Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/qhw-oWhw0NTepwRC4uCmjdN0RG0.asa
File: qhw-oWhw0NTepwRC4uCmjdN0RG0.asa (raw, json)
Hash identifier: Eh7fHtr19LeexhS3SBHy5ilwQiwjvV00HdoOnKi+arg=
Subject key identifier: AA:1C:3E:A1:68:70:D0:D4:DE:A7:04:42:E2:E0:A6:8D:D3:74:44:6D
Certificate issuer: /CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
Certificate serial: 019DFE3114A8E205B20A8188B52D09A5C1DA
Authority key identifier: ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/qhw-oWhw0NTepwRC4uCmjdN0RG0.asa
Signing time: Wed 06 May 2026 16:48:42 +0000
ASPA not before: Wed 06 May 2026 16:48:42 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 198079
Providers: AS: 835
AS: 34927
AS: 41051
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:31:14:a8:e2:05:b2:0a:81:88:b5:2d:09:a5:c1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7d1d1083f7042f44d15d2f0dca21fa86bc40d5
Validity
Not Before: May 6 16:48:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa1c3ea16870d0d4dea70442e2e0a68dd374446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:30:a3:f2:26:2c:11:87:7a:0a:33:c1:f5:
b3:b8:fc:be:2b:c7:60:17:99:ab:a8:1c:03:4a:6d:
84:e3:f3:8f:1c:23:71:bb:41:c5:99:d8:46:b8:1b:
87:95:01:47:04:e9:3f:ac:d4:e2:3d:1a:e2:c1:70:
b1:60:7b:4d:c6:83:95:1e:9b:9a:a7:98:db:6e:96:
62:13:4c:29:92:d4:45:bd:a2:20:5a:29:22:9d:f1:
1f:ee:79:e0:d7:54:4c:ef:85:8b:7d:58:a3:d7:db:
6f:d1:65:e4:64:2d:5a:ed:1c:f1:5d:1c:6d:be:53:
57:b2:d7:01:cd:25:a2:46:16:8a:bc:8c:3f:c8:d6:
db:5c:1e:dd:1b:45:b0:23:e7:b8:69:d9:6d:c2:88:
b6:55:b6:80:5c:d4:48:5f:40:b1:d5:8f:e5:b6:b4:
49:a5:c6:13:cf:d1:f8:d2:25:67:dd:0a:2b:d3:41:
d1:45:93:3f:7b:5b:7b:60:78:45:85:91:e9:89:51:
fa:24:82:f8:0b:c7:bd:5e:1b:58:d1:38:1f:fd:e9:
e6:da:86:d7:8c:82:d1:67:0e:83:39:f5:f1:a6:f0:
3d:a2:ef:83:bc:c5:b3:41:d1:57:36:ec:19:5d:c4:
58:16:16:96:af:00:7f:91:47:1d:55:9b:94:ce:aa:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:3E:A1:68:70:D0:D4:DE:A7:04:42:E2:E0:A6:8D:D3:74:44:6D
X509v3 Authority Key Identifier:
keyid:ED:7D:1D:10:83:F7:04:2F:44:D1:5D:2F:0D:CA:21:FA:86:BC:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X0dEIP3BC9E0V0vDcoh-oa8QNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/qhw-oWhw0NTepwRC4uCmjdN0RG0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4987ae-54db-447e-ad27-b72c5abade38/1/7X0dEIP3BC9E0V0vDcoh-oa8QNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198079
Signature Algorithm: sha256WithRSAEncryption
