Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/Rxb43DOTKVOmi4goggBKGgm61i4.asa
File: Rxb43DOTKVOmi4goggBKGgm61i4.asa (raw, json)
Hash identifier: //HomCPkgLqtqfTXCv3j8181AokJrm6q+KQdYo1h/Z8=
Subject key identifier: 47:16:F8:DC:33:93:29:53:A6:8B:88:28:82:00:4A:1A:09:BA:D6:2E
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019DF2C152FFBBCA7532CEF5F0A5AE8E0559
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/Rxb43DOTKVOmi4goggBKGgm61i4.asa
Signing time: Mon 04 May 2026 11:30:49 +0000
ASPA not before: Mon 04 May 2026 11:30:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 15594
Providers: AS: 6695
AS: 9033
AS: 12306
AS: 13237
AS: 20546
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:c1:52:ff:bb:ca:75:32:ce:f5:f0:a5:ae:8e:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: May 4 11:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4716f8dc33932953a68b882882004a1a09bad62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:bd:c6:bd:a2:b1:15:06:a0:f7:a9:27:55:
82:cc:a9:2d:f5:80:61:3c:b6:4a:7a:24:6e:95:3a:
a7:74:dc:fc:44:fe:b5:f8:5d:73:0c:69:e1:66:3e:
34:f4:a0:70:09:02:25:32:a9:1e:39:a1:98:5a:17:
db:0d:45:02:e5:ed:70:04:16:a1:8b:c4:fa:32:07:
28:6b:4f:53:f1:e5:68:02:fd:14:39:81:6a:f4:9e:
c7:8f:9c:5e:39:d5:b4:e7:fa:95:c3:d1:c0:75:72:
a4:d5:54:4b:40:9b:34:7d:91:84:53:6f:28:c9:e5:
d3:9c:a3:be:3e:13:ac:97:87:1d:a8:ed:9f:1f:d7:
db:c0:ad:2b:1b:78:5e:14:27:ff:82:a8:00:76:19:
76:08:ee:8e:0a:55:f2:a7:e7:eb:32:4d:0c:6d:ec:
92:23:f6:9d:98:f0:e8:ee:4d:dc:aa:7e:5d:87:fa:
37:39:95:e0:59:c1:a0:cf:19:4a:40:e3:d3:91:b9:
64:c5:75:9c:78:8b:23:16:e2:1d:6f:13:55:45:dd:
f4:61:76:26:b3:dd:28:6d:43:12:41:cd:48:27:33:
bd:e0:3a:1a:fd:7d:05:54:c1:3f:64:d5:b5:ca:81:
a3:0b:c4:5e:41:56:6e:e3:57:e0:d5:12:e3:09:66:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:F8:DC:33:93:29:53:A6:8B:88:28:82:00:4A:1A:09:BA:D6:2E
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/Rxb43DOTKVOmi4goggBKGgm61i4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15594
Signature Algorithm: sha256WithRSAEncryption
63:c3:7a:61:8d:63:ce:b5:76:86:c9:8b:fc:c7:4d:ae:a4:e8:
5b:08:db:20:a2:b8:63:70:bc:78:33:e0:d7:20:06:b9:21:1c:
76:07:15:d2:0b:7f:8f:61:ee:4f:cd:de:d6:63:4c:45:d0:60:
95:9e:70:af:56:93:b0:ba:7c:5f:bd:f8:12:f2:23:1f:31:90:
6c:68:5e:c1:a3:2b:45:a5:5c:82:d2:55:0e:f5:e2:6b:4e:65:
b4:36:7c:1e:2b:6c:60:11:bd:a0:35:85:2d:d1:df:c1:42:53:
0a:ca:e5:06:c9:c6:63:a1:61:88:33:55:d7:c9:98:6f:d8:7a:
fe:82:cd:30:95:1c:7c:ec:0e:78:93:61:8d:8b:f4:3f:48:5d:
1c:57:81:0d:a5:a1:45:81:2a:68:e5:08:54:d1:5f:0d:c8:b4:
77:78:95:96:be:29:4f:43:54:34:d8:62:0f:6e:ae:f4:39:20:
58:eb:a4:e5:8d:46:4e:2a:85:ec:5c:5f:3c:57:85:39:e3:2b:
40:01:31:80:2c:5e:3f:1c:0a:d1:f8:c3:a6:e4:7b:66:bb:61:
90:11:15:3d:c2:01:1d:bd:f4:0e:a2:1f:43:c0:3f:ba:11:d3:
64:6a:08:05:5f:eb:cb:30:33:02:4a:2f:4a:f3:23:f7:5c:90:
2d:d0:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:13:07 2026 by rpki-client