Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/Q2cFoF4Oc7BqkByc0qROYAXLL2U.asa
File: Q2cFoF4Oc7BqkByc0qROYAXLL2U.asa (raw, json)
Hash identifier: v+gv2QvEhRG4gH6dJk30Nzx5DNkU0J8LVXCFMAFwYNg=
Subject key identifier: 43:67:05:A0:5E:0E:73:B0:6A:90:1C:9C:D2:A4:4E:60:05:CB:2F:65
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 01A09F21CC78DB0E8B0AEF18ECBE1A4E76A4
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/Q2cFoF4Oc7BqkByc0qROYAXLL2U.asa
Signing time: Mon 14 Sep 2026 08:56:27 +0000
ASPA not before: Mon 14 Sep 2026 08:56:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 48732
Providers: AS: 174
AS: 6939
AS: 16347
AS: 39801
AS: 206120
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:21:cc:78:db:0e:8b:0a:ef:18:ec:be:1a:4e:76:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Sep 14 08:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=436705a05e0e73b06a901c9cd2a44e6005cb2f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:f6:82:98:df:d1:43:df:18:dc:d0:fa:4e:
a4:74:27:ba:d0:48:75:88:c5:3f:f7:bb:3b:af:38:
e2:86:56:98:8e:e1:08:23:e8:43:6d:63:a4:10:b3:
9a:6c:6b:97:72:e2:86:63:ea:12:c0:df:05:11:1b:
17:40:54:f7:58:d8:30:ee:8a:d0:7b:69:1a:c6:60:
77:51:9a:b7:51:53:40:b8:72:ca:d4:d8:e8:b6:27:
2e:47:27:70:e6:0f:fb:78:5b:d8:07:2b:6a:76:28:
c3:5e:b4:95:c9:78:1e:18:9d:d7:e2:6a:be:36:d8:
1f:72:ca:e1:c0:49:ed:93:55:fb:88:be:62:4d:3b:
f5:ad:ee:bb:95:ff:cb:4d:82:83:4d:3c:d2:45:98:
51:b7:b9:b8:67:03:e6:58:85:15:04:8b:7e:13:75:
f1:07:41:04:88:8f:a9:3a:f0:94:69:eb:b3:5a:d4:
07:24:fe:55:dd:ef:13:cc:c2:35:53:2e:27:f8:6a:
66:73:40:ac:00:3d:37:56:d9:43:c5:08:cc:b5:49:
48:f6:4b:c6:cf:41:6a:19:9f:1d:ca:9a:06:3b:1d:
c9:28:ff:42:b5:c4:6d:00:8b:75:44:cf:8e:42:a1:
93:f5:95:11:68:59:cc:0b:0a:e9:4f:a1:8a:38:03:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:05:A0:5E:0E:73:B0:6A:90:1C:9C:D2:A4:4E:60:05:CB:2F:65
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/Q2cFoF4Oc7BqkByc0qROYAXLL2U.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48732
Signature Algorithm: sha256WithRSAEncryption
ab:80:56:99:2a:ca:f7:21:c8:1d:0c:fa:d0:23:ed:7d:fd:d5:
6a:e4:22:26:67:22:ed:30:a6:7e:60:4b:e8:49:5e:1a:07:50:
33:90:9a:e1:e1:fb:74:70:c5:53:12:33:77:90:67:f4:39:5f:
72:2f:92:9e:14:56:d3:63:30:91:c3:32:cf:b1:a2:1f:c4:2b:
4a:fc:9f:b4:44:59:ca:f0:92:59:cf:6c:57:e2:4d:a1:45:f7:
33:7d:2d:25:06:a6:9e:3e:90:9d:e4:28:3a:3b:ec:0a:34:f1:
fe:5f:81:de:e3:df:1a:cd:ed:86:2a:8d:71:d1:9c:12:17:ee:
38:24:99:b1:9c:e6:11:2d:47:59:2c:20:07:b9:7e:a1:c7:50:
d3:bb:86:c6:2b:86:69:7e:cd:67:86:c8:60:4c:6f:e1:62:32:
a5:23:6f:f7:ae:39:bc:eb:f2:35:ab:cb:aa:71:92:d3:fa:61:
41:68:ed:81:c9:0d:95:31:20:c3:76:5b:37:b2:30:e8:c7:60:
d7:76:7a:96:fc:c4:44:d3:2f:54:24:12:a1:17:8e:62:67:58:
72:cb:bc:79:14:6f:ad:c9:a7:a0:4c:71:11:f3:dc:94:8f:d5:
cc:48:ac:f9:42:3e:9d:fe:f4:17:46:67:8b:9e:bd:29:1a:37:
0d:0e:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:40 2026 by rpki-client