Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/1OKJSf7t7_lAiooOLlq2_b408jY.asa
File: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (raw, json)
Hash identifier: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=
Subject key identifier: D4:E2:89:49:FE:ED:EF:F9:40:8A:8A:0E:2E:5A:B6:FD:BE:34:F2:36
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019F1884318E03E95843B9415553391CA8BA
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/1OKJSf7t7_lAiooOLlq2_b408jY.asa
Signing time: Tue 30 Jun 2026 12:32:24 +0000
ASPA not before: Tue 30 Jun 2026 12:32:24 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34710
Providers: AS: 30870
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:84:31:8e:03:e9:58:43:b9:41:55:53:39:1c:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jun 30 12:32:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4e28949feedeff9408a8a0e2e5ab6fdbe34f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:3d:ab:bd:91:8a:14:ee:66:38:1e:5c:14:
5a:64:99:cd:e8:5d:93:71:0d:a3:66:b3:f2:db:be:
b3:a2:3d:29:56:76:35:6b:46:9b:36:06:eb:c4:ad:
d1:cd:9a:47:ae:83:47:e1:b5:db:1a:2d:07:26:e4:
be:f1:e4:94:ef:4a:23:8b:20:7b:e6:ce:94:7d:1f:
a5:92:da:66:f0:d0:0e:82:59:ba:80:66:c7:41:92:
65:bb:61:28:1b:50:a7:61:6f:37:be:dc:30:fa:4a:
9e:e5:25:d4:7f:20:83:51:45:83:ad:77:80:d7:7c:
6c:3e:14:58:1f:cf:e3:4e:12:ca:e1:8e:ec:ff:44:
c8:e8:eb:23:92:6d:e4:c6:92:32:f8:78:27:17:cf:
2a:a8:10:70:45:a1:2d:6f:15:ea:1e:ba:a9:a7:f8:
83:b3:d9:63:a1:0d:f9:e2:3c:ba:48:3e:88:a4:12:
bf:19:6b:d8:60:6d:61:66:96:1c:c3:1f:3e:db:08:
bf:99:7a:26:75:c4:89:8d:9f:68:64:ee:47:50:82:
f5:f9:a0:01:78:20:72:37:f3:40:2c:86:85:29:60:
7c:18:f9:c5:ed:d0:8c:1d:3d:a7:73:3a:cd:22:ae:
9f:ad:e6:9e:64:3c:7c:85:d1:9a:11:58:b3:29:d5:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:89:49:FE:ED:EF:F9:40:8A:8A:0E:2E:5A:B6:FD:BE:34:F2:36
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/1OKJSf7t7_lAiooOLlq2_b408jY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34710
Signature Algorithm: sha256WithRSAEncryption
7a:fc:06:f9:dd:d9:b7:b0:6f:f1:6a:06:73:5e:85:14:6d:51:
d1:71:58:51:4c:1e:d4:cf:0c:87:d6:ee:b9:4a:d1:a2:9f:0e:
ba:04:6a:ac:bb:cf:f0:04:b4:de:d2:74:b9:70:1c:ae:99:89:
28:49:77:7e:fa:85:f7:d1:db:f6:c6:7d:07:a2:de:91:1f:fb:
f8:30:f1:2c:13:d6:d0:43:ff:a6:fd:2e:68:a7:4d:66:94:ee:
5f:c0:04:2f:4a:26:01:8d:67:13:b1:01:f9:ef:0c:d8:e1:2c:
f3:65:95:5e:12:d8:cf:79:8a:92:49:1f:27:d3:89:b6:0d:54:
73:9c:ea:ba:de:df:f3:b6:7a:65:62:bc:62:28:33:0c:df:4b:
1f:2c:e3:4d:51:f6:9d:13:2c:c6:10:9e:83:df:72:9f:ad:1e:
56:4b:34:a5:b4:18:4b:0c:b1:fd:49:77:1b:82:5f:d8:26:e2:
4c:d0:ea:40:d3:5d:f6:33:95:b3:5d:39:c1:95:b2:e5:05:22:
07:c3:43:26:76:09:86:2d:83:62:4d:8c:88:b3:8e:9a:12:dd:
55:54:b2:6d:c2:ea:3e:7a:33:b8:0d:e4:6e:ce:cb:47:c0:ac:
ff:78:68:45:d9:ec:0c:e4:93:ca:5d:d8:56:00:71:3c:84:97:
36:ba:90:cc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8YhDGOA+lYQ7lBVVM5HKi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh
YTMwNDQwHhcNMjYwNjMwMTIzMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGUyODk0OWZlZWRlZmY5NDA4YThhMGUyZTVhYjZmZGJlMzRmMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlI9q72RihTuZjgeXBRaZJnN6F2T
cQ2jZrPy276zoj0pVnY1a0abNgbrxK3RzZpHroNH4bXbGi0HJuS+8eSU70ojiyB7
5s6UfR+lktpm8NAOglm6gGbHQZJlu2EoG1CnYW83vtww+kqe5SXUfyCDUUWDrXeA
13xsPhRYH8/jThLK4Y7s/0TI6Osjkm3kxpIy+HgnF88qqBBwRaEtbxXqHrqpp/iD
s9ljoQ354jy6SD6IpBK/GWvYYG1hZpYcwx8+2wi/mXomdcSJjZ9oZO5HUIL1+aAB
eCByN/NALIaFKWB8GPnF7dCMHT2nczrNIq6freaeZDx8hdGaEVizKdVG2QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNTiiUn+7e/5QIqKDi5atv2+NPI2MB8GA1UdIwQY
MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt
YWZiZGJkYWQ1OGE1LzEvMU9LSlNmN3Q3X2xBaW9vT0xscTJfYjQwOGpZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1
LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCHljANBgkqhkiG
9w0BAQsFAAOCAQEAevwG+d3Zt7Bv8WoGc16FFG1R0XFYUUwe1M8Mh9buuUrRop8O
ugRqrLvP8AS03tJ0uXAcrpmJKEl3fvqF99Hb9sZ9B6LekR/7+DDxLBPW0EP/pv0u
aKdNZpTuX8AEL0omAY1nE7EB+e8M2OEs82WVXhLYz3mKkkkfJ9OJtg1Uc5zqut7f
87Z6ZWK8YigzDN9LHyzjTVH2nRMsxhCeg99yn60eVks0pbQYSwyx/Ul3G4Jf2Cbi
TNDqQNNd9jOVs105wZWy5QUiB8NDJnYJhi2DYk2MiLOOmhLdVVSybcLqPnozuA3k
bs7LR8Cs/3hoRdnsDOSTyl3YVgBxPISXNrqQzA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:03 2026 by rpki-client