Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/hy7RusIjQH3rR8WgetncxaNV-TU.asa
File: hy7RusIjQH3rR8WgetncxaNV-TU.asa (raw, json)
Hash identifier: bhJXUcT+3ZOCVeeC8XzBVDF8FSK6zRK0UuX+SfxSKNc=
Subject key identifier: 87:2E:D1:BA:C2:23:40:7D:EB:47:C5:A0:7A:D9:DC:C5:A3:55:F9:35
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019F1F3744DB280D03453A623F63ADAF9CD6
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/hy7RusIjQH3rR8WgetncxaNV-TU.asa
Signing time: Wed 01 Jul 2026 19:45:43 +0000
ASPA not before: Wed 01 Jul 2026 19:45:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211715
Providers: AS: 34872
AS: 41051
AS: 47272
AS: 197324
AS: 209533
AS: 212895
AS: 213449
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:37:44:db:28:0d:03:45:3a:62:3f:63:ad:af:9c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Jul 1 19:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=872ed1bac223407deb47c5a07ad9dcc5a355f935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:49:e4:26:96:8c:b4:e7:90:ef:42:a7:e5:
9c:80:b0:6b:f8:f2:68:fd:70:14:87:03:b0:9e:92:
a4:6e:49:22:a5:e5:78:5f:7e:8b:0c:6f:2c:2c:b4:
5d:c2:8f:c6:9e:48:b1:ff:90:65:d1:4e:a7:30:f6:
71:d4:52:79:ff:cf:b7:78:bb:6e:41:26:f9:8d:dc:
f2:2e:5c:71:7d:e3:65:86:94:00:dd:22:41:27:8c:
8e:5f:aa:e8:9b:b8:54:d9:b0:9f:e3:59:39:18:9d:
be:c3:34:cf:41:dc:4b:43:24:93:07:5e:48:de:ae:
79:f3:b3:da:4e:57:be:3b:20:98:78:89:97:77:41:
c3:72:c7:67:5d:4a:21:21:d6:95:fb:17:4d:dc:09:
d6:c4:20:d8:a4:5f:a4:9c:f7:a7:67:23:04:0a:f1:
f4:53:fc:b6:3e:9a:38:7e:78:4b:1d:16:e9:12:03:
3b:8c:3d:ce:c5:2a:2a:40:a7:97:f3:59:a7:61:bc:
ff:b9:e9:50:9d:03:e7:89:32:5f:97:7b:3b:c3:1e:
15:8b:a5:92:7b:d0:16:24:8c:cc:1c:7c:36:2c:88:
26:1d:0b:59:01:75:a8:9a:7b:c4:33:40:6a:8e:48:
6c:85:fb:a3:78:6b:c3:ac:ac:78:2f:61:a6:18:50:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:D1:BA:C2:23:40:7D:EB:47:C5:A0:7A:D9:DC:C5:A3:55:F9:35
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/hy7RusIjQH3rR8WgetncxaNV-TU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211715
Signature Algorithm: sha256WithRSAEncryption
00:3f:bf:e0:ec:27:3a:e1:ac:b7:3a:af:b6:54:7f:f2:46:5e:
f9:f6:4b:90:6a:1d:fb:a5:2e:16:78:da:a6:7d:44:bb:ed:ea:
99:fc:41:b4:96:32:f1:7f:03:18:d3:ca:7b:36:0c:e8:44:e1:
6f:97:b9:82:16:ad:20:cc:1e:66:89:c9:88:28:bc:3c:6c:a5:
f3:4c:61:e6:74:5e:30:5d:d1:bf:d3:c0:02:f1:80:71:dd:34:
cf:51:c3:fc:6a:8e:e3:bb:7a:be:d9:c5:c1:90:32:b1:9a:18:
09:6d:cf:5b:57:d3:a9:d9:c9:ea:b7:e4:99:29:06:1a:1a:03:
e9:7c:9d:78:9e:17:74:1a:1e:ef:bc:4a:af:df:92:64:dd:8c:
26:df:0a:9f:1e:63:e0:60:7d:47:ca:e8:97:4c:e1:70:59:5b:
4e:0f:95:43:d3:b3:2e:c3:29:6c:10:f0:3e:59:6a:23:6d:5b:
0a:64:37:13:ab:43:6d:96:c3:a8:08:87:88:b6:20:a3:8a:f7:
4b:28:07:06:24:5e:3f:fd:98:1a:b2:86:fc:18:3a:ac:81:e2:
6a:4c:8d:2c:fd:73:2f:f5:69:58:87:1b:eb:ae:13:9a:d1:70:
15:ad:94:41:a7:fc:c9:1e:12:7c:b4:d2:4f:11:12:4a:34:94:
df:73:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:12 2026 by rpki-client