Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/XBi0FPt3Tgj9Z2jUXrybiKJEHnU.asa
File: XBi0FPt3Tgj9Z2jUXrybiKJEHnU.asa (raw, json)
Hash identifier: GAqZiwsCXXJxCZ9EujMbC6ioGg7tK0Ic1Zx8khPbgSE=
Subject key identifier: 5C:18:B4:14:FB:77:4E:08:FD:67:68:D4:5E:BC:9B:88:A2:44:1E:75
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 019DD3FD0AD11B59BD2E07B3A5AB342F4DB4
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/XBi0FPt3Tgj9Z2jUXrybiKJEHnU.asa
Signing time: Tue 28 Apr 2026 12:07:49 +0000
ASPA not before: Tue 28 Apr 2026 12:07:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 44596
Providers: AS: 0
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:fd:0a:d1:1b:59:bd:2e:07:b3:a5:ab:34:2f:4d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: Apr 28 12:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c18b414fb774e08fd6768d45ebc9b88a2441e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:62:87:f1:57:24:77:86:0b:09:6e:33:71:
00:ac:35:d9:51:88:6d:96:ce:f6:e2:b2:82:14:1c:
85:47:ee:e4:b0:b0:8a:96:ed:17:99:0a:90:9c:db:
6d:3b:3e:ed:a8:a2:78:ab:9c:c6:0b:b8:e1:6d:2d:
3f:59:e9:28:5a:15:2a:01:6b:9e:98:ce:ac:b9:98:
bd:55:76:f3:44:9c:db:94:a3:4f:c6:e5:79:d9:29:
6e:fd:d4:0f:5b:05:05:1a:b6:97:fd:9f:92:1b:2b:
c7:13:6a:97:03:41:30:c4:af:2c:c4:90:8a:b8:11:
11:82:da:d3:a0:15:86:2f:9d:3a:7c:67:a9:e0:ed:
92:38:c9:dc:38:d1:bf:d0:82:90:be:ce:4b:53:15:
94:76:fc:eb:59:c1:d0:26:13:81:cc:20:48:80:75:
65:51:6f:0b:28:d1:0c:6b:98:27:5e:91:ec:48:ac:
43:73:95:4e:cb:7b:70:2a:c7:0a:75:d4:7b:2b:7f:
eb:b1:c3:4c:94:7e:0d:98:15:42:ed:5a:b7:ac:75:
2a:14:47:4b:e6:78:11:ae:29:43:33:13:7e:5e:e9:
7a:db:32:54:3d:c9:e0:73:b3:a8:f8:72:57:54:e0:
52:af:cd:5e:db:45:24:f4:4d:a2:55:ed:8a:e9:2e:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:B4:14:FB:77:4E:08:FD:67:68:D4:5E:BC:9B:88:A2:44:1E:75
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/XBi0FPt3Tgj9Z2jUXrybiKJEHnU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44596
Signature Algorithm: sha256WithRSAEncryption
63:41:c5:b1:30:e5:37:f9:ad:d3:84:69:c9:05:11:35:5b:bf:
49:a3:88:91:e8:99:ac:7a:da:29:a1:fa:b9:fb:a4:d4:8d:e6:
1b:60:12:27:83:21:e8:d2:c4:ec:bf:5d:92:bc:83:18:c6:5f:
8c:4e:06:b1:af:d8:af:b2:46:38:53:96:f8:5a:5e:70:17:18:
d9:1f:41:cf:8c:73:2c:f5:6f:76:be:e8:ca:8e:23:84:57:d0:
37:25:a1:ba:29:6a:e9:e5:50:3e:e4:15:d9:b2:8c:84:07:1a:
bb:28:da:92:6a:7f:23:11:c0:af:ca:88:80:53:1d:df:ab:9d:
a4:27:8d:d8:ec:31:a0:38:45:b0:a2:13:c2:98:c8:9c:96:be:
49:26:11:6c:da:2a:57:ea:e6:fb:65:de:b5:78:68:5b:2d:93:
b8:ed:f2:50:ac:3d:28:45:bc:fb:b3:a5:2a:ae:ae:4d:45:b8:
3c:ea:74:7f:4d:d2:0b:89:dd:ba:d5:45:cf:f4:47:ea:6b:00:
e5:d1:8d:d5:51:11:36:da:f7:0b:99:51:e7:b7:6e:78:01:56:
8d:31:4f:0e:b9:70:ea:72:a0:93:2e:22:57:c7:70:e6:6d:37:
8d:66:30:f0:ec:d7:cd:d0:e8:7c:f5:6b:9a:11:3a:63:5c:61:
01:79:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:03 2026 by rpki-client