Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa
File: f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa (raw, json)
Hash identifier: ZE0HojT1vgLYkczZHItGqZlhhnH3kwJ0jcJgds7PX48=
Subject key identifier: 7F:73:BA:B2:A2:E4:8D:B9:F9:C0:69:23:B7:EC:D9:F6:91:F9:BA:50
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019F1901137A423AD43A33FBA231789B9B59
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa
Signing time: Tue 30 Jun 2026 14:48:48 +0000
ASPA not before: Tue 30 Jun 2026 14:48:48 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 59645
Providers: AS: 250
AS: 6939
AS: 24961
AS: 29670
AS: 34927
AS: 50629
AS: 58299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:13:7a:42:3a:d4:3a:33:fb:a2:31:78:9b:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jun 30 14:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f73bab2a2e48db9f9c06923b7ecd9f691f9ba50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:08:c3:8b:b7:5c:13:0e:f5:94:4e:50:0b:
ad:d5:ca:1b:46:c9:a4:2e:6f:f5:b7:51:b5:ba:82:
0f:08:34:c5:02:a2:b2:09:91:00:f8:4c:99:92:88:
45:a6:96:19:28:d4:c6:54:92:52:88:1a:65:8d:dd:
c1:e1:d0:72:de:c3:81:ff:cf:9a:8a:75:a2:2c:ab:
45:fc:df:51:32:f9:05:26:86:25:42:95:05:24:a1:
f5:c7:0f:3f:8e:2f:4d:e1:21:76:a7:3f:5c:48:81:
f1:fd:53:c3:78:f1:f7:cf:da:22:11:3f:63:b6:b2:
fb:2d:b8:50:d6:a1:84:4f:e1:97:c0:c2:42:0f:1e:
2a:a2:b5:48:7c:9e:50:8c:20:b2:f5:49:b8:04:d0:
50:5d:66:a9:27:6b:f5:d6:7d:44:11:e0:9d:79:47:
40:52:9d:69:24:3e:d9:28:94:49:c0:96:72:d9:3e:
39:92:be:db:f9:96:85:9b:7c:8e:d1:9e:72:cd:6d:
00:81:0c:d3:cf:c2:f9:2d:93:f0:75:01:67:45:13:
90:90:5f:64:cd:2e:4d:5c:07:90:e5:ff:2a:8b:68:
3c:a9:aa:6e:4d:ea:cb:cd:a6:51:43:ba:60:00:94:
b7:7e:97:3a:c4:46:c1:3e:f9:91:5e:0b:0d:01:25:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:BA:B2:A2:E4:8D:B9:F9:C0:69:23:B7:EC:D9:F6:91:F9:BA:50
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/f3O6sqLkjbn5wGkjt-zZ9pH5ulA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59645
Signature Algorithm: sha256WithRSAEncryption
5a:d3:14:12:e8:74:95:3c:a7:a5:79:79:41:3f:0c:e8:96:10:
ea:eb:0a:66:88:3a:1a:16:19:2b:b4:d6:8c:aa:83:f7:f8:26:
b3:df:10:35:2f:ba:c7:db:1b:55:80:f7:1f:66:84:4f:e4:e7:
81:62:81:0d:f7:69:5b:1b:ed:1d:fb:e6:f3:a5:f6:65:8e:a5:
4b:83:36:fa:2c:f2:c6:7a:61:35:0c:e9:5f:ce:bf:18:00:f6:
2d:3d:e3:1b:7e:8a:5a:f1:6a:7c:4f:81:46:3b:e3:a6:f0:9d:
d1:81:e5:3b:7f:5c:ee:72:0c:71:85:9d:88:a8:4a:fe:1c:e2:
ec:6d:c1:de:31:56:85:ba:bc:8f:3e:39:da:95:ef:28:98:41:
66:ad:bb:ca:02:6b:fb:91:5f:3e:0a:39:f5:a3:31:ee:fe:9d:
85:84:f2:89:fd:5b:8d:53:b0:76:ce:8f:4c:09:68:a5:80:4d:
23:b5:1b:a5:d5:06:ea:76:a7:df:9a:cc:95:7c:fc:32:d0:2a:
a6:72:23:fe:df:e3:55:89:9c:b0:e3:f2:8b:47:d8:14:5a:38:
78:cf:7b:bc:b9:09:05:ec:52:d6:55:d2:31:c9:ad:5c:a2:7b:
75:a5:b8:47:95:ba:71:c9:73:84:0e:39:0a:c5:aa:90:84:c8:
28:b1:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:12 2026 by rpki-client