Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/OESlpPK-jzIeY_kWKji03hACpHA.asa
File: OESlpPK-jzIeY_kWKji03hACpHA.asa (raw, json)
Hash identifier: NcdspYFEkIzBfyRyPM+LLSVIvHJYNJkjtuc1feLbI+0=
Subject key identifier: 38:44:A5:A4:F2:BE:8F:32:1E:63:F9:16:2A:38:B4:DE:10:02:A4:70
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 019F46DF8E539CB41AEEB9A384B6C9201876
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/OESlpPK-jzIeY_kWKji03hACpHA.asa
Signing time: Thu 09 Jul 2026 12:34:43 +0000
ASPA not before: Thu 09 Jul 2026 12:34:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 48732
Providers: AS: 174
AS: 6939
AS: 16347
AS: 206120
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:df:8e:53:9c:b4:1a:ee:b9:a3:84:b6:c9:20:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Jul 9 12:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3844a5a4f2be8f321e63f9162a38b4de1002a470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:31:e2:ed:66:8e:df:e7:27:28:36:15:bd:
f1:f7:23:63:fb:7a:4b:0f:20:14:54:0c:d7:d7:04:
48:45:05:3c:29:81:df:fe:d4:92:22:58:ad:ef:1d:
ca:fe:e2:20:53:04:ef:bc:ab:0b:fc:3c:5c:fb:b4:
56:68:27:73:46:41:7a:67:db:7e:d7:88:1d:17:6a:
2e:6b:f4:59:04:63:b6:e7:ae:65:df:ab:fc:dd:bb:
23:d7:41:43:65:a9:20:f8:5e:2d:b4:16:4f:11:84:
c8:bf:87:2c:9d:b8:a2:7d:4d:4e:25:af:3d:50:f6:
19:0b:c0:be:e6:4c:9f:12:07:84:3a:96:df:8c:f8:
ca:7f:2d:be:92:2d:14:6a:e3:a2:b7:65:23:0d:20:
23:44:23:c3:a4:4b:00:12:e6:2a:e0:8e:eb:8f:a4:
a0:a9:ba:cc:dd:1d:61:23:82:61:40:c4:5a:4c:ff:
e0:87:11:66:58:4a:2e:1e:45:d1:9c:fc:1a:19:ae:
46:3e:7b:cd:c6:29:47:fc:81:61:4e:82:a9:65:5c:
c3:3b:b0:e4:90:0b:b1:82:11:14:0d:cd:cb:91:84:
7a:b1:20:56:b0:19:3b:13:9e:9b:24:d9:99:c3:0b:
f8:3a:2c:87:93:b7:82:d9:d9:99:68:c3:b0:47:58:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:44:A5:A4:F2:BE:8F:32:1E:63:F9:16:2A:38:B4:DE:10:02:A4:70
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/OESlpPK-jzIeY_kWKji03hACpHA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48732
Signature Algorithm: sha256WithRSAEncryption
3e:3a:be:65:5d:c2:48:5f:2e:ac:8c:29:7d:e2:73:c2:00:0d:
33:30:86:fe:56:b3:ff:24:62:9b:dc:9b:1e:57:6c:c1:6c:13:
ae:53:44:7c:72:e1:b4:cc:2b:78:62:43:4f:57:d4:c6:30:bf:
fb:93:66:4e:90:f9:8c:03:a9:ed:63:29:9e:86:0c:72:5d:e6:
b0:86:0a:0f:db:e6:48:68:16:a1:85:ad:da:9b:3f:be:b2:4b:
c8:97:d3:a3:b1:2d:c9:20:57:5b:e8:c2:4c:9b:f3:11:fc:77:
5d:6f:41:60:9f:d1:25:78:fe:dd:40:11:cb:5a:50:80:5e:d6:
37:fb:11:0b:ed:59:53:98:fa:18:f0:ce:02:d5:35:b9:48:35:
f6:c1:ef:b6:1c:53:e1:68:4a:27:9d:0d:5c:68:28:51:09:b3:
3d:35:5f:ae:61:14:63:0d:7b:68:36:fe:c3:36:6d:e9:73:7f:
4b:d9:ed:26:a2:79:ef:76:b4:4a:c9:b6:5f:0d:98:4c:46:76:
ef:be:b5:77:f6:9e:e4:c3:45:a3:9b:cf:dd:e9:7e:2f:d3:2e:
08:f0:8e:ca:af:78:a4:3b:05:bc:dd:30:16:20:56:9f:ce:aa:
31:1a:83:3d:5b:7f:f1:d0:dd:d4:49:5d:db:c4:d9:68:26:b1:
0e:2d:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:09 2026 by rpki-client