b0:32:89:e8:29:75:7f:bc:94:53:a7:a1:ef:13:72:5e:dc:a5:
99:bc:5d:7a:aa:56:5e:b4:8d:c6:54:37:70:d3:a8:e1:a3:ba:
bb:fb:8a:79:a1:28:4e:d3:4c:1f:2e:f3:84:a6:47:23:38:13:
7f:e7:cb:dd:05:98:08:ec:64:1a:70:34:81:dd:9e:f7:76:68:
b0:9c:b3:6e:48:ce:fa:4f:0d:49:61:b9:91:c8:64:6c:ca:be:
14:b4:62:b2:b7:05:1d:2f:f9:1a:a6:2b:31:f5:6e:6c:ea:03:
ae:87:10:e9:3e:db:a4:73:df:04:4c:5b:5f:78:41:94:67:cd:
c6:f1:c4:b4:1f:23:81:b8:0f:61:49:de:c6:48:05:07:ae:83:
52:d6:d2:9b:85:34:3d:81:a4:03:94:b3:b7:f7:1d:46:0a:40:
7f:b5:92:cd:c0:ed:db:d8:49:49:cc:52:62:1b:31:33:b7:c1:
85:3a:cd:08:fe:ee:52:a1:ed:d9:40:b2:f3:a9:b7:53:72:b6:
b3:12:57:2e:c3:5b:47:a8:77:67:53:a9:47:db:f7:0d:07:ef:
89:ff:01:ba:0e:02:49:8f:7e:dd:cc:82:85:09:f4:b2:43:c9:
54:58:55:b2:0a:d1:b3:58:b6:6d:20:9c:a1:4e:48:0e:da:7b:
dc:ab:df:28
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3+MRSo4gWyCoGItS0JpcHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2QxZDEwODNmNzA0MmY0NGQxNWQyZjBkY2EyMWZhODZi
YzQwZDUwHhcNMjYwNTA2MTY0ODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTFjM2VhMTY4NzBkMGQ0ZGVhNzA0NDJlMmUwYTY4ZGQzNzQ0NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbIwo/ImLBGHegozwfWzuPy+K8dg
F5mrqBwDSm2E4/OPHCNxu0HFmdhGuBuHlQFHBOk/rNTiPRriwXCxYHtNxoOVHpua
p5jbbpZiE0wpktRFvaIgWikinfEf7nng11RM74WLfVij19tv0WXkZC1a7RzxXRxt
vlNXstcBzSWiRhaKvIw/yNbbXB7dG0WwI+e4adltwoi2VbaAXNRIX0Cx1Y/ltrRJ
pcYTz9H40iVn3Qor00HRRZM/e1t7YHhFhZHpiVH6JIL4C8e9XhtY0Tgf/enm2obX
jILRZw6DOfXxpvA9ou+DvMWzQdFXNuwZXcRYFhaWrwB/kUcdVZuUzqrbewIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKocPqFocNDU3qcEQuLgpo3TdERtMB8GA1UdIwQY
MBaAFO19HRCD9wQvRNFdLw3KIfqGvEDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1gwZEVJUDNCQzlFMFYwdkRjb2gtb2E4UU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80OTg3YWUtNTRkYi00NDdlLWFkMjct
YjcyYzVhYmFkZTM4LzEvcWh3LW9XaHcwTlRlcHdSQzR1Q21qZE4wUkcwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80OTg3YWUtNTRkYi00NDdlLWFkMjctYjcyYzVhYmFkZTM4
LzEvN1gwZEVJUDNCQzlFMFYwdkRjb2gtb2E4UU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMFvzANBgkqhkiG
9w0BAQsFAAOCAQEAsDKJ6Cl1f7yUU6eh7xNyXtylmbxdeqpWXrSNxlQ3cNOo4aO6
u/uKeaEoTtNMHy7zhKZHIzgTf+fL3QWYCOxkGnA0gd2e93ZosJyzbkjO+k8NSWG5
kchkbMq+FLRisrcFHS/5GqYrMfVubOoDrocQ6T7bpHPfBExbX3hBlGfNxvHEtB8j
gbgPYUnexkgFB66DUtbSm4U0PYGkA5Szt/cdRgpAf7WSzcDt29hJScxSYhsxM7fB
hTrNCP7uUqHt2UCy86m3U3K2sxJXLsNbR6h3Z1OpR9v3DQfvif8Bug4CSY9+3cyC
hQn0skPJVFhVsgrRs1i2bSCcoU5IDtp73KvfKA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:18:14 2026 by rpki-client