Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/25Etx6_KQUT1qjkjo3vSdgOyHEA.asa
File: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (raw, json)
Hash identifier: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=
Subject key identifier: DB:91:2D:C7:AF:CA:41:44:F5:AA:39:23:A3:7B:D2:76:03:B2:1C:40
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019F1901224F6F0E8F24A859B6AC47BCF6E7
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/25Etx6_KQUT1qjkjo3vSdgOyHEA.asa
Signing time: Tue 30 Jun 2026 14:48:52 +0000
ASPA not before: Tue 30 Jun 2026 14:48:52 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212001
Providers: AS: 6939
AS: 45735
AS: 47311
AS: 58495
AS: 152368
AS: 152394
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:22:4f:6f:0e:8f:24:a8:59:b6:ac:47:bc:f6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Jun 30 14:48:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db912dc7afca4144f5aa3923a37bd27603b21c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:05:86:6d:64:be:80:82:3a:e4:db:7b:6f:
cb:f6:1f:c7:33:be:5f:22:ef:2d:fb:d0:e7:3d:82:
9f:c4:d1:56:43:bd:31:a3:53:e7:83:9b:09:17:e6:
4e:be:67:71:08:3c:29:53:64:ab:07:03:b8:1d:f5:
96:3f:5c:eb:2d:4e:ee:65:52:95:49:09:20:4d:1c:
89:19:92:e2:92:7b:ba:58:21:1d:4c:a1:9f:03:f3:
83:8c:bb:42:08:dd:f4:c3:f9:36:9f:a5:b7:86:82:
ac:eb:bb:46:2a:f2:02:ea:ce:02:41:e1:34:85:bc:
ed:28:d6:1e:b2:d1:fb:8c:fb:c2:73:c6:b2:88:4f:
e2:d1:47:cb:2b:ec:a1:ae:0f:ac:89:fd:ad:b6:87:
a6:56:0a:b3:44:28:93:09:5d:4c:33:7b:bb:90:35:
ec:cc:f5:08:8f:d5:77:b0:9a:50:a5:cf:6f:a3:7e:
1b:9a:d0:3a:38:e5:cb:36:c9:de:aa:ec:b9:48:58:
ad:0d:6f:a8:89:d0:66:f7:29:34:06:85:99:44:de:
69:36:8d:a4:71:2d:dc:b0:29:01:0e:eb:21:cd:4e:
d5:18:10:43:9c:97:26:c2:43:dd:73:5e:aa:a8:d0:
fe:17:04:b0:f2:e8:42:89:ef:47:e5:74:8e:88:38:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:2D:C7:AF:CA:41:44:F5:AA:39:23:A3:7B:D2:76:03:B2:1C:40
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/25Etx6_KQUT1qjkjo3vSdgOyHEA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212001
Signature Algorithm: sha256WithRSAEncryption
11:91:3d:99:aa:d5:c1:61:ee:5b:d3:17:2d:bb:a8:e7:f2:68:
39:87:75:03:cc:2a:15:4d:73:b7:42:5d:45:1e:28:a0:fc:29:
a6:b9:40:83:e1:60:5b:46:a1:de:8d:4b:eb:16:f9:90:c9:7b:
1d:62:49:e9:4f:55:45:c5:60:6d:9d:f0:3e:91:a6:2a:c0:2e:
78:eb:d3:e9:ca:7d:06:86:97:cb:f1:45:e7:0c:e0:1c:37:d4:
27:c4:99:fa:e4:cd:7c:48:18:73:fd:89:07:cd:30:b2:4b:88:
84:86:94:81:dd:62:92:2a:5a:ec:67:ed:ab:18:3b:1e:4d:b7:
3c:47:97:52:1a:a9:c8:07:d3:11:62:c5:93:22:17:0f:12:6d:
41:05:8c:71:91:d9:ef:a2:f3:0c:21:64:e1:cf:74:1e:0f:28:
ab:03:4e:ef:66:8f:a6:e3:72:ee:77:42:d8:4b:2b:73:5b:d3:
e3:39:d6:87:7a:3c:0d:68:4e:85:b2:80:64:df:96:54:d2:95:
dc:06:e2:d8:de:fb:07:36:b9:2b:7c:20:2f:3c:c9:ed:78:1a:
40:ed:2f:61:27:11:97:31:22:ff:6e:0a:ff:e3:78:c8:5d:32:
f7:0e:6e:2e:83:2b:7d:e4:38:33:17:ff:33:50:a4:a7:8d:07:
69:24:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:52 2026 by rpki-client