Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/qhONGSd5IFYRbbwCnUUSYxuM4Dg.asa
File: qhONGSd5IFYRbbwCnUUSYxuM4Dg.asa (raw, json)
Hash identifier: BCb8sB5GLTFmhhkMyQdRLvCPQMUaxGs/b1hsVb1eovk=
Subject key identifier: AA:13:8D:19:27:79:20:56:11:6D:BC:02:9D:45:12:63:1B:8C:E0:38
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019F7FBB89013F530B03FD4D7B4D3DB769CC
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/qhONGSd5IFYRbbwCnUUSYxuM4Dg.asa
Signing time: Mon 20 Jul 2026 13:33:44 +0000
ASPA not before: Mon 20 Jul 2026 13:33:44 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215186
Providers: AS: 39120
AS: 203462
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:bb:89:01:3f:53:0b:03:fd:4d:7b:4d:3d:b7:69:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jul 20 13:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa138d1927792056116dbc029d4512631b8ce038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:6c:51:d4:48:8c:ca:b1:bb:43:d0:91:3a:
49:a3:77:99:5e:9b:56:e9:6e:0b:10:04:34:14:5a:
39:70:56:79:ed:9e:7b:83:54:34:00:f3:12:25:82:
d0:12:e9:08:a8:23:22:95:70:e1:43:3b:92:8a:62:
f8:a3:38:6f:d7:80:a7:c2:8d:ce:72:2d:44:82:ac:
bf:1d:32:f6:e9:bb:9c:00:41:5c:bd:0f:97:76:a6:
19:67:88:55:e5:3b:13:f8:0d:43:76:bc:bb:aa:9a:
69:c2:ed:74:e3:3f:46:41:b2:45:9f:c3:78:a6:89:
13:ad:75:0b:8a:b7:76:65:79:05:59:25:d1:3a:5c:
e3:36:b1:71:f8:11:78:6c:09:13:f1:a4:5e:96:b3:
d0:1a:67:88:2a:1e:b9:e3:15:d9:c1:d0:f1:dc:11:
cf:ab:0e:fc:24:48:be:f5:8f:b1:0d:6f:fb:07:f1:
21:00:a9:57:52:26:ae:cd:ba:b1:ef:76:ff:d0:26:
f3:29:11:5b:bd:15:be:fe:b1:b0:39:fd:c2:34:de:
c9:37:48:f9:bf:93:8d:4a:7e:93:6c:fe:02:2b:38:
79:31:e0:15:4d:15:ee:d8:c8:93:71:bd:6e:f8:ed:
04:a6:33:a4:d7:ec:27:82:7f:8f:ed:80:47:fc:22:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:13:8D:19:27:79:20:56:11:6D:BC:02:9D:45:12:63:1B:8C:E0:38
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/qhONGSd5IFYRbbwCnUUSYxuM4Dg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215186
Signature Algorithm: sha256WithRSAEncryption
02:26:f8:9c:20:04:20:5b:39:36:5c:e5:91:c2:f0:ca:16:2d:
ea:33:58:24:74:cf:45:cf:6f:b7:d1:36:7e:3c:61:ca:76:6b:
80:b4:95:83:9b:42:b0:61:30:a7:13:e5:db:6c:19:bd:b6:15:
14:c1:ef:5a:fe:08:e6:33:1e:14:52:79:57:df:17:d5:f0:5f:
40:01:18:74:44:57:e5:95:25:88:58:4e:61:dd:64:aa:c4:08:
ce:60:12:b5:fe:ba:a9:1f:b5:16:b5:dd:97:31:f9:82:96:1d:
86:2b:5f:f1:ca:a1:14:60:4e:b6:08:e4:84:97:44:1a:42:3c:
4f:c1:1a:85:b2:3e:e9:64:0f:b4:a3:7a:c9:26:64:89:23:f6:
32:ab:83:20:10:93:54:1c:04:85:0a:e5:91:b9:85:10:6b:12:
01:a2:ff:b7:2a:40:bf:05:59:57:33:97:ba:1e:69:d5:28:5e:
95:d4:93:3e:11:fb:2a:cb:c1:c8:62:8d:e3:92:51:13:23:29:
89:e0:be:1f:f7:6d:e8:d9:56:79:bb:1a:a2:2c:de:1d:a5:cb:
77:64:19:21:0f:89:39:57:14:ab:49:2d:d9:af:12:da:7b:66:
21:f8:dc:f2:d2:f2:80:3a:bb:45:cb:b1:c2:7a:04:8f:b3:48:
ab:e3:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:14 2026 by rpki-client