Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa
File: HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa (raw, json)
Hash identifier: Ern+cmfZwFsU2HhkvPFkDC0xdjwIG4SYe7YBQ5RzsPs=
Subject key identifier: 1C:0B:DC:2A:44:4B:AF:FF:85:5D:C7:EE:D9:75:7B:51:46:94:E4:5F
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019DF417BC2BB09139FAC939AB7D3B505FF6
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa
Signing time: Mon 04 May 2026 17:44:49 +0000
ASPA not before: Mon 04 May 2026 17:44:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 42729
Providers: AS: 1113
AS: 35492
AS: 39837
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:17:bc:2b:b0:91:39:fa:c9:39:ab:7d:3b:50:5f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: May 4 17:44:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c0bdc2a444bafff855dc7eed9757b514694e45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:bc:1b:1e:e4:15:d9:04:7b:76:36:1a:4d:
45:7f:28:27:b7:d2:3a:f2:3b:16:db:e4:51:ec:e2:
89:1c:c0:9d:f4:0d:23:cb:ea:43:a3:b8:43:86:db:
9d:b3:92:92:cb:94:ed:d4:fe:fb:64:99:1f:fa:f8:
c1:07:e5:f9:11:af:28:72:cc:9d:b7:3f:4b:ad:40:
12:e6:2e:62:76:da:dd:1b:d7:61:f5:68:2b:43:2b:
7e:90:05:e8:b4:61:18:ab:e3:ba:90:11:e2:f7:b2:
bd:43:2b:f0:a3:b9:03:0a:10:31:f3:46:62:e2:5f:
4d:5b:ec:22:b6:b4:7a:75:dc:be:84:97:0d:ed:68:
53:a8:7a:3d:01:6a:ab:61:aa:f4:a6:fb:08:3f:65:
04:23:35:24:59:00:27:0f:4c:d8:a1:cd:b2:33:f3:
24:88:da:5f:77:f8:76:f8:3a:b2:35:a0:ce:de:cc:
82:42:fb:f8:b6:b1:71:6e:6b:7a:c6:74:44:38:c9:
53:2d:32:a0:5f:4a:36:fd:af:14:3d:3f:3d:1d:5b:
ca:ae:cc:6a:b9:1d:b6:92:31:75:df:36:87:80:fb:
a0:c8:25:8e:2f:8d:08:fd:3d:0c:fe:f5:c4:9a:96:
ed:e5:34:37:d7:a4:1e:e8:85:6c:82:bd:71:30:7c:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:DC:2A:44:4B:AF:FF:85:5D:C7:EE:D9:75:7B:51:46:94:E4:5F
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/HAvcKkRLr_-FXcfu2XV7UUaU5F8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42729
Signature Algorithm: sha256WithRSAEncryption
81:77:45:a4:d0:ad:8a:00:77:d2:68:98:b4:ce:b5:c1:f5:2a:
73:8f:35:24:1a:2a:80:a5:0c:d9:5c:81:79:21:05:f4:db:d6:
bd:00:7d:f8:45:26:fc:d8:ab:bc:03:f2:5b:6c:66:0e:97:cc:
2f:da:9a:78:a3:73:f8:e3:f4:9f:71:d3:1c:1e:86:2e:13:e7:
3a:bb:82:5b:ca:a2:13:c4:33:47:d1:f8:a5:85:a2:4b:94:56:
8f:1a:d4:7b:e1:87:69:4a:78:90:21:5e:37:89:62:48:22:11:
84:63:06:b5:c7:97:e3:98:91:ee:52:cd:ae:21:d3:15:c8:53:
c5:d4:92:b6:9e:ea:e0:d7:6c:44:f6:df:73:d0:76:a4:9e:bd:
bc:3c:ed:fd:68:9f:b9:a4:19:41:51:4e:7d:91:2f:00:e4:19:
cd:fd:ff:f8:d8:a2:46:8c:7e:6c:4d:df:9f:9d:96:c1:b1:7a:
d8:e8:61:01:a2:be:cc:53:6e:4e:43:59:60:f6:ce:ab:0c:d1:
a7:e3:17:f7:3b:6d:81:3e:9c:c5:d0:59:78:0e:d3:77:24:69:
54:ca:67:4a:ed:4b:83:a3:6d:a3:f4:3b:42:39:4c:d9:cb:cc:
2c:79:d7:b5:18:d5:9e:80:17:4f:55:51:aa:e8:92:cb:ef:c6:
61:35:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:53 2026 by rpki-client