Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/v6hmJMW3LdEeiIk2pUs40W0Igc0.asa
File: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (raw, json)
Hash identifier: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=
Subject key identifier: BF:A8:66:24:C5:B7:2D:D1:1E:88:89:36:A5:4B:38:D1:6D:08:81:CD
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019F19013DFD7B8B8F4FDAB12F0DB9450FA9
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/v6hmJMW3LdEeiIk2pUs40W0Igc0.asa
Signing time: Tue 30 Jun 2026 14:48:59 +0000
ASPA not before: Tue 30 Jun 2026 14:48:59 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34696
Providers: AS: 174
AS: 6204
AS: 6939
AS: 29119
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:3d:fd:7b:8b:8f:4f:da:b1:2f:0d:b9:45:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jun 30 14:48:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfa86624c5b72dd11e888936a54b38d16d0881cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:7f:63:14:87:a1:cc:a7:83:f9:10:88:9f:
79:18:ef:68:29:ce:ac:13:98:84:0b:14:74:05:86:
11:74:25:86:a7:0c:93:80:ca:3a:3a:94:95:dc:b2:
73:a3:f7:11:9f:61:99:52:e1:f0:ce:87:2a:b9:be:
5b:7e:cb:04:b2:d5:8f:d0:7b:43:48:8a:36:da:01:
b6:dd:67:b1:20:bd:9c:6b:6d:9a:f0:32:4b:9e:75:
f4:f5:3e:36:9f:46:f4:2a:eb:42:77:00:ee:3a:4a:
d9:42:bf:17:f0:0c:38:ed:d4:9b:2f:e4:81:18:7d:
33:5d:51:c2:4d:bc:ae:fa:66:cf:f7:66:70:8a:f5:
da:8a:c0:00:5c:c4:74:fa:1f:52:ba:20:86:42:57:
d6:8a:ce:2c:db:46:d6:5a:35:06:96:11:50:27:0d:
9a:ea:2b:15:88:c4:91:14:dc:6c:fe:7d:53:ba:a0:
a1:54:59:99:a7:af:3d:1e:97:c1:42:b6:76:2b:fb:
85:e5:76:ba:29:c1:48:cc:24:e4:91:ae:12:b8:56:
da:d3:f3:c9:76:4c:62:f4:3b:b9:91:f7:da:61:c9:
70:11:a8:11:ef:3c:44:54:de:65:e5:87:14:e0:07:
ce:50:32:da:a4:e4:78:f6:0a:d1:d3:bd:bd:b8:7a:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:66:24:C5:B7:2D:D1:1E:88:89:36:A5:4B:38:D1:6D:08:81:CD
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/v6hmJMW3LdEeiIk2pUs40W0Igc0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34696
Signature Algorithm: sha256WithRSAEncryption
a9:ca:af:65:1b:b0:d8:4f:ad:46:29:34:cb:a2:8b:0e:0f:26:
78:5d:5d:7f:74:72:b8:3a:c5:10:4d:76:60:af:7c:20:31:bf:
eb:b1:9c:04:79:d8:e8:b2:4a:bf:c1:32:4b:c6:cb:15:69:5a:
a8:19:b2:f7:e0:b3:ca:d8:2b:e5:31:68:a5:a4:1a:04:17:79:
7d:b6:8c:e0:1b:c9:16:b4:7e:92:53:c2:32:ad:e2:2b:13:1b:
c6:04:ea:ff:c8:3f:38:e1:0f:23:da:8a:a1:24:81:62:85:44:
69:da:68:c3:cf:3f:c3:3d:4a:06:08:2e:18:cd:86:29:63:b2:
08:c2:d6:87:a0:7a:1f:15:ca:e4:99:c9:e1:ca:30:1d:b0:8d:
1b:9c:0a:1d:d1:d5:46:c4:30:06:52:e5:fc:dd:cb:e6:c9:73:
5c:3a:e1:dc:db:4c:ad:12:8d:1c:fa:3c:70:2c:39:db:2a:f6:
a8:99:f5:3a:87:83:25:d5:c4:ee:65:96:d8:ff:80:d3:36:03:
59:1e:7f:94:8d:31:57:3d:22:75:f7:1d:71:df:3d:80:72:ca:
d6:9a:42:91:47:a7:86:8a:e3:51:5e:e1:3d:7d:fb:87:3d:85:
80:29:f1:6f:85:c1:62:00:ed:3d:f6:b2:55:b8:f6:c9:b2:fe:
13:ad:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:56 2026 by rpki-client