Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/CakG1y3Fn5idWONRdZg7rbvxA_E.asa
File: CakG1y3Fn5idWONRdZg7rbvxA_E.asa (raw, json)
Hash identifier: HQuMV/VeQz78G82BlBpcw445Ff5+K/MkRwLH08aG4Dc=
Subject key identifier: 09:A9:06:D7:2D:C5:9F:98:9D:58:E3:51:75:98:3B:AD:BB:F1:03:F1
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 019F19013F7B2652838E9E6B60D0C57621E2
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/CakG1y3Fn5idWONRdZg7rbvxA_E.asa
Signing time: Tue 30 Jun 2026 14:48:59 +0000
ASPA not before: Tue 30 Jun 2026 14:48:59 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208016
Providers: AS: 3320
AS: 8220
AS: 8881
AS: 34549
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:3f:7b:26:52:83:8e:9e:6b:60:d0:c5:76:21:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Jun 30 14:48:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09a906d72dc59f989d58e35175983badbbf103f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:4b:ab:e0:85:d8:3c:c5:52:44:4e:ad:cf:
6d:d9:d1:0e:3f:c7:04:12:6a:16:21:84:d1:94:05:
c4:eb:2c:e9:45:44:12:bc:ae:46:fe:c6:75:8b:0b:
2b:2e:ed:44:98:50:98:34:de:a1:f3:0c:9c:7c:01:
93:27:4f:17:ea:08:bf:1b:97:12:ce:34:c9:a9:2c:
f2:5a:87:7d:d9:78:89:0e:c0:47:d6:be:ed:88:ae:
01:89:8b:87:3d:a2:c6:71:a8:cd:db:ad:0d:d7:7e:
0a:2e:57:97:5b:70:42:f8:39:76:20:45:14:f8:b9:
23:09:e0:69:16:c4:5e:7b:ab:c6:41:19:50:d4:4b:
7a:8a:34:65:4e:20:ca:f5:9d:3f:92:b5:1b:fb:7b:
bb:d8:66:f8:b9:77:c3:3d:e4:14:67:58:ed:a0:81:
e8:ed:7a:d9:ab:dc:be:7a:d2:aa:18:a7:81:d8:16:
b9:76:7b:a3:cf:4d:09:9f:03:aa:d9:86:10:f5:fd:
af:f4:89:89:7b:a9:f7:85:f1:79:b8:a8:8d:4a:c2:
5b:32:be:09:f9:2d:af:65:9a:5d:3e:94:bb:59:79:
95:52:fb:ac:9b:33:ed:90:e3:aa:2d:84:87:0a:82:
17:2d:0f:5b:32:ad:86:25:34:4e:62:9e:ef:1a:f2:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A9:06:D7:2D:C5:9F:98:9D:58:E3:51:75:98:3B:AD:BB:F1:03:F1
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/CakG1y3Fn5idWONRdZg7rbvxA_E.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208016
Signature Algorithm: sha256WithRSAEncryption
6e:33:36:2c:6c:81:57:6a:f7:3b:12:48:de:16:16:b6:17:88:
b6:c1:a7:df:e8:88:56:d4:ae:7a:46:ed:43:0b:7a:f6:a3:f5:
20:12:79:e0:2d:1c:b3:e5:f1:ab:c8:26:9e:0f:f4:21:3e:bc:
74:2e:03:55:7d:2d:a4:b6:3a:3a:bb:30:ab:92:df:be:73:a6:
da:2c:00:b1:04:1c:c2:90:37:e2:bb:c6:4a:00:78:03:4f:41:
0c:91:38:8c:31:bd:8f:ce:42:5c:98:ea:fb:d6:1c:14:71:fc:
fb:18:63:14:58:3b:a1:03:fd:04:d5:53:f4:55:1c:56:cb:d8:
62:c6:06:75:42:95:11:d6:ec:02:12:79:51:d0:04:f1:2a:c3:
56:64:ff:f6:19:cf:61:bb:9a:00:2e:59:be:be:8c:f4:83:12:
30:84:f0:db:9d:6e:1a:d7:64:3a:51:74:9d:32:c7:bd:d7:dc:
ad:ae:49:f8:7f:22:20:57:81:8b:5a:17:a3:38:35:c9:0f:2e:
34:a5:c0:ba:07:3d:6f:cc:a1:f3:e5:c3:25:59:5a:de:c5:be:
ac:10:92:2e:0e:d3:a4:33:32:29:bf:bc:fb:bf:07:88:74:f7:
d4:23:4c:0a:02:85:7b:b9:0a:bf:fa:0a:80:8c:d2:5a:5d:ac:
d7:57:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:16 2026 by rpki-client