Autonomous System Provider Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
File: AS44324.asa (raw, json)
Hash identifier: 2ez8OxyYsld+K0xxbWq18CSvcx/B7ansEeGDCWLIHIE=
Subject key identifier: 68:FA:D9:4A:5B:86:E5:7E:56:24:58:39:A4:F6:6F:05:E8:A5:25:8E
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 25DD9D2A0537CD7AED043DAF319D08CEA66B9A9A
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
Signing time: Tue 28 Apr 2026 13:33:29 +0000
ASPA not before: Tue 28 Apr 2026 13:28:29 +0000
ASPA not after: Tue 27 Apr 2027 13:33:29 +0000
Customer ASID: 44324
Providers: AS: 3204
AS: 3356
AS: 6204
AS: 6939
AS: 7720
AS: 8772
AS: 8849
AS: 18041
AS: 18423
AS: 29632
AS: 33387
AS: 34927
AS: 38074
AS: 47272
AS: 48266
AS: 53356
AS: 53667
AS: 53808
AS: 59105
AS: 134823
AS: 134835
AS: 138997
AS: 140227
AS: 206499
AS: 207841
AS: 216211
AS: 393577
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:dd:9d:2a:05:37:cd:7a:ed:04:3d:af:31:9d:08:ce:a6:6b:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Apr 28 13:28:29 2026 GMT
Not After : Apr 27 13:33:29 2027 GMT
Subject: CN=68FAD94A5B86E57E56245839A4F66F05E8A5258E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:e1:df:b6:90:bf:a2:c8:ff:66:23:6c:a9:
e1:39:81:b4:57:4b:5c:82:ae:a4:0a:fc:2d:bc:a4:
d4:26:db:ec:d9:b1:1d:ff:74:78:59:3c:8f:dc:78:
93:25:45:4b:e3:6d:e8:e7:db:fe:1e:92:37:da:eb:
25:fa:74:83:76:85:ff:73:8c:f7:47:d1:ef:59:f7:
a2:94:f8:d8:ef:d2:ec:59:62:91:9a:df:78:aa:50:
d7:f5:a4:68:9c:91:8b:25:55:ab:bd:e0:89:c7:ec:
2f:66:33:2a:78:37:5b:e4:2a:c7:2d:12:09:ae:bc:
99:8a:6b:61:93:39:a1:9e:82:99:3a:89:a8:6f:63:
33:53:b8:4e:bc:42:83:65:26:cf:6d:2c:a4:ce:4c:
bd:fb:17:fb:77:5c:a5:49:df:ce:fb:e4:c2:51:bd:
2a:b3:0b:56:3c:45:46:60:76:83:9e:5e:1d:2b:dd:
b8:bd:50:30:2b:57:83:63:80:10:94:81:be:a5:2f:
05:d9:31:31:eb:9c:8e:3b:5c:b0:4d:e1:de:9a:00:
53:a1:66:d2:7e:95:57:ec:ec:a2:8a:35:90:b2:a2:
0f:69:03:42:e8:de:ab:f7:07:74:dc:1d:cc:9f:58:
a0:52:5c:00:31:4a:d2:a1:75:cb:c5:3f:6f:d2:c3:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FA:D9:4A:5B:86:E5:7E:56:24:58:39:A4:F6:6F:05:E8:A5:25:8E
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS44324.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44324
Signature Algorithm: sha256WithRSAEncryption
a3:5b:98:37:e8:43:91:7f:bd:51:b7:8b:cb:8d:de:a9:9f:35:
3e:d5:15:50:bd:8e:b4:0f:88:86:0b:63:ae:55:60:ab:f9:89:
14:32:3d:87:3c:cb:63:12:39:67:21:a5:6b:6e:c2:27:91:4e:
84:43:a3:ad:f2:79:1f:45:54:c9:c7:31:3c:52:cf:2b:c1:89:
07:4c:d5:b3:f6:2e:9f:3f:93:16:b3:24:26:38:76:a4:05:36:
77:d8:ca:6f:de:7b:90:0e:d1:d1:31:cb:12:9c:fd:2f:7a:20:
8f:cd:a2:e8:e3:3e:85:5e:d9:65:b7:c2:3f:06:44:f3:6a:9d:
23:e2:69:a4:d0:06:67:47:4a:02:a5:78:19:89:51:cb:13:81:
ba:61:bc:cc:b3:0e:5e:bd:70:6b:96:b1:6d:3c:20:1b:9e:6d:
80:1f:30:1d:4a:d5:9d:95:09:fd:58:db:9f:1e:c4:38:e6:be:
d6:80:b9:e2:f1:37:17:18:48:3e:7b:42:f5:35:a1:79:c6:3f:
af:5a:ba:12:98:11:9d:82:06:18:bb:d7:4a:52:2c:cf:75:d2:
24:c7:2f:40:8d:d0:a1:4f:3c:d6:e7:b8:86:85:89:6b:a4:77:
67:d1:8f:7d:d3:80:b3:8b:c6:9f:7b:4e:7d:58:56:4d:a0:42:
4c:e2:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:09 2026 by rpki-client