Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/jtQ-mTz_41VKCF9-sR3RtwUah0s.asa
File: jtQ-mTz_41VKCF9-sR3RtwUah0s.asa (raw, json)
Hash identifier: W4sHaaM15/4VHkPddFczIcSYz8O/SNYCuYvydd52QnA=
Subject key identifier: 8E:D4:3E:99:3C:FF:E3:55:4A:08:5F:7E:B1:1D:D1:B7:05:1A:87:4B
Certificate issuer: /CN=a512609be1f05747928c5f07bd197e631435df62
Certificate serial: 019E185F90FB670B457F6ADEA289EE6FB1C3
Authority key identifier: A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/jtQ-mTz_41VKCF9-sR3RtwUah0s.asa
Signing time: Mon 11 May 2026 18:49:36 +0000
ASPA not before: Mon 11 May 2026 18:49:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205304
Providers: AS: 2027
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:5f:90:fb:67:0b:45:7f:6a:de:a2:89:ee:6f:b1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a512609be1f05747928c5f07bd197e631435df62
Validity
Not Before: May 11 18:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ed43e993cffe3554a085f7eb11dd1b7051a874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:a5:9c:ce:87:97:5b:13:5e:54:37:72:db:
8f:a7:f1:6d:7d:1b:63:6f:5b:bf:c6:40:d0:05:b4:
a8:1b:8f:92:05:a5:ee:1a:bd:63:56:a2:2f:15:46:
0b:84:78:f2:35:8d:33:35:3c:f6:a9:4e:e4:69:64:
3f:49:34:ca:97:03:05:7f:0c:40:71:7b:63:5d:51:
cf:c7:f2:97:49:a3:58:93:dd:f2:54:1b:45:e0:a5:
95:d0:b3:33:71:56:70:01:25:44:6f:f5:00:0b:5e:
12:38:48:cc:92:11:78:cd:b1:87:06:42:a3:d7:73:
f8:7e:61:04:41:b1:5a:fe:2e:c2:70:7f:fd:97:63:
ab:90:27:7f:69:c5:6b:ec:7c:e8:6d:04:2f:37:33:
e1:6e:3d:77:15:11:dc:54:26:17:a1:a2:ff:6e:db:
61:e0:29:25:5b:4a:98:a8:ad:46:73:06:38:67:68:
8b:34:29:3a:68:d1:c2:93:09:1e:5f:b1:d9:a4:e7:
5e:f1:a4:a0:ca:07:8c:ca:32:9f:fd:03:ad:cf:f0:
7a:86:48:dc:30:23:da:a6:78:c2:c8:86:ba:ff:e4:
73:a0:23:72:84:26:f2:eb:83:1b:41:4f:ac:68:ff:
e0:aa:b8:f2:bb:d2:b8:c4:9b:a7:bf:0e:db:2f:48:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:3E:99:3C:FF:E3:55:4A:08:5F:7E:B1:1D:D1:B7:05:1A:87:4B
X509v3 Authority Key Identifier:
keyid:A5:12:60:9B:E1:F0:57:47:92:8C:5F:07:BD:19:7E:63:14:35:DF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRJgm-HwV0eSjF8HvRl-YxQ132I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/jtQ-mTz_41VKCF9-sR3RtwUah0s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/336070-028b-476f-8606-55c1c84aed79/1/pRJgm-HwV0eSjF8HvRl-YxQ132I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205304
Signature Algorithm: sha256WithRSAEncryption
64:0f:58:48:cc:92:40:47:0f:b4:5f:b4:59:96:4c:26:f2:45:
78:50:50:60:ca:16:c3:b8:ef:0b:1f:b8:a5:e4:11:b5:80:b6:
2e:23:43:05:20:8a:85:0d:d1:6a:29:c9:45:92:be:df:d7:29:
2f:d5:36:eb:2b:57:90:71:7a:30:28:56:34:b3:0f:b1:d3:ce:
f6:d8:ce:24:ba:a1:e6:b7:69:e9:05:cc:54:f2:31:4e:79:5d:
75:a8:ac:38:f0:5d:89:75:9c:56:29:b3:da:9f:58:72:d1:6e:
83:b9:ad:e6:23:cd:bb:66:59:6b:d7:db:44:e8:0f:d8:a0:b9:
22:1b:68:f1:07:a9:96:ba:a9:cd:80:2e:58:fa:38:8e:34:6b:
e1:34:01:76:94:2e:82:35:aa:6c:cc:f9:88:96:11:07:c7:ab:
7e:4b:52:ad:82:21:ff:f3:9f:43:a9:2a:a9:dc:f5:91:d3:64:
31:57:02:91:c3:8b:3d:e5:74:43:28:1d:c8:91:65:fe:c5:0d:
69:77:6d:d6:72:08:12:77:2e:4f:95:c7:f6:47:83:f1:97:66:
81:50:2f:57:80:9b:f7:63:90:e0:14:fc:98:66:17:f9:1f:5b:
f2:f2:49:21:df:fe:07:1f:e1:80:50:8a:91:17:00:17:60:b3:
6b:db:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:57 2026 by rpki-client