Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa
File: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (raw, json)
Hash identifier: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=
Subject key identifier: 29:E5:F0:44:67:5F:67:49:A8:53:68:83:DD:0D:A6:6E:D4:7A:0B:79
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019F1901458644AAD79CFCEBACE024BBE450
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa
Signing time: Tue 30 Jun 2026 14:49:01 +0000
ASPA not before: Tue 30 Jun 2026 14:49:01 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 25400
Providers: AS: 544
AS: 1299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:45:86:44:aa:d7:9c:fc:eb:ac:e0:24:bb:e4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jun 30 14:49:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29e5f044675f6749a8536883dd0da66ed47a0b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:27:28:56:f5:6b:f3:76:bb:1d:cb:b3:44:
4f:35:bb:5a:a8:05:dd:1c:d1:58:93:fd:89:48:b9:
a1:3d:27:1f:21:1c:c5:ff:e1:ee:a7:e6:6b:04:80:
a1:d8:5d:5b:2c:f5:54:e4:8e:ea:42:f3:12:28:56:
21:a8:ec:fb:82:34:04:70:f7:35:c9:ca:42:f9:a6:
93:5d:da:3f:40:5b:f1:a3:6d:33:35:8c:ca:86:9c:
66:8a:11:ef:01:da:98:c0:40:f0:9b:85:51:48:d2:
41:a8:ea:33:b9:36:10:7c:b7:3e:da:4c:18:7b:64:
94:ed:48:53:ef:30:9d:1b:cf:5a:cb:cd:dd:33:54:
3b:36:0a:9b:d9:f6:c1:28:e5:52:5b:d5:c8:75:85:
f5:db:50:b3:b1:75:c5:cc:ac:26:51:51:aa:c4:ca:
c9:85:c0:7e:7c:3f:25:1d:db:a8:d3:b3:2d:8a:8f:
95:a0:5c:3e:9c:53:ac:84:65:05:c5:26:3a:16:18:
b2:cc:ab:73:39:db:7f:33:f1:c7:55:30:dd:ad:8c:
1e:65:fe:0c:ef:37:6a:83:22:6b:20:8d:35:af:62:
38:5a:6e:88:27:8e:96:ff:7f:f6:5b:a6:80:47:a6:
75:10:b1:78:ef:8f:5e:f0:0c:60:02:9d:42:c1:51:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E5:F0:44:67:5F:67:49:A8:53:68:83:DD:0D:A6:6E:D4:7A:0B:79
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25400
Signature Algorithm: sha256WithRSAEncryption
3f:b9:7e:df:44:c1:bf:67:e3:b6:c3:8b:d4:18:09:67:b6:aa:
83:b0:6e:83:86:fe:ea:f4:9b:45:26:94:af:b1:99:a3:18:63:
8e:65:18:30:0d:fc:8f:11:23:f4:2a:4d:30:42:fd:34:42:e5:
f2:ae:7e:7d:b4:ac:4e:81:5b:a8:6e:c2:7b:88:03:76:ba:f5:
35:55:31:b1:2f:88:09:3f:4a:00:b2:ee:d9:d4:ff:06:e0:a8:
8b:bf:14:81:e1:d8:85:98:17:ce:38:77:11:77:5b:21:83:3a:
66:36:28:af:b2:7b:e5:89:2a:67:6f:68:2d:9e:02:5a:44:75:
8e:86:6c:bd:ba:69:18:cf:63:10:78:d8:32:2d:2a:74:db:1a:
72:64:5e:1f:12:1c:17:33:f1:9a:47:fe:90:91:d2:e9:1c:71:
1e:04:82:31:d0:3b:5d:91:8c:74:df:98:ec:ea:1a:3b:84:0f:
9f:14:e0:bc:61:68:9e:5f:59:ac:4b:27:78:70:6b:32:18:88:
bf:1e:57:57:3e:0a:f8:1a:5f:b6:90:10:61:4f:c0:07:7c:16:
06:21:2b:81:74:5c:df:fc:2d:bb:4b:f0:64:ec:11:c3:35:ce:
8e:5e:98:71:60:69:fc:6e:fd:6f:44:f3:72:a3:be:c7:9d:99:
37:ac:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:45 2026 by rpki-client