Autonomous System Provider Authorization
$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/AS219418.asa
File: AS219418.asa (raw, json)
Hash identifier: PiKx0h9wCnHnrTngq1cjJXYHaYtLXx9ibb8Wpi+TW8Q=
Subject key identifier: ED:FE:AC:80:08:5D:7A:FC:AC:B2:F5:74:31:D6:CB:23:A6:EC:80:B6
Certificate issuer: /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial: 35CAF94DCF5DFE8E722153ADEEFCB03CA3BEA2D5
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access: rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
Signing time: Sat 08 Aug 2026 19:35:39 +0000
ASPA not before: Sat 08 Aug 2026 19:30:39 +0000
ASPA not after: Sat 07 Aug 2027 19:35:39 +0000
Customer ASID: 219418
Providers: AS: 34927
AS: 47272
AS: 197324
AS: 204464
AS: 212635
AS: 213449
AS: 215147
AS: 215685
Validation: OK
Signature path: rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 20:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ca:f9:4d:cf:5d:fe:8e:72:21:53:ad:ee:fc:b0:3c:a3:be:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
Validity
Not Before: Aug 8 19:30:39 2026 GMT
Not After : Aug 7 19:35:39 2027 GMT
Subject: CN=EDFEAC80085D7AFCACB2F57431D6CB23A6EC80B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:87:8d:71:26:38:16:07:96:54:62:28:bf:
44:17:3b:7e:43:c2:50:41:45:00:7a:9a:e3:bb:73:
7b:4a:17:dc:15:2f:18:4e:56:59:71:ba:74:5d:41:
74:4f:6c:f4:73:70:b3:a7:46:e5:d0:8b:92:57:fc:
1c:51:eb:b6:ec:f1:44:a6:69:c1:f5:fe:65:71:0d:
2a:8b:15:1a:58:8c:1d:7a:e4:19:cd:78:93:04:0d:
e1:92:d6:12:7e:3f:86:23:bd:7a:e1:ae:fa:c7:0c:
87:68:db:42:7f:40:7d:97:f9:67:e7:d2:2e:be:23:
44:92:2a:c5:a4:b9:48:37:36:ba:3f:68:9c:1e:77:
5c:b9:83:d0:58:6f:bb:6b:bd:56:50:c1:bb:3b:5c:
f2:fc:f1:12:87:07:34:6c:89:dc:14:c4:08:85:aa:
5e:f9:5c:17:27:25:bd:40:dd:40:21:ba:83:af:86:
36:52:be:8b:bc:cc:c8:1a:9c:b7:33:9b:a2:e3:52:
41:28:7c:e7:10:17:2e:e3:9e:01:59:2d:20:94:ab:
02:f9:47:89:ee:1d:71:50:e6:31:c5:4e:48:21:91:
aa:24:e8:a1:79:0c:13:40:51:bb:7e:66:c8:0d:da:
49:30:b6:a6:dd:05:ca:2b:f0:6d:6d:03:26:aa:1d:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:AC:80:08:5D:7A:FC:AC:B2:F5:74:31:D6:CB:23:A6:EC:80:B6
X509v3 Authority Key Identifier:
keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject Information Access:
Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219418
Signature Algorithm: sha256WithRSAEncryption
37:18:ee:18:d9:42:9d:6f:6a:c5:a4:bf:d3:95:dc:cd:09:03:
36:e6:27:ea:5d:79:c4:92:6a:2a:26:51:e3:7e:a9:09:ea:76:
0a:40:bc:5d:29:c4:82:c5:2c:81:bf:5c:97:fc:71:77:f0:a7:
0f:d4:9d:ab:c2:17:63:aa:bf:66:ac:e7:1d:9c:a8:df:45:3f:
8b:10:fb:37:68:ff:6a:cd:13:95:5c:46:cf:fc:f6:c8:04:a4:
df:90:68:d9:c4:1a:06:04:54:15:cc:b9:4a:18:9b:aa:5c:63:
4a:ff:7d:10:fc:ab:95:c0:35:db:3b:b3:f9:91:6d:9d:f4:40:
ad:a4:e1:60:4d:31:f4:6f:74:cf:6d:d5:e3:60:93:95:5b:19:
cd:2d:a4:52:1c:ec:55:0a:b2:73:3e:a0:06:72:b5:b8:a0:e8:
4a:d8:8a:34:dd:67:26:67:86:0d:62:1e:0e:06:44:66:a4:d9:
60:24:0c:c3:be:16:22:78:f2:c2:15:06:23:97:31:5b:2f:0b:
fb:81:31:6c:46:1a:41:e3:a1:91:e9:d6:af:36:10:c6:a3:58:
6e:a9:73:bc:98:03:76:39:b3:87:a8:d2:b7:84:ef:e0:1e:06:
a7:5a:1f:b3:92:b0:86:99:8b:12:2b:31:ae:5f:5e:da:70:59:
f8:69:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 05:38:34 2026 by rpki-client