Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/D6JN_SUanY3VCPcy8MM0wRyWpFg.asa
File: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (raw, json)
Hash identifier: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=
Subject key identifier: 0F:A2:4D:FD:25:1A:9D:8D:D5:08:F7:32:F0:C3:34:C1:1C:96:A4:58
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019D0A6D9FE3DAC78D0F145569A770BF9EF3
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/D6JN_SUanY3VCPcy8MM0wRyWpFg.asa
Signing time: Fri 20 Mar 2026 08:47:29 +0000
ASPA not before: Fri 20 Mar 2026 08:47:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34599
Providers: AS: 1299
AS: 8968
AS: 16004
AS: 200873
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:6d:9f:e3:da:c7:8d:0f:14:55:69:a7:70:bf:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Mar 20 08:47:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fa24dfd251a9d8dd508f732f0c334c11c96a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:87:71:16:a5:56:4f:5e:0d:de:0d:38:2b:
cd:09:61:18:00:0f:d5:3c:07:23:da:27:0c:f8:b6:
f4:a5:27:6b:c1:14:c7:3a:17:80:cb:3f:74:27:67:
c7:f7:2e:87:24:e5:74:dc:6b:70:ba:84:19:30:67:
4f:85:2f:b5:ce:94:25:c3:ac:76:72:64:b8:97:e9:
eb:cb:5e:eb:68:c1:67:b2:25:7a:6d:52:c4:cb:2f:
4e:7b:36:ed:55:48:2c:03:82:22:42:62:ce:13:9d:
48:fa:21:83:6a:32:8a:36:e6:12:f2:ec:7b:2d:47:
99:8c:20:c5:a3:46:b2:6f:9b:9b:ed:b7:c5:2c:cd:
a0:51:5a:af:92:f6:53:47:8b:4c:e4:05:47:6b:12:
01:41:76:6e:29:78:5c:85:c6:b7:53:16:43:00:36:
f9:1f:a4:5b:b4:ca:43:13:0f:bb:06:c0:2b:f4:89:
2e:95:39:56:59:c5:9d:87:7f:78:0e:79:8e:d0:47:
a6:63:91:f2:38:dd:2d:dc:dd:6c:c5:83:0c:12:2f:
01:44:d1:ae:c1:6b:0c:33:ee:9b:e9:63:38:ec:dd:
b5:06:80:21:2e:36:59:95:df:c5:ae:99:ea:80:9f:
ff:80:12:d7:22:06:62:32:77:22:02:c6:41:bc:15:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:4D:FD:25:1A:9D:8D:D5:08:F7:32:F0:C3:34:C1:1C:96:A4:58
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/D6JN_SUanY3VCPcy8MM0wRyWpFg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34599
Signature Algorithm: sha256WithRSAEncryption
90:82:69:9b:49:c9:6d:b8:fd:08:57:d9:4a:8f:3d:b4:fa:1d:
71:e1:0f:45:79:e0:1a:2b:81:4c:a0:c3:c6:ec:f4:34:7e:c7:
d1:6a:1d:ea:28:ee:73:9e:fd:5a:15:92:fd:23:a3:40:18:12:
a9:5a:f7:9c:ef:e0:a2:4a:32:40:0f:c4:45:33:f5:c8:c9:07:
ae:d9:d3:3c:a6:54:0a:0a:72:ce:95:d7:16:89:4d:2f:50:77:
0e:aa:9c:ba:48:f2:b1:f6:ab:51:43:f5:64:96:bf:da:54:5d:
45:c5:a7:df:93:15:eb:da:9b:c9:42:e7:5b:fd:69:74:a1:85:
66:aa:bc:39:e0:95:12:fe:cf:1d:69:44:3b:f9:64:2f:f7:d8:
11:79:15:2d:8c:f9:32:3a:34:da:0d:5f:8d:83:ba:d1:a3:c3:
d1:eb:62:77:e5:27:3f:01:86:14:61:91:04:be:3d:f6:c0:ac:
a1:50:14:08:01:44:62:05:1e:d5:dd:43:3c:f5:f9:50:66:1f:
c0:03:62:e8:e9:02:1a:23:d7:6e:d9:60:2b:72:3b:92:db:7d:
62:99:c7:50:24:c4:a0:6b:39:91:99:e5:ea:e2:ac:6c:a1:c3:
e1:65:02:62:82:48:9e:80:81:92:e2:d9:f9:c2:ba:47:6f:a8:
52:84:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:19 2026 by rpki-client