Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/deef0kQTVkiZ-iP9kTGY1fZU_WA.asa
File: deef0kQTVkiZ-iP9kTGY1fZU_WA.asa (raw, json)
Hash identifier: qMJyhV5YvZg0IFpQ2HLYt65onYCb8vkHlaPqKePxLhw=
Subject key identifier: 75:E7:9F:D2:44:13:56:48:99:FA:23:FD:91:31:98:D5:F6:54:FD:60
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 01A0C91EB229A01DBA1C59D727D77D1B10A7
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/deef0kQTVkiZ-iP9kTGY1fZU_WA.asa
Signing time: Tue 22 Sep 2026 12:37:07 +0000
ASPA not before: Tue 22 Sep 2026 12:37:07 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 60280
Providers: AS: 174
AS: 6453
AS: 6939
AS: 9002
AS: 12389
AS: 20485
AS: 20804
AS: 31133
AS: 58453
AS: 60388
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:1e:b2:29:a0:1d:ba:1c:59:d7:27:d7:7d:1b:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Sep 22 12:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75e79fd24413564899fa23fd913198d5f654fd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:a4:5b:72:38:5b:8d:75:0e:96:c3:0e:69:
86:ff:c8:5e:a7:1f:ea:89:40:e3:2f:43:92:50:f5:
57:4f:68:ca:16:62:76:81:d3:b3:30:84:91:72:44:
a3:9f:f2:75:2b:88:b5:eb:db:ab:3b:d9:b8:ce:23:
50:76:22:38:e6:2f:40:d0:12:10:e6:bb:11:8e:55:
4f:b9:9c:f5:c8:aa:02:e4:3e:dd:95:5c:a1:60:41:
45:19:e1:5c:9c:87:3c:c0:c4:4e:37:72:cf:66:5f:
f7:74:76:db:c2:ee:df:e8:d4:9b:93:5f:2a:07:39:
0e:8d:8b:53:3f:67:57:a6:9f:b3:1f:38:1d:86:5e:
35:3d:f2:71:96:cb:c2:20:3b:1d:23:19:73:db:98:
96:0a:cd:76:65:9c:d9:75:16:91:98:b2:89:cf:ef:
ba:fa:09:37:bc:3b:bb:d3:fd:15:c5:6a:a5:53:96:
91:9b:f6:b6:0d:26:a9:a5:ca:09:5e:42:91:ff:09:
c8:c7:85:22:0f:9d:4e:7a:5f:00:cc:93:67:1e:71:
87:9c:c5:8a:fe:18:b7:25:40:d6:fe:0f:fa:f7:90:
f9:4e:4a:91:3a:27:2f:d3:14:c1:88:3e:76:dc:d2:
5e:ed:6a:95:1a:25:6c:02:3c:6d:e4:c4:61:41:1e:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E7:9F:D2:44:13:56:48:99:FA:23:FD:91:31:98:D5:F6:54:FD:60
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/deef0kQTVkiZ-iP9kTGY1fZU_WA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60280
Signature Algorithm: sha256WithRSAEncryption
be:c2:6b:42:e9:c0:e4:e8:2e:60:9d:e3:57:a7:20:95:0d:d7:
d7:e7:ba:b4:67:f5:55:1b:dd:4e:79:04:c2:a9:b0:58:2b:9c:
e3:a3:5d:44:f1:4b:65:d3:7a:91:f8:ff:50:86:83:22:b0:f8:
d4:12:d6:aa:d9:49:ce:db:e9:89:da:74:0b:db:3f:d0:dd:5d:
96:0e:ab:84:6d:58:d8:1b:a4:77:5a:c6:2a:30:bc:9e:9e:63:
c6:bf:89:76:c7:43:c0:2f:25:c0:2c:21:3e:1d:01:fa:7a:ca:
c7:b8:5c:79:46:fe:55:74:f0:1b:c6:29:fd:34:7d:28:4b:15:
9c:e0:f0:80:9f:8c:57:8e:55:e9:5b:05:b9:a1:d1:fe:85:e4:
bb:37:cc:0c:44:0b:a5:43:f1:ac:a2:d3:de:c6:65:9b:3e:82:
bb:55:b2:93:00:e6:60:6d:74:87:95:88:91:cf:3a:82:04:bf:
4d:83:a0:b2:54:e3:09:84:87:63:fe:c1:ed:49:11:ef:5a:28:
ef:9f:b5:25:cb:18:2b:eb:73:4c:b5:97:90:da:bd:1a:60:33:
44:fa:6e:67:b7:ae:a7:eb:02:ec:b2:0e:71:c1:52:e5:16:ae:
ca:ff:d5:19:1f:09:23:30:37:71:16:1e:ba:74:2f:f2:aa:d1:
66:5c:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:17:29 2026 by rpki-client