Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa
File: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (raw, json)
Hash identifier: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=
Subject key identifier: 9E:01:3B:61:E7:EB:F0:A8:7C:8D:91:2D:54:39:D2:DD:AA:CA:86:A5
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019D3020EDB38981BEDB9A98FF142C147DA7
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa
Signing time: Fri 27 Mar 2026 16:29:17 +0000
ASPA not before: Fri 27 Mar 2026 16:29:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211403
Providers: AS: 39568
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:20:ed:b3:89:81:be:db:9a:98:ff:14:2c:14:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Mar 27 16:29:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e013b61e7ebf0a87c8d912d5439d2ddaaca86a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:7f:19:0c:7c:f3:33:90:31:e5:98:fc:64:
c1:ce:fd:27:82:40:a1:b7:cc:c3:51:53:57:04:5c:
83:98:dd:47:bf:24:76:91:e1:8c:da:c4:cc:e6:00:
65:56:f0:7b:11:14:e3:0e:e8:3a:64:a4:a6:81:d9:
58:80:6e:a9:12:04:ce:2b:b8:c4:70:3c:86:1c:85:
a3:04:6c:88:31:f1:34:29:c7:24:e3:8d:aa:a9:48:
ed:96:9f:fe:a6:46:a9:61:e7:fb:0e:d6:88:55:e9:
cf:16:66:fc:1a:12:6e:b1:de:0f:5e:71:ba:f5:68:
9f:d8:c0:e2:fc:4d:11:ca:47:5e:8b:a5:d1:cf:b6:
22:90:d7:a2:6d:a1:b7:3d:da:c0:ee:0e:e6:d9:c7:
ac:02:71:c2:9c:e8:f6:ff:0f:2f:54:e0:52:34:92:
4c:4b:8d:7b:11:e3:54:55:50:d0:56:07:4b:01:23:
3f:fb:6f:0c:4d:b7:07:c3:3c:3f:82:6e:9d:ff:2e:
fe:2e:6b:5f:7b:26:ea:93:4d:a4:dc:af:4c:fb:d9:
90:b4:3a:bd:3f:fa:98:a2:bf:8c:2a:6b:c1:7e:12:
78:bd:37:77:20:02:54:57:2e:fc:34:e8:28:83:6c:
a8:3e:59:b7:d9:7c:58:e5:bb:75:b1:75:f3:08:d4:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:3B:61:E7:EB:F0:A8:7C:8D:91:2D:54:39:D2:DD:AA:CA:86:A5
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211403
Signature Algorithm: sha256WithRSAEncryption
71:54:ed:cb:7d:6b:de:3c:f1:04:23:27:78:8c:1e:b3:bb:77:
8e:5f:49:a4:94:8e:39:bb:74:4f:b0:fd:b4:ee:e2:12:7a:b4:
db:8a:14:11:bd:b3:5b:b9:63:77:72:b7:c3:cc:56:2a:12:7e:
64:b4:1f:9c:a7:5c:47:19:8f:d5:23:30:0a:cc:c0:2b:8a:42:
da:43:c5:20:e6:d8:f3:10:36:99:40:43:cf:20:83:42:c3:3b:
4e:68:95:08:bf:f8:3c:15:5d:81:79:2a:72:6e:8c:3d:bd:4e:
79:6d:c3:c4:33:12:cf:ae:65:83:ee:40:ac:08:9c:57:1b:3f:
db:f6:7e:cd:d7:ac:70:bd:39:7a:62:05:75:96:08:d9:ae:e5:
16:ed:4c:c6:d7:74:4b:54:a2:47:ee:39:84:94:4f:05:7e:80:
3b:db:ba:49:bd:c7:86:55:60:56:a9:a5:05:9f:1e:e2:e0:4e:
af:aa:cd:74:f7:7d:d4:c2:94:ae:b6:ac:7c:ef:bf:d2:56:7f:
55:d7:f5:e6:38:95:ea:e1:2d:7e:a9:4d:63:96:77:42:37:4c:
67:76:c3:42:b7:d7:4d:c7:e3:8d:22:72:2d:66:45:ac:58:7e:
c8:0e:06:97:f0:f9:51:04:e5:69:5a:9a:2f:0b:d0:39:5b:f5:
e6:da:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:33 2026 by rpki-client