Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa
File: cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa (raw, json)
Hash identifier: nUOqpGWWngcltr0wRPhL84IrP/0KMpPD9+1PbqAf+iM=
Subject key identifier: 70:79:0A:A3:40:C7:F3:42:E5:5A:5E:A6:30:1D:41:93:86:72:4E:E4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 01A0B31B9FA8427758B5C1D41C6F50673EAF
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa
Signing time: Fri 18 Sep 2026 06:02:07 +0000
ASPA not before: Fri 18 Sep 2026 06:02:07 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 35168
Providers: AS: 3216
AS: 6695
AS: 6939
AS: 8631
AS: 9002
AS: 20485
AS: 31133
AS: 35104
AS: 43727
AS: 60280
AS: 60299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:1b:9f:a8:42:77:58:b5:c1:d4:1c:6f:50:67:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Sep 18 06:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70790aa340c7f342e55a5ea6301d419386724ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:7b:bb:1a:22:eb:a3:20:78:1b:52:4f:d8:
c4:e4:c1:2b:a9:3e:42:3f:ce:9a:29:5b:0a:b9:9a:
a8:2b:7c:2a:4f:73:d1:a9:96:da:05:8f:4d:fe:48:
f5:9f:80:83:77:84:8d:d1:91:32:59:a3:a5:a4:a9:
46:93:24:ad:3a:34:ee:a2:e7:9f:a9:4e:a8:4d:3d:
72:04:21:cd:24:8a:30:e8:12:bd:65:4b:fc:a8:0b:
26:0c:40:ef:7c:92:7c:1c:9f:d3:95:f6:cd:e5:64:
d6:90:35:37:88:4a:c9:36:6c:71:8b:65:4c:e4:d9:
45:2c:03:f3:bb:9a:4e:43:22:51:83:2b:13:d1:a9:
14:4f:96:71:af:a2:56:87:9a:7a:ff:62:d9:2b:89:
a5:30:06:3e:a1:2c:b9:d9:2b:3b:62:a5:f3:74:6e:
ac:25:07:8d:8d:fc:96:09:76:ce:a9:0f:17:1f:4d:
c4:19:11:ae:6c:ab:e8:72:2e:21:44:20:8d:a8:df:
67:6b:d0:0b:98:6d:31:3d:24:e0:74:35:af:38:c9:
c7:c7:c0:47:5a:5f:c6:2f:5c:47:c6:24:99:04:f3:
8a:6d:e1:21:3c:f7:8c:24:43:47:f0:6c:f7:82:ec:
41:89:a9:89:45:c8:bb:1d:10:ad:da:e1:82:24:ab:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:79:0A:A3:40:C7:F3:42:E5:5A:5E:A6:30:1D:41:93:86:72:4E:E4
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35168
Signature Algorithm: sha256WithRSAEncryption
27:08:0a:d3:45:be:de:6e:c8:6a:4a:2b:26:b2:02:9f:8d:e9:
a5:aa:8e:4a:b7:46:5a:34:af:16:05:c8:b7:54:a3:c1:f6:39:
78:0d:59:ec:f5:e8:8f:a7:63:72:89:54:6d:41:34:d4:31:c1:
51:b4:39:80:53:12:1f:af:5b:14:b4:50:c3:ab:b5:6f:47:c9:
22:0d:3f:31:be:67:fa:77:60:a8:90:1b:8d:99:09:63:88:bb:
38:00:ec:f3:2f:02:e1:66:b5:f2:6d:36:67:0e:c5:6d:0a:03:
f1:af:26:03:03:30:0f:40:40:dd:d8:30:6d:6c:f0:c6:2a:1f:
92:a4:61:cc:3d:1d:02:c1:8e:54:54:ca:08:5b:cd:12:0b:a4:
d9:3e:6a:af:76:d4:03:10:72:d5:89:55:b5:f9:14:5b:48:9d:
b0:63:07:ea:13:ed:7e:80:7a:9b:9b:24:a8:b9:5e:1a:18:68:
22:4b:89:9d:47:be:c0:3a:86:42:e8:1f:45:02:6e:05:64:b0:
58:3b:91:c5:f2:0e:d6:72:3e:11:be:2e:1d:69:e9:71:6a:f4:
1d:40:eb:0c:ca:d6:ab:c1:5b:0d:9a:a0:f1:27:19:f6:33:5b:
a9:cc:a9:85:2c:36:3f:5d:86:58:4b:11:13:c7:f1:93:34:2a:
18:7e:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:18:04 2026 by rpki-client