A9:6E:85:34
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019F19013EEE858615A84D684D63E1DC5577
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/w4BNxua4BvHLjU8oagE0g6luhTQ.asa
Signing time: Tue 30 Jun 2026 14:48:59 +0000
ASPA not before: Tue 30 Jun 2026 14:48:59 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214903
Providers: AS: 35489
AS: 39505
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:3e:ee:85:86:15:a8:4d:68:4d:63:e1:dc:55:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jun 30 14:48:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3804dc6e6b806f1cb8d4f286a013483a96e8534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:b7:37:39:d6:b0:c5:48:55:7c:40:55:65:
12:bf:b7:d4:df:f8:c0:c4:d3:60:37:08:29:0c:b3:
b6:a6:c0:f0:63:ad:f5:fd:08:fa:b3:eb:bd:56:68:
08:ce:0c:9c:68:33:01:9f:1e:8d:35:de:e2:34:fb:
46:dc:12:97:1e:d8:76:55:bb:51:92:63:ab:0e:08:
7b:07:47:87:12:ec:cc:93:6f:5d:e1:cd:59:b5:fd:
89:ce:5f:2a:ff:88:32:14:38:bc:f5:17:09:3e:76:
08:a2:74:59:87:be:83:98:dc:82:6f:b2:7f:3f:06:
e4:ad:c3:13:c3:8d:c7:9d:42:9d:13:9a:f8:f8:b5:
2e:15:d4:6a:ed:de:e5:6b:48:c1:c4:88:86:04:43:
5a:27:f1:82:ac:17:90:c3:95:bf:78:c3:d1:ee:03:
63:e6:6d:5e:8e:aa:fb:01:d7:ee:fd:96:f3:e9:f8:
55:42:08:3b:d1:ba:70:34:6f:4b:03:29:50:9c:86:
2f:83:09:ff:62:a9:e8:b4:10:ec:04:08:e6:da:c9:
04:cb:3d:a6:56:67:44:c6:06:0a:01:df:7a:b2:39:
0a:d8:92:ab:14:35:75:33:c6:4b:c2:c0:58:3d:71:
10:f1:26:d5:46:5d:7e:14:8a:c9:91:35:3a:f4:a0:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:4D:C6:E6:B8:06:F1:CB:8D:4F:28:6A:01:34:83:A9:6E:85:34
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/w4BNxua4BvHLjU8oagE0g6luhTQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214903
Signature Algorithm: sha256WithRSAEncryption
7a:0f:5f:4d:e2:50:1c:1a:57:cd:2f:71:a5:cb:80:86:d3:7e:
67:c7:e0:3f:c8:f7:fd:27:46:46:7f:1a:45:c1:3a:c4:3e:7e:
6c:37:96:a9:62:23:a9:52:b9:24:5d:0d:49:bc:5d:53:f4:37:
20:b0:59:9a:65:52:22:42:46:29:03:72:ff:6d:cf:b5:c7:91:
1c:1c:47:3b:6a:18:ff:df:04:71:a0:3a:ea:18:87:9b:09:df:
86:ba:b2:59:34:6b:60:73:67:3b:fd:d7:3f:56:d7:39:d1:f8:
94:68:b0:58:31:97:02:d8:cc:85:b4:5f:77:41:e8:b9:c3:b7:
b1:fa:80:35:65:5a:76:1e:22:b7:cb:59:14:d6:ae:ef:c6:cd:
a3:51:0c:d4:5b:64:d7:16:f3:36:90:3e:cf:d0:62:22:4c:d1:
ad:b8:60:c0:fa:e8:4c:36:78:1f:08:88:b8:be:67:e4:c3:77:
d6:16:9f:81:c2:6a:d6:94:12:7c:41:9d:b7:70:79:e0:0d:5b:
a4:c1:9c:40:f5:17:74:7b:1f:fd:3a:0f:20:63:26:ae:86:c6:
24:95:51:f8:f2:08:19:df:ef:1a:1a:ff:af:7f:42:50:97:0c:
ad:3a:68:34:90:5f:fd:e8:5c:e6:40:18:cf:0a:29:ef:f3:11:
c7:c4:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:29 2026 by rpki-client