Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/lHY693mCbhah1Vqv8xfKrZJgTvs.asa
File: lHY693mCbhah1Vqv8xfKrZJgTvs.asa (raw, json)
Hash identifier: 9wGELK7MxanRNatgPMR6TKASbVfGi/XxIfzUH4V2CP0=
Subject key identifier: 94:76:3A:F7:79:82:6E:16:A1:D5:5A:AF:F3:17:CA:AD:92:60:4E:FB
Certificate issuer: /CN=579ecd5f59463115a9b058b277f3013963e384b8
Certificate serial: 019F2369157A7A8926204EAF4C9A52AF0E8B
Authority key identifier: 57:9E:CD:5F:59:46:31:15:A9:B0:58:B2:77:F3:01:39:63:E3:84:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V57NX1lGMRWpsFiyd_MBOWPjhLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/lHY693mCbhah1Vqv8xfKrZJgTvs.asa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ASPA not before: Thu 02 Jul 2026 15:18:37 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29405
Providers: AS: 174
AS: 1299
AS: 3257
AS: 3356
AS: 9002
AS: 199803
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/V57NX1lGMRWpsFiyd_MBOWPjhLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/V57NX1lGMRWpsFiyd_MBOWPjhLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/V57NX1lGMRWpsFiyd_MBOWPjhLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:7a:7a:89:26:20:4e:af:4c:9a:52:af:0e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ecd5f59463115a9b058b277f3013963e384b8
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94763af779826e16a1d55aaff317caad92604efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:3d:de:7e:52:18:35:ba:bf:db:15:38:11:
6d:a1:83:83:29:24:f3:18:c6:35:08:5b:c6:61:3c:
76:98:13:cd:32:d9:3d:93:51:d0:8b:48:29:45:9b:
f8:88:b4:67:da:2b:f6:7e:6d:74:14:8e:2c:ff:e1:
53:f4:37:61:71:74:d5:50:22:dc:f5:00:d7:a4:61:
ff:a5:6b:a6:f0:45:af:49:62:59:36:e2:6f:09:55:
8d:f5:31:f2:e6:65:68:84:a1:72:e7:9f:8e:77:10:
38:fb:71:02:2f:63:7f:e7:91:cf:d0:a3:a5:05:6c:
a6:af:84:3f:c6:ea:aa:24:91:2d:a8:92:32:48:62:
87:f3:e0:21:b8:bf:9f:2e:f6:a8:a7:36:7c:36:db:
7a:54:f6:00:6b:9d:cd:a5:84:0f:00:d8:f2:1a:99:
b3:4a:11:2d:3e:74:d4:f4:a3:ce:50:f8:a5:be:95:
c7:be:d9:7d:f9:62:87:af:f3:98:b5:2a:06:f4:8d:
53:92:1c:9d:cd:eb:f1:90:d5:20:44:72:88:e0:2e:
6b:1a:80:9d:65:67:ce:13:e5:b8:53:1f:e2:0a:12:
c2:8a:7a:36:0d:5f:c1:16:79:92:13:f2:fb:9b:86:
92:26:be:1d:9a:38:36:eb:33:0f:50:4a:bc:de:ea:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:76:3A:F7:79:82:6E:16:A1:D5:5A:AF:F3:17:CA:AD:92:60:4E:FB
X509v3 Authority Key Identifier:
keyid:57:9E:CD:5F:59:46:31:15:A9:B0:58:B2:77:F3:01:39:63:E3:84:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V57NX1lGMRWpsFiyd_MBOWPjhLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/lHY693mCbhah1Vqv8xfKrZJgTvs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/V57NX1lGMRWpsFiyd_MBOWPjhLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29405
Signature Algorithm: sha256WithRSAEncryption
2f:90:a1:7d:4a:48:28:ee:fd:51:fa:c5:18:cd:bf:d7:ea:c5:
5a:30:bb:ef:14:4c:4b:14:13:26:b6:0e:05:58:9d:f3:97:f0:
2d:36:a1:3f:b0:38:aa:b8:e3:c3:99:e5:68:22:78:f8:1d:1e:
13:89:10:48:0d:19:11:4f:5e:3f:a3:8b:0f:e2:c3:a6:eb:9d:
cd:60:00:eb:f9:b7:e7:92:af:2d:63:4b:02:63:d7:eb:13:c5:
6b:f6:b6:2c:ab:6f:00:80:14:ef:e0:f0:0b:60:cb:b4:a9:ff:
3e:7c:07:1e:92:fc:87:9f:8b:e9:00:93:c6:8b:1e:5c:f6:1f:
c9:3e:58:a0:ed:b3:f9:23:97:d4:3b:b1:8f:a1:e1:aa:e4:ae:
93:22:82:5c:e7:ee:d9:55:74:21:41:a7:f6:8c:ca:4e:4c:f4:
b3:c2:f6:dd:6a:0e:c8:28:ee:6c:e0:b2:d1:98:72:6a:ad:e2:
81:dd:6a:09:e0:55:5a:5f:59:a2:b6:2c:18:04:09:52:87:68:
ed:ed:4f:66:4d:3a:99:e1:ab:22:93:5c:0b:24:0f:ed:8b:7b:
7f:df:35:2f:19:3f:24:d0:76:b3:2d:c6:c4:ad:4f:d7:12:e0:
ae:03:b0:e0:1e:ec:de:8c:5f:a9:72:21:6f:88:44:29:22:86:
1b:b9:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:28 2026 by rpki-client