Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/ONCg4S-AwpRcuE8ixHABowEZXG8.asa
File: ONCg4S-AwpRcuE8ixHABowEZXG8.asa (raw, json)
Hash identifier: PoiPStpGosLtzmokVlXMF0O8+FRd8PTDJBnNZ8l/K9k=
Subject key identifier: 38:D0:A0:E1:2F:80:C2:94:5C:B8:4F:22:C4:70:01:A3:01:19:5C:6F
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 019E1BA0B1FF5295B6601C578517C807C309
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/ONCg4S-AwpRcuE8ixHABowEZXG8.asa
Signing time: Tue 12 May 2026 09:59:36 +0000
ASPA not before: Tue 12 May 2026 09:59:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199243
Providers: AS: 6939
AS: 11967
AS: 34927
AS: 41051
AS: 52025
AS: 209735
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:a0:b1:ff:52:95:b6:60:1c:57:85:17:c8:07:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: May 12 09:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38d0a0e12f80c2945cb84f22c47001a301195c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:32:17:eb:7a:a9:6b:9b:7f:ab:36:f7:ce:
e7:1e:27:62:d9:8d:73:56:bd:65:02:d9:45:10:7e:
e2:87:73:91:5e:2c:80:e7:7b:ae:30:f3:e0:d7:6f:
5e:ba:9c:6b:49:fd:42:33:35:37:f0:54:95:72:45:
de:3e:16:2a:65:26:9b:dc:80:1f:87:9b:79:d7:95:
4d:05:fe:ba:17:a8:c8:3e:6f:c4:be:b0:77:a7:f4:
1e:ca:bb:af:04:43:db:9b:29:33:37:d0:ed:34:59:
4c:5c:aa:d2:71:3d:07:26:1e:4a:0d:c8:78:bb:ce:
f1:a3:1e:f5:e9:a6:e0:ed:f8:14:ba:de:86:2d:ab:
4f:fe:57:f7:4d:1d:48:aa:ed:4b:e2:0e:91:45:b0:
ac:ac:9b:cc:4e:af:df:96:84:43:f0:4d:ce:f0:71:
a9:85:65:91:7e:20:b0:db:3b:bd:e2:9d:82:0e:5e:
18:89:a0:cb:8a:da:c5:5c:74:93:ea:d1:24:d1:98:
e4:68:8e:ea:ff:14:1f:9b:13:e1:83:60:ca:fc:f1:
cd:98:f5:bf:31:b1:16:1b:3b:90:15:89:18:69:65:
ab:56:d6:c2:0a:3f:50:ae:c9:d8:92:6b:3e:be:14:
ec:fd:ca:58:db:ff:73:76:27:99:61:b3:ed:43:b5:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:A0:E1:2F:80:C2:94:5C:B8:4F:22:C4:70:01:A3:01:19:5C:6F
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/ONCg4S-AwpRcuE8ixHABowEZXG8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199243
Signature Algorithm: sha256WithRSAEncryption
31:32:e7:e5:63:97:fb:f5:7e:99:80:94:0e:f9:1e:2b:4c:2b:
fe:5a:25:62:ea:c3:d0:57:9f:cd:08:cb:a7:cb:6e:24:dc:58:
33:2b:e7:cb:c8:e3:c1:77:ee:dc:7d:76:5c:78:e6:64:87:eb:
ed:f0:ec:f5:91:50:43:2b:6e:ae:40:f6:cc:9a:6c:87:76:2e:
2d:42:79:05:39:e8:3a:84:d1:50:ae:c0:10:db:e6:ed:5c:a1:
8f:0b:14:9d:05:47:05:a4:93:82:8a:bb:1e:29:80:d9:92:7d:
b5:8d:5a:7a:56:6f:26:a1:49:7e:38:04:db:57:fc:10:ac:20:
e6:d0:58:8e:55:62:52:d9:9d:08:2e:82:e6:a5:26:f3:e7:6e:
52:e9:e3:d0:2a:a0:fa:4a:55:a7:9a:a2:28:a0:06:67:a5:39:
6d:6e:f1:be:02:c8:9d:d5:58:dc:14:1e:e5:5f:1d:cf:3c:cc:
81:dd:f9:36:7e:eb:53:10:29:f6:c4:4f:85:ec:a4:e5:41:c6:
22:00:5e:5a:e3:d3:bc:1e:d6:ec:8d:93:93:6d:e8:48:36:20:
c0:19:ac:b0:11:b3:84:56:f5:a2:6a:c9:e9:00:30:08:fa:82:
77:c1:58:eb:4b:e0:a1:8d:5b:dd:45:bf:75:9d:1d:b3:4e:78:
7c:7f:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:26 2026 by rpki-client