Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/HrnyfGcv9Sfocm0wEGAfceFq9V8.asa
File: HrnyfGcv9Sfocm0wEGAfceFq9V8.asa (raw, json)
Hash identifier: SGcSiNA09hzLvNRrjOccbxyQktZ5lS+27BWdLxQPqhM=
Subject key identifier: 1E:B9:F2:7C:67:2F:F5:27:E8:72:6D:30:10:60:1F:71:E1:6A:F5:5F
Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172
Certificate serial: 019F19012047EA95BE4941E67DD211D6C9A7
Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/HrnyfGcv9Sfocm0wEGAfceFq9V8.asa
Signing time: Tue 30 Jun 2026 14:48:51 +0000
ASPA not before: Tue 30 Jun 2026 14:48:51 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199530
Providers: AS: 49070
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:20:47:ea:95:be:49:41:e6:7d:d2:11:d6:c9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172
Validity
Not Before: Jun 30 14:48:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eb9f27c672ff527e8726d3010601f71e16af55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8e:bc:e4:7c:6e:fe:6e:72:9e:cf:f7:3f:64:
1d:f4:ec:26:a0:da:11:00:e7:95:7d:33:df:c7:d7:
69:d5:5b:61:4b:54:f0:35:f4:90:da:4a:8d:da:4e:
f7:bb:d4:32:d8:ce:b2:58:4d:1d:81:83:56:2c:98:
4e:d0:e5:92:96:56:52:44:d0:27:f3:75:7a:b3:5f:
6d:3e:84:05:0b:12:ab:cd:c1:d3:d0:bc:08:4d:fe:
5e:f0:15:2d:9b:db:a1:b6:d9:a9:9d:54:df:77:6d:
0a:76:d1:a6:d2:1c:f5:40:2c:98:dd:5d:b9:15:32:
dd:17:0c:3e:c5:fa:d2:7b:be:01:b6:45:04:ba:3b:
bd:dd:cc:ad:13:6e:d8:b9:31:37:c2:bf:87:8e:57:
5a:a2:08:41:28:1e:5d:b1:88:74:fe:7f:55:3a:a9:
24:31:38:84:f8:97:45:8a:6d:28:e5:5c:68:a3:e8:
80:8c:5d:c1:66:7c:02:d4:85:6a:fd:41:86:e7:be:
af:f6:0d:b9:08:5b:73:d6:a4:3a:5f:b4:db:01:af:
7d:06:32:42:fb:94:bf:f5:40:60:82:55:c7:c3:96:
6a:ab:fb:6d:58:f2:3a:9c:77:9f:43:98:d0:f4:51:
f0:f8:f1:00:3e:b6:d6:c4:59:d6:58:a0:8a:93:61:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:F2:7C:67:2F:F5:27:E8:72:6D:30:10:60:1F:71:E1:6A:F5:5F
X509v3 Authority Key Identifier:
keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/HrnyfGcv9Sfocm0wEGAfceFq9V8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199530
Signature Algorithm: sha256WithRSAEncryption
43:e1:2d:09:95:f5:cc:05:06:b5:dc:f1:1b:4f:25:39:96:4c:
bd:f6:02:e0:d7:27:36:af:12:70:3a:9c:d7:8a:bc:54:1d:a4:
f5:84:80:21:87:32:e3:d5:35:a8:68:19:24:0e:fb:1d:ca:03:
10:f9:8d:ef:e6:d7:bc:7f:94:4a:45:a1:d7:5e:e1:ce:3f:de:
bb:c9:fd:29:a0:63:18:61:c2:ac:cf:d2:ae:8a:f9:5d:83:81:
8b:3b:2e:97:30:a0:cd:e3:83:00:2c:90:d9:6b:8a:27:5b:fb:
d7:90:bb:d2:d3:2e:cd:0a:9a:6c:71:2d:64:e4:5a:ac:26:82:
ff:d9:4c:70:df:e9:81:41:21:ab:1d:07:67:52:90:93:1e:23:
f7:9c:cf:9b:52:aa:bf:2f:fc:dc:c8:e8:6a:c3:28:d3:20:2a:
96:47:a6:fb:9f:f5:09:b1:2e:19:9d:0b:ff:98:9e:c6:19:25:
eb:64:3b:42:47:cd:9a:d2:8a:f1:0c:8b:ae:e9:83:c1:5c:8d:
f7:8c:bb:da:8e:43:a4:16:80:bb:43:a7:8b:a1:f8:1d:ab:cd:
6c:30:44:e8:d7:7e:e6:25:97:01:de:8e:26:b4:42:79:26:27:
ce:86:c3:2d:c8:7e:84:a6:0e:6d:1a:96:50:4f:2c:01:84:5a:
10:7e:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:12 2026 by rpki-client