Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa
File: ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa (raw, json)
Hash identifier: iThsrTxSJJwr15708FEMak2Ai3lXcWTXYWVpU0fTIPo=
Subject key identifier: 7E:D7:4C:10:C9:C3:71:D0:5E:F7:F1:31:91:BB:8D:E8:C3:19:FA:14
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 019E1C21C92FB7DDD28CC87DE1D163129272
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa
Signing time: Tue 12 May 2026 12:20:36 +0000
ASPA not before: Tue 12 May 2026 12:20:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34953
Providers: AS: 1299
AS: 3320
AS: 5405
AS: 6461
AS: 6939
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:21:c9:2f:b7:dd:d2:8c:c8:7d:e1:d1:63:12:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: May 12 12:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ed74c10c9c371d05ef7f13191bb8de8c319fa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:1e:88:a1:8f:20:15:65:6d:11:56:b2:28:
5d:e7:78:17:6a:bc:d0:25:38:0f:15:d7:20:37:e1:
ec:28:47:b9:2a:e2:1f:17:d3:a7:0d:14:b5:0a:a5:
b6:20:95:59:a4:97:7e:08:49:d1:9b:7a:79:79:a7:
2e:91:8c:10:76:45:48:98:af:66:18:8e:62:2e:15:
35:a4:70:d6:99:da:d2:46:a7:d7:ce:d2:1f:ec:9b:
8f:f7:7a:d1:c4:29:20:df:d0:b4:66:a6:cd:ce:83:
08:6f:56:b7:4a:65:28:f3:cd:05:78:fc:e9:e6:47:
bb:f0:1d:75:a2:f3:8e:ac:00:69:5b:4e:4f:4b:ae:
52:c8:81:26:f2:f2:e6:14:08:7b:c0:d8:8c:0d:25:
91:c0:9e:8a:5a:60:1f:62:a9:a8:c4:b7:d9:2a:ed:
4c:57:83:ac:17:1b:0a:9f:81:85:8c:68:dd:06:32:
54:4d:4a:cd:8f:27:a0:bc:4a:f5:a4:07:93:58:ad:
e0:56:8a:d1:f6:62:96:8b:94:67:09:a1:3a:7b:04:
00:17:fe:25:5d:36:16:f8:e9:c0:54:6e:a1:c9:fc:
49:44:d9:5b:49:56:85:66:44:2e:6f:b0:45:ed:24:
a7:a2:03:bb:a1:6d:24:c5:dc:f0:96:99:4f:6a:e3:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D7:4C:10:C9:C3:71:D0:5E:F7:F1:31:91:BB:8D:E8:C3:19:FA:14
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/ftdMEMnDcdBe9_ExkbuN6MMZ-hQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34953
Signature Algorithm: sha256WithRSAEncryption
37:f2:d8:73:79:23:b7:b0:99:3b:fc:38:7f:bb:e5:d8:0f:19:
16:15:76:8d:b3:6f:76:3f:fd:8f:fe:ca:76:41:38:6e:4e:a1:
46:ad:15:69:6e:4d:ba:f6:64:83:56:2a:ea:4d:99:fc:a3:47:
e1:8f:23:36:42:74:a8:13:b3:c6:15:a1:73:66:f8:2f:39:0f:
23:93:85:ad:db:de:c4:ce:60:46:fd:f7:32:a2:f0:4f:dc:1c:
58:56:34:98:34:11:f6:9e:f5:e6:65:54:4e:ad:a2:1d:de:ee:
cd:ed:c4:91:1e:74:0d:2b:f6:d8:e2:02:37:30:bc:a6:53:ca:
8f:2e:9a:0e:dc:79:59:08:1c:25:af:38:d5:c0:f3:df:0a:ca:
32:b0:f9:19:fb:a1:59:02:06:a3:82:da:44:7b:ea:df:10:cf:
b6:6b:73:b0:bf:93:ad:96:cf:cc:2b:67:7c:75:15:9c:2b:80:
fa:0f:56:ad:bf:c6:cf:2e:b2:57:97:da:83:30:a8:14:95:47:
45:1d:99:87:42:e3:69:b7:0a:b6:d9:97:39:e9:68:bd:8f:a8:
13:e9:53:01:3e:b4:c2:c8:eb:c2:93:5c:18:bc:16:d8:d7:a3:
1a:bb:7d:25:f3:57:f4:50:48:ef:89:8e:74:7a:7b:c0:4e:f1:
8e:ad:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:44 2026 by rpki-client