Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/Xhri0AVup-iOcfJupA4s7w3cpYc.asa
File: Xhri0AVup-iOcfJupA4s7w3cpYc.asa (raw, json)
Hash identifier: 4eaUl5vtgL4q0oqF8vNtbDWxyFZPR38UGBwc1PJc8Sk=
Subject key identifier: 5E:1A:E2:D0:05:6E:A7:E8:8E:71:F2:6E:A4:0E:2C:EF:0D:DC:A5:87
Certificate issuer: /CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Certificate serial: 019F669FA605C1BB23471084DABC94ACD9EA
Authority key identifier: 3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/Xhri0AVup-iOcfJupA4s7w3cpYc.asa
Signing time: Wed 15 Jul 2026 16:32:46 +0000
ASPA not before: Wed 15 Jul 2026 16:32:46 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214441
Providers: AS: 15510
AS: 16276
AS: 151704
AS: 207841
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:9f:a6:05:c1:bb:23:47:10:84:da:bc:94:ac:d9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b125e866b237c9674e9e9b7a9abd18b57d71f10
Validity
Not Before: Jul 15 16:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e1ae2d0056ea7e88e71f26ea40e2cef0ddca587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:22:ff:c4:92:a7:18:8c:bf:75:2e:ee:5c:7c:
a4:30:b2:a6:96:87:f5:2a:a3:40:72:ca:0f:fc:0d:
64:6c:b5:14:38:6a:1e:e2:9e:89:55:4f:31:18:cc:
74:8d:03:5d:b0:af:4f:8e:e7:b4:32:74:ca:b1:03:
74:9f:8b:8e:b8:d4:11:43:b9:c0:3a:93:bd:28:e5:
5d:7b:d6:3e:c1:38:a9:d6:27:55:9c:1e:34:75:2a:
bf:33:5a:4f:d2:21:65:83:94:8e:9f:6d:67:51:ed:
1f:19:87:ad:c5:59:a1:d3:46:57:53:fc:1b:7c:c7:
6a:4f:f1:0b:9c:ab:42:de:ee:47:0a:6e:66:1a:91:
a7:7e:3e:d1:7d:9e:20:c8:a9:bc:6f:2c:44:19:71:
fa:d9:1e:8f:dc:46:47:43:74:ad:fb:d2:1e:bb:82:
7c:5c:fe:c1:ca:d9:9a:34:9f:82:60:8e:7a:ed:6e:
da:ba:4d:cc:87:db:3e:bc:8f:d1:44:2b:f5:0c:50:
37:e1:d3:80:bc:ec:8c:1a:34:f3:1f:eb:75:5c:21:
ac:39:b7:f2:39:60:84:22:6f:3d:7e:a3:2b:b4:8a:
b8:9d:bb:cc:95:b7:d5:3f:b1:84:34:6f:39:68:90:
17:65:69:ac:ef:a7:f2:d1:60:ae:8e:52:13:a7:cb:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:E2:D0:05:6E:A7:E8:8E:71:F2:6E:A4:0E:2C:EF:0D:DC:A5:87
X509v3 Authority Key Identifier:
keyid:3B:12:5E:86:6B:23:7C:96:74:E9:E9:B7:A9:AB:D1:8B:57:D7:1F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxJehmsjfJZ06em3qavRi1fXHxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/Xhri0AVup-iOcfJupA4s7w3cpYc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4ff3ef-970d-41f1-84ab-54bee6aa57eb/1/OxJehmsjfJZ06em3qavRi1fXHxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214441
Signature Algorithm: sha256WithRSAEncryption
27:ad:9a:c3:64:37:2f:f5:db:9b:34:de:f9:2a:0d:95:a0:ab:
0f:35:93:e1:14:5f:85:b8:60:4b:26:9b:f4:3d:c4:0a:41:f9:
a5:01:ff:bf:60:79:43:cb:4b:88:6e:57:3d:55:b5:39:54:2a:
d3:6b:f2:b5:69:54:54:a5:4d:bd:16:e1:c9:c5:fd:54:cb:4f:
ec:73:3e:62:c8:50:42:b1:16:48:09:ed:b4:a0:12:41:bd:e5:
b0:84:4e:9e:77:1e:26:1d:ee:9e:79:fb:1f:d3:0d:3d:2b:16:
a0:d7:dc:59:09:99:09:d5:cb:c4:45:82:e1:f9:e4:4e:fa:74:
78:31:c4:17:86:77:fd:8a:40:35:c7:bb:b3:1c:d8:b2:8b:92:
e2:a3:52:05:55:e6:f6:34:f5:6f:1e:4b:54:e5:91:58:bb:46:
bd:70:ff:94:62:78:a0:be:e2:05:f9:6d:4a:70:6a:9c:2b:fd:
fe:b1:9a:2a:b9:96:86:7f:02:4f:82:41:4f:a9:45:60:7d:b3:
2f:b8:e0:fe:32:c7:2a:da:92:6c:ea:7d:77:50:8f:be:ac:f5:
2c:fe:7e:12:6b:b0:9c:83:be:35:fa:4f:ce:d2:01:74:da:da:
ac:0c:01:d2:90:3a:bf:53:26:78:af:2a:d0:25:c6:28:d9:04:
10:bb:43:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:09 2026 by rpki-client