Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa
File: 5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa (raw, json)
Hash identifier: wP+hA2isPzwkkopr2bJuiDjKXExJINvAfGb0Q8S5VWM=
Subject key identifier: E6:1F:68:43:99:BD:DC:43:2D:B6:0A:C6:F5:7C:34:9B:0D:91:69:8A
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019D0D4921C1DF7066117D08AE3260C3024C
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa
Signing time: Fri 20 Mar 2026 22:06:29 +0000
ASPA not before: Fri 20 Mar 2026 22:06:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 210715
Providers: AS: 209533
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:49:21:c1:df:70:66:11:7d:08:ae:32:60:c3:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Mar 20 22:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e61f684399bddc432db60ac6f57c349b0d91698a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:68:d6:a2:ff:6e:34:9d:ad:f5:3c:94:cc:
bb:95:f9:8f:90:ca:68:1f:62:22:d1:cb:b6:bc:48:
01:90:bd:45:eb:13:9d:92:64:21:da:9f:9f:f0:40:
f0:c9:6f:fc:d0:4d:58:33:67:58:ad:74:ce:a8:7f:
a9:90:e4:22:b0:81:c3:a8:2c:e7:e9:69:9e:4c:69:
6c:b2:0a:58:72:da:f1:cd:87:f1:0a:c2:5f:6a:73:
7e:1e:b9:dd:1f:59:98:df:d9:e7:3b:10:84:f6:36:
cc:cf:48:75:7a:2d:08:de:2f:ea:1d:a9:fd:a6:8a:
99:bb:57:bb:a3:69:f8:6e:fe:1f:ca:2d:02:35:be:
d0:d3:0a:af:bf:f3:f3:71:18:c0:18:4f:2e:7c:d1:
51:cc:2e:ca:8f:84:48:e2:68:cc:e8:7c:3d:7d:e8:
ab:75:7e:4b:b0:c2:0d:1b:c7:83:bc:23:c7:7e:70:
ed:95:ff:0b:bf:a8:bc:66:b0:d3:6f:dc:1b:1a:5b:
96:a1:9b:11:7f:ef:e2:72:62:bd:93:27:ae:ea:f5:
06:cb:68:26:84:f3:2e:b1:81:51:87:96:67:f0:02:
f3:09:4a:1c:ea:64:c2:95:7c:a8:a8:07:8f:6e:57:
5c:8f:61:01:8d:c2:f8:23:b6:7e:d4:2b:ba:23:9d:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:68:43:99:BD:DC:43:2D:B6:0A:C6:F5:7C:34:9B:0D:91:69:8A
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/5h9oQ5m93EMttgrG9Xw0mw2RaYo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210715
Signature Algorithm: sha256WithRSAEncryption
81:60:a5:f8:2b:54:4d:a0:34:ec:8f:43:83:59:82:81:2f:04:
3e:b5:b8:5e:e7:34:3d:15:18:8b:a4:ca:5f:94:37:18:0a:90:
d8:87:ec:54:3d:4f:e4:2a:c7:16:2f:8a:1b:07:e4:dc:17:18:
c4:63:af:d0:05:8e:4f:79:00:ad:56:2e:e8:ef:e1:7e:5b:bc:
ba:29:22:8e:2f:9d:16:47:a5:07:e5:6d:a1:f8:12:4e:9d:9e:
63:57:dd:a0:42:b8:2f:8e:03:99:1c:73:dc:30:d1:e4:57:b0:
7a:37:a7:1f:6e:04:da:73:4c:a1:f8:fa:3a:2c:37:94:19:c7:
fc:57:6d:c8:ab:5b:4a:5a:30:5b:6a:43:cf:13:ea:e5:f9:32:
16:51:d1:3c:ad:65:8d:75:f2:17:69:ac:58:2a:06:d7:84:29:
7d:25:d8:16:af:c6:c3:18:58:ff:ce:12:73:83:9e:8d:6f:ed:
fd:ab:0f:9c:10:0d:2a:25:33:97:bd:dc:82:b8:e9:72:23:de:
e8:90:e6:a4:d3:fe:b4:d6:09:ed:f2:eb:66:0a:75:50:73:c3:
fd:36:d7:50:18:5f:7a:ba:b8:f2:36:05:b6:a2:d1:7a:05:48:
b1:8c:e0:82:7f:0d:b8:ae:50:13:5e:76:40:a7:3f:91:54:3b:
50:53:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:05:33 2026 by rpki-client