Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/X_sri3cRhFYahHNip0OaQkurzp4.asa
File: X_sri3cRhFYahHNip0OaQkurzp4.asa (raw, json)
Hash identifier: fwKy6Axs5Ma5eaNMv/Pfvsc1xJbWQPfYwiDVZkFrQh0=
Subject key identifier: 5F:FB:2B:8B:77:11:84:56:1A:84:73:62:A7:43:9A:42:4B:AB:CE:9E
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019F19012AF09C2EAAB1D51C8600A6B4E128
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/X_sri3cRhFYahHNip0OaQkurzp4.asa
Signing time: Tue 30 Jun 2026 14:48:54 +0000
ASPA not before: Tue 30 Jun 2026 14:48:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202113
Providers: AS: 553
AS: 8560
AS: 12843
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:2a:f0:9c:2e:aa:b1:d5:1c:86:00:a6:b4:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Jun 30 14:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ffb2b8b771184561a847362a7439a424babce9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:d9:7d:84:92:4e:54:40:2e:04:7c:bc:34:
46:d6:e9:e7:93:11:87:94:5e:c4:bc:46:77:fc:3d:
3a:63:34:f1:37:0e:bc:c8:e0:55:b7:1e:f9:0d:f6:
35:e7:c6:51:e5:38:26:da:ff:bf:cf:f9:0d:e0:f2:
e8:aa:6f:f1:eb:f4:88:65:df:70:94:d9:26:d8:c9:
aa:7b:22:f9:27:ea:ec:4d:7b:8b:a5:c5:82:31:5f:
60:65:89:a0:8b:63:b6:50:7a:de:8f:ea:7f:0b:52:
95:da:35:bf:1b:dc:ca:0a:5f:1e:91:46:04:8f:83:
ab:86:63:28:2c:8c:86:88:93:c9:3d:52:fd:a8:ba:
45:d0:15:70:90:4d:39:94:a2:77:3d:b8:79:9d:37:
89:25:20:95:be:a0:09:00:c0:81:79:73:10:87:63:
47:49:a2:9e:5d:d0:d6:47:ba:40:d8:f8:2c:fa:97:
81:9a:47:fc:0d:c7:6a:dd:49:7f:97:b2:d1:ea:f5:
a6:54:ec:f0:a5:96:0c:c4:cf:b1:d0:54:e2:54:5a:
ed:15:81:42:26:d8:4a:50:49:62:bb:2c:2b:27:28:
36:87:fe:fa:ca:c6:80:4c:41:5d:a9:6f:ab:78:5d:
d3:dd:1b:c2:70:68:d2:d7:b2:57:58:5b:0f:f8:98:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:2B:8B:77:11:84:56:1A:84:73:62:A7:43:9A:42:4B:AB:CE:9E
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/X_sri3cRhFYahHNip0OaQkurzp4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202113
Signature Algorithm: sha256WithRSAEncryption
62:4a:a2:37:32:b9:c8:19:a8:0f:83:18:e4:1f:44:3b:3d:04:
55:9c:ff:97:5a:91:78:90:5c:a6:21:db:84:6d:c5:dc:68:c8:
5c:63:5e:15:27:04:7c:83:d1:ca:39:87:9e:8b:44:4c:b2:72:
6b:1d:74:5e:17:8f:fd:29:5e:26:d8:48:76:85:7b:fb:1e:39:
92:f8:b0:7d:05:f8:e5:d6:8a:ac:06:b8:e0:28:07:cf:bd:2a:
23:83:67:5c:d2:1d:f4:bd:db:80:08:a2:57:8b:3c:75:05:8f:
c1:54:73:66:88:a7:9c:fc:1f:74:76:b7:b7:67:e1:54:17:fe:
83:3c:b4:3d:60:ec:a3:80:c9:84:5b:b7:40:c1:97:36:74:7c:
d5:38:02:c2:28:21:47:be:c0:61:f6:76:8d:dc:e4:e5:86:2c:
97:03:f5:69:34:d2:74:03:68:5c:84:32:6c:8f:ad:87:24:e9:
d3:bb:3a:c5:c8:0e:fa:c7:41:c0:2c:a9:b3:43:d6:c2:b4:1c:
1e:75:96:65:51:23:a0:4b:fa:6f:79:18:c1:ac:18:7f:5f:66:
7f:df:12:8a:76:43:22:7e:45:96:f2:41:58:9e:14:99:d0:9f:
6e:c4:69:60:c4:56:b6:0c:1d:ee:41:2a:97:ea:25:b2:15:8e:
f5:7c:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:10 2026 by rpki-client