Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/3QZDpiFuYaMWkZup-aSbUWdprS4.asa
File: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (raw, json)
Hash identifier: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=
Subject key identifier: DD:06:43:A6:21:6E:61:A3:16:91:9B:A9:F9:A4:9B:51:67:69:AD:2E
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019CD3661E750E1EA7BEE3669205883B9504
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/3QZDpiFuYaMWkZup-aSbUWdprS4.asa
Signing time: Mon 09 Mar 2026 16:20:10 +0000
ASPA not before: Mon 09 Mar 2026 16:20:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 49983
Providers: AS: 174
AS: 3303
AS: 6939
AS: 13030
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:66:1e:75:0e:1e:a7:be:e3:66:92:05:88:3b:95:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Mar 9 16:20:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd0643a6216e61a316919ba9f9a49b516769ad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:28:81:64:a7:cd:9e:39:18:e9:86:7e:55:
40:bb:a3:2c:f1:64:ca:56:34:eb:b4:51:ff:39:8b:
1f:99:68:5b:00:49:74:fe:a3:0e:48:55:b6:36:13:
6b:59:c1:16:6a:24:5f:c2:a5:0f:21:5d:9b:b4:d1:
5c:67:ac:cc:b9:7f:5a:a5:67:dc:63:f0:00:60:91:
4d:9b:5e:b9:18:0f:00:9b:db:e5:28:b3:84:eb:37:
00:e0:11:2a:86:07:0f:71:6c:3a:0e:78:53:b5:cd:
32:d8:06:f4:05:02:0c:52:13:a5:84:b1:6d:83:eb:
9c:2f:4f:db:f0:a1:94:3a:67:cc:23:94:b2:50:40:
c5:0a:ac:71:91:3b:da:a4:a1:08:ca:81:18:1c:e8:
80:bc:3d:68:11:b0:d3:d9:c8:6e:2c:9d:a7:b3:46:
f2:59:42:e1:4a:96:ce:57:2f:45:91:d3:82:93:fa:
82:4e:64:d3:4a:71:47:67:4c:7a:75:a6:24:98:17:
70:73:c5:85:5d:c9:52:36:ed:d6:87:de:52:94:9b:
93:68:6e:1a:72:81:0f:1c:de:f1:08:bc:e0:2f:35:
04:0a:6d:24:62:ba:f1:6a:16:dc:7a:f0:ea:1c:7e:
c8:82:2d:1c:4b:05:f1:c1:c1:65:73:63:42:ae:53:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:06:43:A6:21:6E:61:A3:16:91:9B:A9:F9:A4:9B:51:67:69:AD:2E
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/3QZDpiFuYaMWkZup-aSbUWdprS4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49983
Signature Algorithm: sha256WithRSAEncryption
78:9b:b2:9b:19:06:a9:46:a8:e6:6d:98:59:4d:90:9b:97:c8:
0b:d6:1a:8c:4a:de:1f:48:22:82:22:27:f8:e8:7a:34:3d:24:
e3:b7:e7:19:fa:3d:85:86:91:ae:59:4c:2d:29:ff:f6:77:d7:
09:2e:ca:03:1d:b6:c9:ff:b5:9c:f2:be:77:44:4d:42:41:f3:
34:44:55:3a:a5:6a:33:97:4d:39:29:65:02:54:14:a0:32:10:
f7:8d:33:34:44:39:04:3c:6d:5e:3f:db:df:b8:3d:02:49:6e:
39:d7:d9:68:b5:9c:12:cb:03:59:45:9a:46:88:aa:3d:a1:89:
d1:32:31:4d:66:1e:a9:19:3e:1c:18:10:04:12:d7:c4:ce:3b:
03:0c:cb:f1:fd:5e:4c:74:f2:a6:83:fd:bd:0d:a0:41:f6:ff:
ea:1b:ac:1b:c1:3b:6c:ca:92:db:c3:5f:48:c6:8d:9c:ee:8d:
a2:a1:02:07:4e:2b:bc:41:44:b5:19:0e:a7:9e:88:e5:ae:7b:
6f:d6:4a:71:07:b7:0a:56:01:39:e9:92:d8:1d:d2:a8:72:23:
55:a2:ab:8a:fd:03:55:dd:9a:ed:65:ac:c3:d7:8f:40:54:fd:
68:99:e8:11:78:43:81:8c:8b:ce:9c:93:01:e5:45:16:d6:33:
d8:77:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:40 2026 by rpki-client