Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa
File: PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa (raw, json)
Hash identifier: upIljczPhg0qz3Pzpmtl5kRlJn9GZ5N1pBXA6jY4G1g=
Subject key identifier: 3F:1A:4A:32:04:3E:7A:22:AF:08:97:94:2B:67:64:7F:68:14:A1:23
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 019D1218848A5C69BCAFA6A40E1AA9221BC0
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa
Signing time: Sat 21 Mar 2026 20:31:29 +0000
ASPA not before: Sat 21 Mar 2026 20:31:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202261
Providers: AS: 13030
AS: 58299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:18:84:8a:5c:69:bc:af:a6:a4:0e:1a:a9:22:1b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Mar 21 20:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f1a4a32043e7a22af0897942b67647f6814a123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:51:44:96:96:ed:b2:eb:8a:c5:f6:b7:3e:
a2:5c:e6:2c:38:bf:41:fb:7a:3a:98:99:a8:04:34:
be:8a:1b:b4:e9:3e:a3:67:1d:68:c7:b4:46:29:55:
4d:44:fc:25:e4:b7:dc:ee:30:eb:8f:37:e8:62:4e:
fe:17:a6:b7:f7:96:ee:80:2b:f6:ce:9c:be:5f:cd:
25:f5:f6:c0:ec:18:1e:07:52:f9:b1:98:9c:c5:56:
2c:11:24:2b:88:28:78:a3:c2:47:e1:6b:ca:5f:7d:
ae:c8:24:ce:66:14:8c:6a:e0:46:a1:25:df:61:bd:
62:10:10:07:18:a7:65:79:53:0e:6d:dc:e7:95:d6:
77:31:13:1f:5b:3a:3b:75:56:4f:ed:92:09:a0:6c:
37:a5:4e:ed:51:fa:3e:d2:96:4e:c3:fd:68:e2:a0:
8b:9f:2d:bb:18:7e:65:3a:14:f9:6f:7b:a7:03:f2:
91:69:86:a9:3e:a2:20:20:85:38:b5:87:92:41:8f:
6a:27:68:77:24:37:cb:f5:d1:0b:bb:d2:e4:0f:0f:
ea:9f:2e:46:2e:a4:12:dc:8d:9e:d9:e7:b6:97:ca:
fa:3f:ae:f2:5a:ea:95:b4:f0:93:6f:0d:98:42:c1:
28:25:f7:87:13:0f:32:ce:aa:0c:7c:1c:e8:04:07:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:4A:32:04:3E:7A:22:AF:08:97:94:2B:67:64:7F:68:14:A1:23
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/PxpKMgQ-eiKvCJeUK2dkf2gUoSM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202261
Signature Algorithm: sha256WithRSAEncryption
04:71:e0:75:5a:c1:71:c2:2b:6d:db:0f:a7:a2:86:d1:86:3b:
56:60:0b:2b:7f:d5:ad:9b:f6:ca:4e:51:26:d6:8f:b6:c6:58:
3e:fe:e0:1f:ce:c2:d8:00:10:23:72:05:c2:4b:cf:47:e4:67:
40:1f:02:19:e5:57:3c:c1:35:89:67:c3:80:51:f5:13:10:8a:
5b:c9:cb:27:bb:65:18:1a:ee:4f:17:d1:3b:56:b1:eb:ed:ea:
b0:25:29:e1:82:92:08:fc:c1:22:12:fc:20:45:70:49:45:71:
e6:6c:0c:da:57:ab:c5:27:1e:49:22:e2:e6:82:1b:4b:83:5e:
56:68:17:34:d0:cb:d2:1c:24:ac:13:15:3f:45:94:23:86:ff:
11:18:e9:f0:93:7a:bf:64:51:c9:fe:51:b7:37:83:7f:f6:d2:
5c:b9:f2:2e:13:a3:43:f3:f7:d9:20:de:7c:ba:04:c8:ca:05:
59:ae:01:e4:ee:7f:1b:f6:d0:36:71:2b:47:4c:d2:cc:9b:9d:
0c:22:15:a4:f1:6d:ad:cc:05:ec:1f:ee:95:36:75:e3:6b:06:
68:b0:42:7d:10:1c:ab:6a:60:24:4e:82:26:32:d5:88:c5:fe:
f6:fb:d3:b4:f6:cc:08:95:94:74:df:a4:df:1a:53:e9:a7:9c:
5a:c3:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:43 2026 by rpki-client