Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/ylydL3qXftFW7Uij6tIt41OMzD8.asa
File: ylydL3qXftFW7Uij6tIt41OMzD8.asa (raw, json)
Hash identifier: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=
Subject key identifier: CA:5C:9D:2F:7A:97:7E:D1:56:ED:48:A3:EA:D2:2D:E3:53:8C:CC:3F
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019DFD151B4B293421649C6112D371D87630
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/ylydL3qXftFW7Uij6tIt41OMzD8.asa
Signing time: Wed 06 May 2026 11:38:32 +0000
ASPA not before: Wed 06 May 2026 11:38:32 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 35168
Providers: AS: 3216
AS: 6695
AS: 6939
AS: 8631
AS: 9002
AS: 20485
AS: 31133
AS: 35104
AS: 43727
AS: 60299
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:15:1b:4b:29:34:21:64:9c:61:12:d3:71:d8:76:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: May 6 11:38:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca5c9d2f7a977ed156ed48a3ead22de3538ccc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:d0:15:6a:4d:38:24:93:c6:6d:53:79:13:
bf:75:b0:9e:cf:40:f0:7b:7e:75:a0:15:03:2b:4a:
de:1b:32:51:d4:d7:f0:de:37:82:17:93:aa:7d:3f:
1f:b6:50:ca:88:7d:75:8b:9f:10:68:1d:e5:d9:5f:
40:61:e2:ce:11:3b:42:5d:d0:0e:6c:db:51:3d:ca:
99:14:09:77:ce:98:d9:22:c8:58:25:19:a2:a3:dd:
48:b7:46:6e:f3:07:26:32:94:fa:72:ff:9a:4f:65:
bd:a2:12:1c:04:0e:76:66:d0:81:98:5c:6c:6a:8d:
03:5b:8c:f5:e8:e9:30:a7:74:cc:5c:2d:71:05:01:
30:18:71:c7:d3:4c:9e:b7:3c:a5:d0:de:a7:73:d2:
f8:14:d0:71:f5:e6:26:a5:5a:8b:0c:ef:ec:69:1c:
08:ae:9b:37:c6:87:6d:3b:47:30:89:75:a7:78:21:
60:0a:ab:51:c3:0b:ba:56:82:75:e1:9d:81:31:6c:
13:2f:98:df:45:fe:2a:7e:e1:a1:b2:ae:dc:26:01:
69:c5:a3:f2:3d:d4:86:17:ed:eb:8c:58:9b:12:02:
8c:13:74:c4:12:76:9f:38:03:b9:9e:6f:9d:85:d8:
af:59:2c:b8:64:4b:cf:86:69:9e:52:6d:21:fd:bc:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:9D:2F:7A:97:7E:D1:56:ED:48:A3:EA:D2:2D:E3:53:8C:CC:3F
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/ylydL3qXftFW7Uij6tIt41OMzD8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35168
Signature Algorithm: sha256WithRSAEncryption
96:51:59:57:a8:01:d1:68:f4:ff:d9:51:49:79:b2:7d:aa:2d:
02:9c:a8:f5:02:7d:0f:61:27:12:98:89:7d:df:f9:e4:83:7a:
ef:93:86:d6:67:08:b4:54:42:c5:69:ee:cb:10:56:8a:5b:81:
89:76:51:90:08:f7:bc:e9:0c:4d:da:65:65:b5:a7:6b:69:74:
ae:53:d0:67:41:79:36:54:b1:3b:56:f7:2a:45:bc:53:b2:76:
91:0c:e9:df:01:71:d4:89:f8:6b:fb:5e:0f:b1:27:2e:68:24:
b4:c5:e0:52:af:a0:35:2d:6c:6b:b4:29:fc:cd:03:e6:91:95:
f1:d2:7b:98:bf:3a:d8:12:7c:df:93:5c:21:96:2e:ae:66:a0:
0e:0b:18:52:04:b2:cb:96:65:e6:5d:bf:54:64:35:94:4c:f2:
c0:b7:6a:bc:30:82:c7:8a:18:7f:14:80:ce:6f:ab:c5:05:66:
95:bd:f1:30:c8:8b:9e:c9:05:f9:4b:bb:70:c6:cf:8a:88:65:
1d:8f:fc:88:83:f9:06:76:ec:7a:da:a2:8e:4a:7a:33:7a:8f:
da:53:57:72:11:ce:b4:aa:61:ec:3b:c5:be:1c:25:ff:6f:ba:
cc:7c:5e:fa:fa:ea:5d:4a:96:71:27:2d:d5:b3:86:de:7e:d3:
8c:66:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:23 2026 by rpki-client