Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/HXJJgvqsZ_zuOCSOXmDb4ksjDdE.asa
File: HXJJgvqsZ_zuOCSOXmDb4ksjDdE.asa (raw, json)
Hash identifier: J/SZ7v4ORRwzQFSAo2RYDZOeTgDF1x9+l2aHPSTrs0U=
Subject key identifier: 1D:72:49:82:FA:AC:67:FC:EE:38:24:8E:5E:60:DB:E2:4B:23:0D:D1
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019CFD037BF1741CF2CF696A177813FFAD6E
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/HXJJgvqsZ_zuOCSOXmDb4ksjDdE.asa
Signing time: Tue 17 Mar 2026 18:16:29 +0000
ASPA not before: Tue 17 Mar 2026 18:16:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212123
Providers: AS: 6939
AS: 21700
AS: 34549
AS: 34854
AS: 58299
AS: 200462
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:03:7b:f1:74:1c:f2:cf:69:6a:17:78:13:ff:ad:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Mar 17 18:16:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d724982faac67fcee38248e5e60dbe24b230dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:88:e0:66:13:5c:ae:a5:c7:ef:fd:9b:87:
99:01:82:45:6e:f1:57:5e:ef:e7:e9:df:70:82:94:
91:27:37:fa:18:a3:bd:51:d5:8d:4f:65:f3:54:0e:
16:1a:c9:89:23:61:51:ba:46:19:0d:c5:ef:6b:58:
4f:f7:00:0f:ad:9e:0a:2c:13:08:8a:d4:93:0d:d4:
96:2e:65:ac:67:73:66:a4:aa:61:00:28:9b:56:85:
4d:f7:3f:28:a6:02:57:c9:b2:25:0a:d6:b6:5d:bb:
b0:0c:73:6c:f7:f0:f0:90:45:84:cd:9f:15:cf:33:
43:8a:c6:d3:e9:8b:67:1e:04:12:62:dc:18:bb:a4:
23:72:cb:e2:dd:65:6f:ab:9a:6c:e6:2d:5e:36:76:
b7:46:fa:40:1a:15:a5:e0:50:4e:07:85:55:b1:49:
a3:f9:33:5f:93:e9:98:ae:ac:32:51:bb:55:44:ca:
23:d2:0a:30:5c:6d:81:09:ad:b8:b9:88:df:90:6c:
b3:aa:38:a0:d1:da:0c:e7:8b:fa:e7:e6:01:bb:fc:
55:16:90:d3:16:03:2b:3f:4c:d1:df:d0:15:67:56:
3d:79:8f:ae:ff:cd:f1:59:cf:97:5a:16:f9:b2:02:
de:de:e8:fb:14:18:73:13:a0:f7:f5:ca:dc:ac:0c:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:49:82:FA:AC:67:FC:EE:38:24:8E:5E:60:DB:E2:4B:23:0D:D1
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/HXJJgvqsZ_zuOCSOXmDb4ksjDdE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212123
Signature Algorithm: sha256WithRSAEncryption
0a:12:52:6e:5d:cc:64:d5:e2:b4:6d:4d:3c:65:05:c9:91:a5:
50:7e:dc:16:02:a2:2c:da:44:39:bf:ec:b9:43:92:f7:f0:7f:
57:96:86:90:d9:7f:0a:56:43:d4:41:a7:e8:c2:a5:a8:8f:62:
c2:7c:fd:4e:82:b0:3e:d5:1e:87:5d:23:b7:a1:4e:26:70:8b:
c3:73:a4:8c:f3:ec:e5:6e:97:ed:cd:9e:52:0c:db:c9:c3:b5:
a9:e5:75:2e:50:bc:eb:25:e0:69:85:d1:3e:71:1a:65:ba:a7:
72:6d:25:40:d1:17:8f:d9:5f:ad:8f:10:64:1a:d8:9c:31:6e:
36:f5:c1:14:f7:81:af:9f:cd:7c:43:8e:30:2c:1f:d0:3c:6d:
1a:f4:47:4f:1e:d7:11:58:71:da:2b:0e:7d:90:91:a5:43:02:
34:cc:06:4c:44:ea:46:3d:81:78:f6:2a:a2:2f:c6:9e:08:d6:
74:2f:30:13:8a:6b:04:a2:00:2e:f0:87:75:c6:86:65:ea:b4:
00:88:0b:79:81:a8:d9:40:95:f0:c8:98:ae:e0:cc:fa:46:32:
47:02:b8:0d:31:14:a0:c9:42:db:10:b4:7c:3a:16:a1:60:ec:
27:aa:40:48:37:d0:73:8b:56:81:6d:4a:a4:a1:e1:71:37:f8:
8f:5b:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:44 2026 by rpki-client