Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/IcOnjr-4gR9WTPCT4pZwTUDGeEY.asa
File: IcOnjr-4gR9WTPCT4pZwTUDGeEY.asa (raw, json)
Hash identifier: tub1Ik2wRN8xHgbk6v42CqaDh13KKYgCWxQMPgag7TY=
Subject key identifier: 21:C3:A7:8E:BF:B8:81:1F:56:4C:F0:93:E2:96:70:4D:40:C6:78:46
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 019F1A809CB71A134B0F156F1AC1BFAE1E05
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/IcOnjr-4gR9WTPCT4pZwTUDGeEY.asa
Signing time: Tue 30 Jun 2026 21:47:44 +0000
ASPA not before: Tue 30 Jun 2026 21:47:44 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 203024
Providers: AS: 35661
AS: 214145
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:80:9c:b7:1a:13:4b:0f:15:6f:1a:c1:bf:ae:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Jun 30 21:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c3a78ebfb8811f564cf093e296704d40c67846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:4b:8a:43:eb:1c:f3:fc:17:a7:f7:ba:7e:
0a:36:3a:be:b6:ec:76:0c:ab:d7:0a:c0:c9:f8:38:
f9:61:47:3c:99:ec:e3:71:c8:58:ea:a2:b0:33:8b:
24:55:e4:cb:45:8c:6f:b7:86:12:6c:19:4f:00:9c:
89:f8:55:de:00:49:5d:c9:0d:1d:e0:77:e7:7b:45:
13:91:50:21:5e:ea:a2:e0:ac:b5:6b:d4:e5:5f:cd:
48:33:73:00:e6:ce:2b:55:dc:7f:41:cf:25:85:da:
25:09:c5:5b:03:45:1c:8f:1e:47:fd:7e:37:ef:7a:
14:b4:f6:45:86:3f:80:b4:6e:b0:33:09:7c:2a:30:
e5:28:84:3b:96:87:e4:e2:57:d5:34:b1:5f:03:23:
95:f3:0b:8b:dd:34:a5:c5:94:ac:b5:e6:c8:69:3d:
67:96:a3:85:69:b4:0d:a5:38:f3:5c:42:3b:cb:d4:
39:1a:c8:e7:f6:cc:3a:65:be:b8:f9:a2:35:53:be:
1d:2d:f4:dd:89:42:2c:2c:5c:47:7b:0c:ce:1c:5b:
2e:ed:38:9e:0d:ae:e0:7f:2f:21:d6:1b:41:ae:18:
b5:89:51:14:19:98:48:ff:3b:67:45:17:c4:17:6b:
5f:12:ae:e6:02:f0:b0:cb:5a:74:9e:84:ad:32:47:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:A7:8E:BF:B8:81:1F:56:4C:F0:93:E2:96:70:4D:40:C6:78:46
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/IcOnjr-4gR9WTPCT4pZwTUDGeEY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203024
Signature Algorithm: sha256WithRSAEncryption
37:e2:fb:58:8f:38:6c:34:eb:c2:98:95:f3:6a:8d:e3:a7:92:
cd:d0:97:bb:f9:eb:02:77:1d:57:ce:c3:85:81:d2:9e:c7:9c:
72:4f:21:82:f7:6f:88:39:50:af:67:62:6f:e5:37:29:08:05:
d0:76:89:b6:f9:0c:4c:7d:8f:c7:51:39:4f:f8:34:e4:db:d4:
dc:6b:fc:77:b2:d8:0e:55:2a:05:6c:92:f3:e4:53:fc:8c:6f:
88:ae:40:71:e9:a1:6f:fd:e5:dc:2f:17:15:c1:26:cf:32:ad:
92:d5:d8:fe:c8:73:79:8f:a1:56:e9:a8:d5:28:ca:33:ac:49:
ff:b0:6f:cc:d8:06:c1:64:5e:64:f8:54:a5:f9:99:ba:56:b8:
18:cb:dd:6b:7f:67:4b:15:95:18:bd:3f:af:92:c4:e3:55:3a:
ee:9d:1c:5d:3a:cd:04:74:ec:ef:c2:c0:c7:90:8c:92:db:08:
2b:bb:b1:2f:04:e0:fd:5b:27:d1:aa:b7:73:1d:6b:8b:0b:46:
cb:17:dc:eb:a1:2c:9a:26:e5:c2:8a:99:22:91:f1:e2:46:eb:
2a:7f:fa:4e:79:6b:92:b5:40:2b:7a:19:0f:24:2e:5b:15:ba:
5b:65:45:41:70:ca:38:7b:35:9b:f8:b1:e9:c4:5f:b9:9a:a9:
49:48:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:51 2026 by rpki-client