Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/ulKvZr85E6Ggsf5I5RjFVyylS5o.asa
File: ulKvZr85E6Ggsf5I5RjFVyylS5o.asa (raw, json)
Hash identifier: L9bsFn5suMrLvciGh+SS1o4AgkrgIGPNo0xRVc+I4GU=
Subject key identifier: BA:52:AF:66:BF:39:13:A1:A0:B1:FE:48:E5:18:C5:57:2C:A5:4B:9A
Certificate issuer: /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial: 019E167E19A974E2324575AF19F37F33B81D
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/ulKvZr85E6Ggsf5I5RjFVyylS5o.asa
Signing time: Mon 11 May 2026 10:03:43 +0000
ASPA not before: Mon 11 May 2026 10:03:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214060
Providers: AS: 13030
AS: 15623
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:7e:19:a9:74:e2:32:45:75:af:19:f3:7f:33:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Validity
Not Before: May 11 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba52af66bf3913a1a0b1fe48e518c5572ca54b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:95:f5:cf:7c:d8:3e:36:43:c2:bc:cc:1c:
2c:e8:b0:85:46:92:b0:e8:2c:a5:cf:f2:24:ab:e2:
24:9e:94:0d:5b:3c:7e:ce:d7:d4:db:bd:53:39:49:
30:dc:95:14:38:46:d6:3d:77:21:0e:b3:63:5e:7f:
94:ae:53:b9:c1:29:7c:40:a9:fc:7e:3e:b1:98:02:
89:d0:38:73:41:0e:26:69:13:6e:97:08:a7:47:a7:
f7:0f:e9:15:7c:34:f1:73:ee:c8:41:17:fc:90:ff:
0b:bd:d0:bf:24:a7:41:5d:8b:d3:6a:4c:92:e5:a0:
05:70:1f:11:a7:80:a7:60:4d:9c:be:46:47:d0:56:
73:b6:8b:b0:d4:9d:4e:8d:6e:78:c6:bf:56:97:f3:
0b:4d:f3:98:7f:0f:83:09:54:24:4a:92:e8:4e:b1:
87:57:3c:17:e3:d0:d4:00:c4:07:20:88:af:8e:a0:
53:93:63:2f:1e:aa:9a:15:03:8f:76:61:c9:78:83:
c7:a4:af:05:a7:f4:01:63:52:43:06:44:32:f5:5a:
3d:d3:3f:2d:5b:b4:7d:36:41:0a:b0:12:a2:96:a1:
30:20:b1:99:2a:d9:dc:98:7b:42:ff:68:13:70:97:
88:64:30:10:79:45:a2:b6:7e:fc:e6:7f:d1:5e:cf:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:AF:66:BF:39:13:A1:A0:B1:FE:48:E5:18:C5:57:2C:A5:4B:9A
X509v3 Authority Key Identifier:
keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/ulKvZr85E6Ggsf5I5RjFVyylS5o.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214060
Signature Algorithm: sha256WithRSAEncryption
0c:d7:be:ad:7e:1a:30:f4:30:9f:a3:ba:0e:1a:46:38:d1:23:
ec:d9:4d:21:4d:fa:a7:7a:f3:23:06:be:3f:c9:7e:e7:4f:1c:
7b:8e:69:43:c5:50:f9:19:06:08:bc:1d:48:5b:79:b8:29:98:
48:e7:6e:e2:b6:41:10:78:52:fb:8b:49:f4:d6:b0:7b:96:b7:
d9:cb:0d:d4:d1:9f:f3:43:f5:a7:6f:c3:72:f9:27:1c:17:c9:
a2:5a:77:6a:0a:65:06:56:5a:fd:71:ba:61:a2:7e:b4:43:90:
35:fa:db:75:64:c7:43:ab:f0:df:36:0f:0c:6e:1c:71:a3:15:
c0:69:94:1d:51:d4:37:b2:f0:96:12:61:16:77:e7:63:39:83:
fe:30:73:a2:77:e3:77:c2:c8:e3:8e:ac:00:d8:e3:ee:fc:59:
93:2f:e4:77:0b:d4:31:c0:58:2a:aa:6a:e1:29:9c:61:66:9a:
98:2b:7c:63:b6:66:8f:7b:96:c5:6d:6c:f3:61:08:1a:1d:67:
69:c2:95:2a:63:9e:c4:79:8d:9c:78:54:66:70:9e:28:73:ef:
89:06:69:63:e7:88:3d:49:ce:5a:4f:18:85:43:53:37:ba:bc:
d6:98:68:13:04:e2:6c:92:ce:d3:8e:96:e9:d3:54:98:14:3c:
00:1c:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:55 2026 by rpki-client