Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa
File: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (raw, json)
Hash identifier: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=
Subject key identifier: 2E:DF:89:4B:D8:C5:91:3E:14:81:A3:62:71:7D:2B:6F:35:FA:98:09
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019CF6696A8BF150FA8E47C0EC6E009377EF
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa
Signing time: Mon 16 Mar 2026 11:30:29 +0000
ASPA not before: Mon 16 Mar 2026 11:30:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 33843
Providers: AS: 1299
AS: 3320
AS: 12502
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:69:6a:8b:f1:50:fa:8e:47:c0:ec:6e:00:93:77:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Mar 16 11:30:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2edf894bd8c5913e1481a362717d2b6f35fa9809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:37:0f:08:85:3b:88:a5:fa:69:b6:d5:e5:
0b:f0:ae:3b:11:7f:e1:2b:7f:db:a2:ee:9b:b1:de:
fb:41:05:11:75:8c:e0:3c:a4:ee:b2:a2:ac:3f:7f:
e0:80:54:ed:a1:fe:28:01:43:05:6b:3c:e6:3c:c6:
8e:b6:18:5d:a3:ef:6f:bf:6c:e0:b5:f2:da:5b:1d:
df:af:3c:0e:a6:d1:72:9a:c9:08:01:41:61:3b:2f:
a7:6b:86:d5:b4:6f:12:25:1f:6a:8b:c1:24:00:c5:
51:38:88:b9:49:09:45:bf:39:2f:86:6a:b7:6a:54:
7a:8a:0d:e4:73:fb:d4:f9:c4:5f:29:80:57:8b:11:
50:45:ba:e2:ee:bc:9b:b2:b5:ca:91:6e:26:5e:a6:
c5:81:ed:7e:71:9c:e5:0f:95:89:36:88:50:0e:f9:
71:b2:12:7b:9b:23:89:81:d1:32:98:17:6c:2c:69:
f3:7b:bb:08:a5:31:74:3d:07:3f:89:2d:86:b1:a6:
e0:02:99:f3:75:a5:3b:82:05:c2:3f:3a:e7:b1:db:
f5:ca:86:5f:61:74:0a:4c:8e:91:0a:07:20:13:ca:
b0:89:aa:44:82:6c:1d:61:81:ad:69:41:0f:f6:ec:
47:91:bf:67:2c:b7:cc:1a:34:9d:39:e5:2b:0e:88:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:89:4B:D8:C5:91:3E:14:81:A3:62:71:7D:2B:6F:35:FA:98:09
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33843
Signature Algorithm: sha256WithRSAEncryption
42:fc:15:1f:58:ea:28:33:da:4b:33:98:5a:d7:69:d7:37:b4:
98:15:68:30:3a:72:af:f9:cd:b5:1c:09:e7:4e:45:2f:07:90:
84:77:b8:41:4d:82:d4:2b:77:72:6b:0b:79:f2:c3:8b:1e:c1:
c8:74:4d:79:e4:8c:41:37:df:8a:7d:6e:27:cf:05:18:79:44:
9c:44:0e:17:bb:67:20:76:9c:28:74:0b:3f:74:68:a2:3f:58:
6e:f6:48:e5:7d:f9:b9:15:20:7b:fb:4f:8a:3f:9c:2e:6e:64:
91:24:22:e0:a6:44:bb:85:90:a8:5d:01:8e:5f:dd:49:47:78:
3d:df:eb:5e:e9:16:d4:04:c3:50:94:9d:71:b5:49:5d:55:16:
02:3d:77:a6:25:fd:f5:97:ad:ca:53:73:ad:77:e2:e9:91:a8:
bf:14:28:bc:04:46:b3:bb:a6:78:16:5d:79:1c:71:c4:12:eb:
b3:b6:8f:f0:6e:9a:cc:fe:3a:dc:a1:47:89:eb:87:32:55:30:
e7:fa:62:de:8d:91:5c:3b:31:c4:d0:c0:6e:04:d1:47:1f:24:
08:82:00:29:58:98:6b:ba:e9:3d:fe:0c:99:e9:16:8e:eb:ee:
5b:62:e4:c2:01:4c:4a:64:b7:f7:b0:6f:8f:30:5b:d9:61:9f:
14:5a:e0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:22 2026 by rpki-client