Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/jSutCugEdF2rS6QxHHGZRxPxhsI.asa
File: jSutCugEdF2rS6QxHHGZRxPxhsI.asa (raw, json)
Hash identifier: zjJ0AX5FLYwkWoWkgoUko8ALZitnQgcsownFmhLIYFw=
Subject key identifier: 8D:2B:AD:0A:E8:04:74:5D:AB:4B:A4:31:1C:71:99:47:13:F1:86:C2
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019CFDB7D6C56F13AE55E2D2140828A18D4E
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/jSutCugEdF2rS6QxHHGZRxPxhsI.asa
Signing time: Tue 17 Mar 2026 21:33:29 +0000
ASPA not before: Tue 17 Mar 2026 21:33:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29484
Providers: AS: 680
AS: 12329
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:b7:d6:c5:6f:13:ae:55:e2:d2:14:08:28:a1:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Mar 17 21:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d2bad0ae804745dab4ba4311c71994713f186c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:f1:f7:8c:d6:4f:1f:2a:aa:ca:a6:39:88:
a3:40:86:73:99:47:31:6b:f2:62:d4:b7:46:5b:75:
2b:4e:71:b3:75:fe:86:76:04:c5:6e:a2:b9:fa:89:
01:6f:b8:42:6d:a1:c5:dc:2d:20:f9:58:95:1b:bb:
69:d3:8a:7a:41:75:97:24:bc:9d:b5:58:cc:2b:ee:
8a:06:d4:b0:bc:f9:df:f5:f8:2f:5d:42:b4:e1:83:
06:2c:46:2e:da:80:93:11:75:d9:78:56:4d:23:5e:
ee:ba:7d:d3:d6:04:7c:65:af:4d:fb:e8:39:47:a6:
dc:83:49:32:ec:3e:b3:d6:53:5c:cb:2a:37:16:c8:
a1:20:54:85:0a:30:3a:1f:cc:a7:37:d0:a6:7f:68:
47:33:6d:dd:92:32:a3:ac:09:b8:54:05:83:79:50:
cf:bd:f2:74:a3:1f:f4:bc:e6:35:80:ea:5b:54:4f:
23:67:d7:6a:c2:42:9e:b1:94:a9:37:2f:d2:b2:cb:
c7:c0:b6:fb:7f:94:df:80:7c:d6:8f:b6:b2:8d:96:
92:88:9a:6e:e3:10:92:62:40:53:24:37:e6:51:d0:
87:5c:2f:fc:6d:6e:f0:08:a0:d9:0b:c6:2b:3a:90:
dc:3d:cc:4a:15:7f:8c:21:94:f9:fa:b2:54:90:94:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:AD:0A:E8:04:74:5D:AB:4B:A4:31:1C:71:99:47:13:F1:86:C2
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/jSutCugEdF2rS6QxHHGZRxPxhsI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29484
Signature Algorithm: sha256WithRSAEncryption
52:b9:cf:9f:46:0f:be:0f:48:3a:77:44:6f:ac:a9:24:a6:28:
00:38:b4:e5:79:e3:5e:4e:a0:94:6c:57:50:33:e0:a2:30:3e:
c2:5f:49:af:94:08:0d:80:03:5a:ab:0c:58:e7:74:5e:dc:fd:
9e:11:87:60:76:ec:4b:73:2b:e4:33:8d:59:2d:5a:97:db:5e:
f1:38:df:8d:5b:0e:f8:16:d7:1e:7b:08:98:a2:b0:4a:d0:bc:
84:77:c6:64:bf:cb:19:48:4b:31:7c:ba:2c:36:e3:46:5e:21:
33:91:eb:a9:bf:a2:be:ce:e7:aa:46:30:ff:d1:34:60:64:92:
c8:1d:18:cf:e3:df:4d:ec:a7:93:a9:20:a7:9b:80:f9:d3:eb:
d1:64:72:5a:b6:c8:0a:42:81:d0:ad:35:df:2d:92:bb:a5:49:
c1:71:a7:16:b0:c5:cd:8a:0c:31:b1:59:0b:bf:c3:bd:76:c2:
4d:9b:f7:40:0c:91:e0:81:ba:d4:76:c6:8a:b6:a0:97:1b:c0:
55:e3:90:b4:bc:c1:9a:6e:d6:27:90:44:1c:c7:e3:95:a2:a2:
7c:67:6b:ac:8c:0c:f3:5e:b1:64:2d:80:fc:69:41:3b:c0:4c:
43:a8:22:03:18:90:45:8b:0e:4c:32:48:a9:3f:27:ce:74:ff:
6a:23:fd:8d
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZz9t9bFbxOuVeLSFAgooY1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGRkYWE3NDk0ZDY5YmExY2FjYjQ1N2VmOTFiNmRjZDIy
ZThkZDkwHhcNMjYwMzE3MjEzMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDJiYWQwYWU4MDQ3NDVkYWI0YmE0MzExYzcxOTk0NzEzZjE4NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Xx94zWTx8qqsqmOYijQIZzmUcx
a/Ji1LdGW3UrTnGzdf6GdgTFbqK5+okBb7hCbaHF3C0g+ViVG7tp04p6QXWXJLyd
tVjMK+6KBtSwvPnf9fgvXUK04YMGLEYu2oCTEXXZeFZNI17uun3T1gR8Za9N++g5
R6bcg0ky7D6z1lNcyyo3FsihIFSFCjA6H8ynN9Cmf2hHM23dkjKjrAm4VAWDeVDP
vfJ0ox/0vOY1gOpbVE8jZ9dqwkKesZSpNy/SssvHwLb7f5TfgHzWj7ayjZaSiJpu
4xCSYkBTJDfmUdCHXC/8bW7wCKDZC8YrOpDcPcxKFX+MIZT5+rJUkJTYZQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFI0rrQroBHRdq0ukMRxxmUcT8YbCMB8GA1UdIwQY
MBaAFKMN2qdJTWm6HKy0V++RttzSLo3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTIt
NjU0NGEyYjk5ODE3LzEvalN1dEN1Z0VkRjJyUzZReEhIR1pSeFB4aHNJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NjExMmMtZjE3ZS00ZGMxLWJhNTItNjU0NGEyYjk5ODE3
LzEvb3czYXAwbE5hYm9jckxSWDc1RzIzTkl1amRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnMsMA0GCSqGSIb3
DQEBCwUAA4IBAQBSuc+fRg++D0g6d0RvrKkkpigAOLTleeNeTqCUbFdQM+CiMD7C
X0mvlAgNgANaqwxY53Re3P2eEYdgduxLcyvkM41ZLVqX217xON+NWw74FtceewiY
orBK0LyEd8Zkv8sZSEsxfLosNuNGXiEzkeupv6K+zueqRjD/0TRgZJLIHRjP499N
7KeTqSCnm4D50+vRZHJatsgKQoHQrTXfLZK7pUnBcacWsMXNigwxsVkLv8O9dsJN
m/dADJHggbrUdsaKtqCXG8BV45C0vMGabtYnkEQcx+OVoqJ8Z2usjAzzXrFkLYD8
aUE7wExDqCIDGJBFiw5MMkipPyfOdP9qI/2N
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:44 2026 by rpki-client