Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/21UC4Dg27lTwnVnoP-1hWx8Jrac.asa
File: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (raw, json)
Hash identifier: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=
Subject key identifier: DB:55:02:E0:38:36:EE:54:F0:9D:59:E8:3F:ED:61:5B:1F:09:AD:A7
Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial: 019F32DBA06D21E392402D8BFBA174E3B216
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/21UC4Dg27lTwnVnoP-1hWx8Jrac.asa
Signing time: Sun 05 Jul 2026 15:18:01 +0000
ASPA not before: Sun 05 Jul 2026 15:18:01 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 49673
Providers: AS: 3216
AS: 12389
AS: 20485
AS: 20764
AS: 31133
AS: 31500
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:db:a0:6d:21:e3:92:40:2d:8b:fb:a1:74:e3:b2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Validity
Not Before: Jul 5 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db5502e03836ee54f09d59e83fed615b1f09ada7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:1e:17:4e:33:14:60:3e:70:54:45:1d:f7:
fc:15:9a:96:ad:71:f4:b2:e8:a2:99:c6:6d:d5:ec:
ae:a6:a4:09:63:ae:c8:bb:74:64:bd:27:ca:fb:57:
d4:8c:b4:6c:55:0f:59:3f:57:bf:4d:c9:38:4c:f5:
15:ba:9f:77:7a:c7:00:b7:30:c0:1c:18:14:5d:5f:
22:61:55:ca:aa:bb:db:d0:77:b1:10:34:68:4a:48:
c7:a1:13:cd:dc:21:40:e4:37:78:60:97:48:58:4b:
40:bf:3f:b2:8b:9d:56:71:ff:05:ea:86:ca:b4:9c:
a3:1f:bc:da:c5:13:ba:46:8a:d0:99:18:42:1c:c0:
f4:0c:33:d7:f3:1d:64:66:54:69:24:6d:06:f1:b4:
1f:03:42:6e:2b:55:d2:7b:ae:88:b3:cf:25:7e:04:
3d:ff:2f:fc:bc:79:8c:d8:25:97:c2:6b:7c:1f:27:
92:83:e9:2f:9f:06:65:88:3e:d4:80:ad:9d:9c:78:
60:bc:b1:66:1d:d0:a8:0d:a2:e2:41:df:77:ee:07:
8c:fc:7b:cd:a1:c1:55:ac:38:d2:76:d2:ff:3f:e9:
b0:3c:12:d7:17:ad:31:4e:0d:57:9b:7a:f4:8c:80:
26:a9:95:9f:30:93:68:b0:74:18:64:18:b3:1b:24:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:55:02:E0:38:36:EE:54:F0:9D:59:E8:3F:ED:61:5B:1F:09:AD:A7
X509v3 Authority Key Identifier:
keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/21UC4Dg27lTwnVnoP-1hWx8Jrac.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49673
Signature Algorithm: sha256WithRSAEncryption
8c:fe:fc:7b:cd:47:2f:0f:3f:37:ae:17:df:84:52:a1:9e:3d:
62:91:6a:ac:f6:5f:41:fd:5b:33:30:3a:13:5b:78:67:23:f1:
fb:d5:a7:99:2a:7c:98:8f:b5:ee:a8:c5:b4:74:73:c4:56:bc:
18:ee:26:ae:a1:c5:2c:f2:99:b5:1c:1e:4f:ba:d4:1a:a2:95:
77:48:6d:b6:97:58:6f:8b:14:73:85:0f:48:c0:f3:d9:be:f8:
2a:a2:68:0d:b7:04:cb:5a:c4:e6:2c:4f:d1:a8:06:f9:46:64:
6c:7a:c4:b3:b9:13:8c:4c:b4:6f:29:cb:7b:f5:55:bb:38:9c:
ff:3a:0e:55:d0:61:bd:58:c5:08:ee:6d:b6:e0:0c:1a:4e:6d:
85:eb:d6:68:a3:9f:25:73:7a:85:88:06:6e:3f:ac:2a:c7:4e:
8d:ec:8c:25:89:31:9b:90:2f:26:c0:fd:d6:cc:ac:ff:a6:f3:
51:63:44:e4:68:b7:e6:5d:c6:6c:78:06:f9:8c:c4:37:ba:fc:
5f:af:27:b3:49:86:a8:ec:f4:ad:ab:a2:0b:6a:fb:92:27:4e:
72:c1:9b:c6:99:00:40:1d:2f:53:0e:3e:0c:b9:0c:d0:dc:5c:
97:0b:55:45:a2:6c:ad:d5:cd:66:a5:38:cd:60:8c:aa:30:98:
a1:33:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:06 2026 by rpki-client