Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/59MC3zCDEqoB6qxXydRSjiwklTA.asa
File: 59MC3zCDEqoB6qxXydRSjiwklTA.asa (raw, json)
Hash identifier: hvU4mJ/8GiJoU66ydLaONKkQ68qHgCJGT50x/0n4g2c=
Subject key identifier: E7:D3:02:DF:30:83:12:AA:01:EA:AC:57:C9:D4:52:8E:2C:24:95:30
Certificate issuer: /CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Certificate serial: 019E07CDEDB133BAC071D2038A232ACDFA14
Authority key identifier: 3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/59MC3zCDEqoB6qxXydRSjiwklTA.asa
Signing time: Fri 08 May 2026 13:36:36 +0000
ASPA not before: Fri 08 May 2026 13:36:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215467
Providers: AS: 3399
AS: 5511
AS: 6939
AS: 37988
AS: 53667
AS: 59711
AS: 142064
AS: 208453
AS: 214354
AS: 263702
AS: 269070
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:cd:ed:b1:33:ba:c0:71:d2:03:8a:23:2a:cd:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7d474c04e48a5893af71c35a77cdd6826fd339
Validity
Not Before: May 8 13:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7d302df308312aa01eaac57c9d4528e2c249530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:2b:f3:b1:d8:4e:66:36:3f:a4:52:b1:d5:
67:9f:10:0d:e7:ed:db:eb:b9:53:df:2c:1a:bd:1b:
aa:32:b2:ea:69:7d:3b:1d:18:76:45:8d:41:df:5a:
19:a5:f1:8d:13:20:c7:7a:ac:3d:e1:b8:14:b6:43:
30:62:1a:e2:30:68:2f:b7:16:7e:1e:94:08:9a:8a:
be:c8:98:42:f8:3a:6f:dc:48:54:55:6a:03:cf:30:
31:d9:f6:4a:c5:60:fd:13:4c:4f:ac:67:c3:bf:6a:
66:2a:b9:06:87:35:19:80:34:fa:3b:eb:fe:ed:c2:
36:67:90:59:af:21:5a:b2:cb:37:c5:78:b0:9c:70:
08:61:2d:4b:e4:ee:34:dd:58:d7:14:d5:72:53:ae:
4a:96:8e:69:ce:4b:d1:27:0b:ca:41:83:af:36:cf:
a6:e4:4f:17:8a:33:82:20:b5:0e:6b:49:83:de:7c:
c8:cd:e4:c5:9e:f0:0c:22:df:5b:5c:17:2e:15:be:
bf:c2:6b:ca:06:59:27:b1:eb:97:52:b9:bc:bf:17:
e9:11:e6:7a:fa:1a:2e:20:e6:a9:bd:ee:48:3a:9a:
c4:12:30:8b:0b:bf:a8:9f:0e:a3:ea:9e:40:bc:ef:
21:7e:83:b1:48:03:22:e7:d9:48:93:63:21:64:c3:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:02:DF:30:83:12:AA:01:EA:AC:57:C9:D4:52:8E:2C:24:95:30
X509v3 Authority Key Identifier:
keyid:3E:7D:47:4C:04:E4:8A:58:93:AF:71:C3:5A:77:CD:D6:82:6F:D3:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pn1HTATkiliTr3HDWnfN1oJv0zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/59MC3zCDEqoB6qxXydRSjiwklTA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7e30e8-b835-44af-a44b-903e4f5e1225/1/Pn1HTATkiliTr3HDWnfN1oJv0zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215467
Signature Algorithm: sha256WithRSAEncryption
40:9f:33:96:9b:d3:9b:80:57:1d:12:c8:2c:29:7e:b1:9e:e0:
38:c3:51:d5:4a:34:f4:1b:ee:4b:67:2c:24:66:37:26:2f:4d:
91:c1:d6:da:1d:98:4b:45:61:48:23:d2:7e:13:72:58:96:61:
40:80:f0:c7:75:c5:57:83:ed:d5:44:f4:78:bb:61:05:40:1a:
4c:03:71:63:0a:e0:21:c4:f1:f6:27:80:9c:cc:93:80:0e:66:
c7:e0:96:36:af:df:db:32:3f:f1:fa:3f:08:ab:6a:d2:77:ab:
b6:6c:19:65:45:f4:fd:c2:0c:61:bc:f9:89:a8:74:f2:be:d3:
0d:33:83:3f:ee:12:b7:c4:6f:b5:45:85:16:20:36:6b:36:e2:
fc:e4:1a:ed:53:63:90:e7:de:e7:e9:63:e7:82:06:45:c3:ba:
b0:a5:56:2c:43:d4:8c:21:1e:b0:a1:a7:87:c4:a4:ee:f4:8a:
54:c9:33:97:97:54:82:d6:f5:cf:ed:98:be:92:05:8c:b5:71:
45:eb:91:87:46:14:b0:9b:11:9b:9a:01:24:d0:85:32:99:de:
ea:d5:a9:fc:74:ce:9b:d4:89:5e:dc:98:7c:30:b1:27:e6:8d:
6f:eb:fb:4a:23:a2:f2:6f:91:30:74:2e:f7:72:27:e4:09:e0:
1e:3d:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:01 2026 by rpki-client