Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oNz4di9k2vKoRaLCLfDLnym50OI.asa
File: oNz4di9k2vKoRaLCLfDLnym50OI.asa (raw, json)
Hash identifier: 2qbwxBLarpSaRdA7NZqoXYTaYd/UNxGchJ62cR3OsK4=
Subject key identifier: A0:DC:F8:76:2F:64:DA:F2:A8:45:A2:C2:2D:F0:CB:9F:29:B9:D0:E2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019DF25D879FC3CEA9B47030633296231004
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oNz4di9k2vKoRaLCLfDLnym50OI.asa
Signing time: Mon 04 May 2026 09:41:49 +0000
ASPA not before: Mon 04 May 2026 09:41:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 3257
Providers: AS: 0
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:5d:87:9f:c3:ce:a9:b4:70:30:63:32:96:23:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 4 09:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0dcf8762f64daf2a845a2c22df0cb9f29b9d0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:4d:b9:27:ad:60:b3:b2:bb:ad:37:91:d5:
92:cc:22:d0:70:66:48:75:a6:36:4d:98:aa:0d:ee:
a5:c2:2a:80:bd:20:c6:5e:03:64:47:03:f6:0f:30:
9d:0e:ca:84:3b:2b:76:34:64:fd:90:0c:8f:3c:73:
5b:5a:5a:eb:92:11:c4:ea:65:0d:25:27:ee:ce:3b:
08:96:b2:b2:3c:40:6f:44:d4:eb:59:fe:86:25:f2:
bd:bd:a5:85:47:4f:f5:48:84:16:4e:f3:0d:64:96:
18:e6:d3:cd:e9:d5:06:7c:db:57:a8:2c:a6:51:87:
9f:c6:9e:bd:c6:4e:e6:92:72:25:27:c5:21:06:27:
84:d9:7d:34:e4:a6:d0:35:4b:c0:cb:42:10:20:26:
35:f7:ae:4e:d6:2e:60:ad:55:90:ee:ec:ed:6b:49:
3e:54:a8:dc:51:e4:89:87:f6:1b:36:84:75:9c:49:
7a:a1:83:3a:95:8f:63:3a:74:2d:09:3d:10:8f:b3:
22:9e:0f:53:e8:fd:1f:49:56:19:54:54:bb:70:cc:
16:a5:82:ad:1c:14:e6:41:c8:9b:63:4c:c0:fd:cc:
00:29:94:7d:10:8b:7c:ed:3e:27:06:7f:68:2f:80:
37:3b:41:8a:65:84:79:6e:e5:f1:a7:1d:37:71:4d:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:F8:76:2F:64:DA:F2:A8:45:A2:C2:2D:F0:CB:9F:29:B9:D0:E2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oNz4di9k2vKoRaLCLfDLnym50OI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3257
Signature Algorithm: sha256WithRSAEncryption
22:89:d3:ca:bf:65:5f:2e:a6:1b:ec:3d:3a:fb:81:db:04:67:
18:2e:bd:65:dc:de:fb:49:70:4c:a4:db:ee:41:9e:73:2c:ad:
e2:7d:ad:ec:55:9a:db:c6:fe:c3:b6:cf:ff:b0:9d:54:f3:83:
09:a7:4f:d7:0d:57:b2:10:64:a5:fe:73:10:82:ef:7a:a9:cb:
98:72:08:c0:87:85:f7:6b:97:04:6e:04:1c:cc:f0:90:43:00:
21:2d:27:b2:02:8e:b8:18:dc:f6:b3:ee:06:d1:d1:34:b9:fd:
2e:c1:5c:a5:e0:db:67:e5:21:83:c5:7a:db:7b:25:c2:02:f6:
f5:8e:cd:db:88:a7:e8:96:40:70:cf:cb:e0:32:07:fd:da:9c:
96:27:b5:3e:0f:4b:14:a3:aa:e0:4a:bf:22:39:b8:b1:6a:ff:
c3:6e:a1:e8:21:f0:9a:2d:6f:3e:de:65:88:6f:b4:2d:1c:02:
ce:90:84:71:b8:e4:1e:b1:40:a1:e3:7d:a7:56:b2:03:69:2b:
10:eb:11:05:7a:9e:c0:f2:53:47:88:61:c2:11:79:e7:4a:e4:
55:a8:fd:a3:ad:ab:fe:d5:79:d7:88:73:a1:7e:7e:51:a6:64:
fe:9b:c8:55:f1:8e:3c:bb:8e:e2:59:b0:cc:dc:8a:8b:8a:f0:
a5:24:bd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:15 2026 by rpki-client