Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/2DVYJPCuOw7VG2htfdUNo_7kInE.asa
File: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (raw, json)
Hash identifier: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=
Subject key identifier: D8:35:58:24:F0:AE:3B:0E:D5:1B:68:6D:7D:D5:0D:A3:FE:E4:22:71
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019F19014F59171E37D17A41D055BCD24300
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/2DVYJPCuOw7VG2htfdUNo_7kInE.asa
Signing time: Tue 30 Jun 2026 14:49:03 +0000
ASPA not before: Tue 30 Jun 2026 14:49:03 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 47943
Providers: AS: 6424
AS: 35432
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:4f:59:17:1e:37:d1:7a:41:d0:55:bc:d2:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jun 30 14:49:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8355824f0ae3b0ed51b686d7dd50da3fee42271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:87:7b:11:0e:e5:62:4e:73:3b:71:7c:ba:
bb:97:8a:92:d3:78:e1:85:19:44:b2:24:3b:14:9e:
e7:53:33:2b:e1:7a:83:4a:62:0d:a6:0b:e4:64:36:
d3:8b:55:74:2f:ed:ba:5f:17:25:08:2e:74:92:f2:
52:9d:58:0b:66:f9:d6:9f:80:f0:0d:5c:26:89:7c:
ed:46:7e:02:90:81:de:02:a1:e7:08:99:38:a5:2c:
87:a5:50:9e:55:fe:61:4b:fa:b5:6b:43:21:29:fc:
ef:60:33:34:21:c7:77:4a:fc:ec:b4:b3:f2:1f:0f:
c9:cf:28:44:75:f1:c2:80:f0:ec:17:79:29:c4:88:
ae:31:e1:56:e0:02:2a:de:c7:7a:4a:98:6a:9a:ef:
28:6e:06:79:c6:48:f5:4a:3c:37:55:5e:a1:20:67:
46:2c:53:99:34:13:81:bc:f4:ab:21:cb:81:d6:0f:
ad:54:c0:6a:85:65:b3:5e:32:11:b3:34:96:b1:b2:
5f:a6:33:15:f3:6b:da:86:4c:19:ed:ac:89:f7:d1:
13:aa:05:ac:a2:9f:c4:d1:0d:2c:cc:ad:59:5e:d4:
3e:92:8e:4e:78:04:7a:55:9f:76:d5:55:ac:92:64:
e3:f9:c4:43:32:1e:7f:ab:9a:80:05:aa:dc:f8:93:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:58:24:F0:AE:3B:0E:D5:1B:68:6D:7D:D5:0D:A3:FE:E4:22:71
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/2DVYJPCuOw7VG2htfdUNo_7kInE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47943
Signature Algorithm: sha256WithRSAEncryption
43:a4:66:d0:f6:8d:0a:e4:35:5b:f8:e4:25:20:40:23:69:eb:
69:04:16:0c:b5:e3:ce:ba:d0:98:eb:b8:cf:10:37:8d:24:bb:
da:f9:97:71:c3:ef:2e:63:55:57:bf:37:c6:b3:f8:6b:6c:28:
b6:fb:9d:40:56:30:37:e6:4d:f2:c1:48:7a:07:b2:1c:57:c4:
cb:54:ea:07:d8:bd:1f:a6:e8:97:0d:11:2f:51:f7:54:4f:04:
ee:b1:c8:bc:ca:c1:68:dc:13:3b:5f:4e:3f:bc:4e:f5:0c:50:
cc:53:77:e4:5f:8d:d9:2b:70:9b:54:32:52:c8:25:b7:fa:bc:
77:c3:a3:db:0f:fa:c5:17:fa:f6:2b:0f:d4:0d:6c:59:16:cc:
b1:cc:e9:e4:27:b3:6d:2f:44:af:b8:59:1e:ba:81:a1:ba:57:
13:d0:92:98:14:11:f6:67:f5:1c:8f:33:ca:a8:a3:aa:ae:de:
a8:d3:92:b5:79:5a:9a:e2:2c:60:a0:4d:87:27:dd:99:db:7f:
2f:22:05:8a:6b:e8:f5:fe:af:5d:23:57:88:d2:24:de:23:02:
0a:fd:d2:e1:06:aa:c0:8b:09:8b:1e:df:3b:c2:00:f6:e3:af:
f8:01:c4:11:8c:16:6c:6d:c6:a5:00:06:67:6b:74:8c:97:b6:
ab:d1:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 04:35:20 2026 by rpki-client