Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/59LkX4aXBLUMkLAwAs9-rWbuAm8.asa
File: 59LkX4aXBLUMkLAwAs9-rWbuAm8.asa (raw, json)
Hash identifier: Z213VKCdnM5+8ee00xrFiP1MjFtseCc8292AQptoZLA=
Subject key identifier: E7:D2:E4:5F:86:97:04:B5:0C:90:B0:30:02:CF:7E:AD:66:EE:02:6F
Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Certificate serial: 019D1B9EB3ECF10A2570AF63690AD875F000
Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/59LkX4aXBLUMkLAwAs9-rWbuAm8.asa
Signing time: Mon 23 Mar 2026 16:54:38 +0000
ASPA not before: Mon 23 Mar 2026 16:54:38 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 210457
Providers: AS: 1
AS: 174
AS: 1299
AS: 2914
AS: 3257
AS: 3320
AS: 3356
AS: 3491
AS: 5405
AS: 5511
AS: 6453
AS: 6762
AS: 6939
AS: 9002
AS: 49612
AS: 52041
AS: 58212
AS: 59692
AS: 199524
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:9e:b3:ec:f1:0a:25:70:af:63:69:0a:d8:75:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa
Validity
Not Before: Mar 23 16:54:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7d2e45f869704b50c90b03002cf7ead66ee026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:75:72:07:d9:5e:03:38:5d:c7:8c:41:2a:
55:a0:f0:01:0c:a9:5c:8e:ae:c4:c5:4c:a2:d9:44:
af:94:be:ef:db:b3:e3:33:35:5e:10:84:0a:e5:9d:
4d:f7:ed:33:50:9a:9a:e2:5f:35:64:a9:0e:ed:a7:
e4:31:1b:06:ba:d7:fb:be:82:44:8b:f0:d1:7e:a2:
19:34:58:81:35:9f:3e:2f:45:9d:03:ca:06:57:f0:
d2:e6:f8:3c:84:b3:ca:27:c0:b7:38:3d:b2:06:8a:
80:f7:23:d4:eb:ff:45:cd:90:67:1c:d0:c5:87:0b:
3f:7b:54:ba:53:22:e8:cf:4e:6b:19:7c:37:c4:06:
51:24:d9:64:b8:19:e4:30:74:6e:2a:52:d1:65:ea:
4c:6a:14:83:b1:d0:32:57:5f:d3:89:6c:87:a2:c0:
d1:bf:6a:cf:c8:d5:19:d2:14:65:da:c1:66:4d:d9:
81:41:74:5f:0f:3d:ff:c4:6c:16:cd:18:52:31:b4:
71:27:13:e8:45:a6:28:74:dd:7c:48:95:1a:7c:9a:
d2:21:62:86:80:ad:88:a7:df:07:d8:5b:d2:fc:34:
20:79:83:42:26:46:86:3c:c4:39:91:73:37:76:61:
a6:7c:e6:1e:b7:ef:ef:62:66:17:5d:ec:5b:57:d5:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:E4:5F:86:97:04:B5:0C:90:B0:30:02:CF:7E:AD:66:EE:02:6F
X509v3 Authority Key Identifier:
keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/59LkX4aXBLUMkLAwAs9-rWbuAm8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210457
Signature Algorithm: sha256WithRSAEncryption
43:92:6b:6a:12:59:bc:69:9d:d1:0a:d4:94:92:ea:be:26:5d:
b5:fa:80:43:01:a3:0a:70:e5:5d:ea:76:bb:a6:f3:b0:c9:fe:
2c:6a:44:14:63:f8:b7:02:31:3a:35:c7:e1:06:1a:e9:bd:db:
6e:d5:f1:36:fb:2d:a7:bf:0e:e7:a5:b0:4c:3d:5f:c6:6a:ac:
cb:95:61:4b:ba:bd:c8:16:51:b2:24:03:69:e0:1f:4b:a0:38:
82:aa:d0:85:17:97:81:4c:8c:60:5c:b9:a8:78:41:9a:c6:7d:
3f:c8:08:05:d8:47:9c:4f:08:1e:f3:51:2a:1c:ef:a6:71:c5:
79:0c:e9:34:de:06:1b:ff:f7:5a:1b:09:29:3b:3e:f2:98:71:
7a:01:33:e7:25:3c:df:3d:9a:12:94:31:b6:ec:93:76:0f:6d:
3b:84:25:75:27:e4:2c:76:b4:04:d0:c0:74:8e:2f:83:55:d5:
54:c6:ac:00:01:ed:df:b0:57:8c:2e:0c:50:dd:f8:39:bd:86:
27:c0:5e:17:05:53:ef:98:df:79:27:df:ef:c5:37:6f:9a:6e:
b3:55:61:66:ec:28:67:6d:01:72:0c:08:77:3b:8f:aa:6e:4f:
52:fb:5e:6b:9d:1d:c0:39:02:82:65:0b:d4:48:82:5e:77:24:
37:3f:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:24 2026 by rpki-client