Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/CrHzUYow__pKflBTZEqOj14DVnw.asa
File: CrHzUYow__pKflBTZEqOj14DVnw.asa (raw, json)
Hash identifier: kamVfrrKQeuCosMREdalXWPlTBnlh56kwUPRmIWsg88=
Subject key identifier: 0A:B1:F3:51:8A:30:FF:FA:4A:7E:50:53:64:4A:8E:8F:5E:03:56:7C
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 019E45FB990BF1F6C423B219463A573BF873
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/CrHzUYow__pKflBTZEqOj14DVnw.asa
Signing time: Wed 20 May 2026 15:22:57 +0000
ASPA not before: Wed 20 May 2026 15:22:57 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 5539
Providers: AS: 1299
AS: 2914
AS: 5405
AS: 21385
AS: 33891
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:fb:99:0b:f1:f6:c4:23:b2:19:46:3a:57:3b:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: May 20 15:22:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ab1f3518a30fffa4a7e5053644a8e8f5e03567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:d4:4e:37:18:dd:87:b6:a1:a6:4d:c8:22:
88:44:db:1d:25:15:fa:42:25:3d:2f:8e:a2:20:7e:
81:2e:ea:df:77:b8:ba:84:00:b7:95:48:58:7a:e1:
7f:fc:f2:6f:97:ce:56:37:b6:67:f4:eb:8b:1b:6a:
bf:51:7f:ed:fd:9d:f0:96:a7:bc:60:44:f3:92:55:
1a:1b:ec:05:ee:02:e1:8e:f7:b5:ec:02:82:2c:15:
9c:00:89:55:e1:a6:2f:10:b8:bc:9f:d6:e7:f2:08:
58:b2:96:78:74:00:dc:63:a3:5c:5e:35:fa:a0:0d:
ac:5e:36:d2:8d:2c:4f:7e:8c:b5:70:95:d1:c1:6a:
cf:1d:f2:32:56:8c:b3:06:b4:62:1b:2a:6c:b4:b1:
9b:3d:75:4b:9b:42:84:94:c1:ba:e5:91:2f:7e:d7:
82:dc:25:6a:74:47:67:d7:38:ab:1f:55:7a:65:a6:
db:d5:9b:8a:66:d7:b3:79:38:4a:63:21:0b:9b:e7:
9e:20:e4:74:87:93:f7:2f:fe:7c:d6:dc:ff:18:7f:
6a:57:64:96:4a:37:0b:fa:13:5b:cb:00:56:9f:49:
76:1b:3c:38:92:90:65:0b:ba:24:ca:c9:b8:7e:a5:
ec:0d:cb:ee:d3:5e:8c:08:59:e2:9b:3f:9b:f2:2f:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B1:F3:51:8A:30:FF:FA:4A:7E:50:53:64:4A:8E:8F:5E:03:56:7C
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/CrHzUYow__pKflBTZEqOj14DVnw.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5539
Signature Algorithm: sha256WithRSAEncryption
8a:3c:6c:9b:9d:43:f0:e3:cb:0d:cf:eb:23:46:d3:d1:70:f8:
78:42:f9:14:f1:ac:8e:13:65:44:8a:2c:68:f9:a0:72:99:b7:
36:dd:5b:6a:0e:aa:e4:b1:81:fd:6a:7f:1a:8d:3c:e6:02:cf:
52:e4:e5:bf:a6:f8:8f:30:6a:1f:65:24:26:8c:ee:09:34:d1:
da:96:a7:ab:5b:30:a2:67:e0:dc:cf:01:65:81:05:0f:a8:1d:
e3:ed:de:db:70:09:a6:f9:25:ee:9a:1f:21:69:bc:4b:4a:e0:
43:ea:b8:0d:a6:65:61:6d:04:a7:63:1a:46:4a:4d:36:10:66:
ee:f2:0e:52:bc:d5:49:95:09:3e:b2:8b:f8:41:55:69:31:c8:
73:69:e2:c0:cc:a5:07:da:d6:76:6f:95:d0:0d:4a:77:d5:6c:
7f:8e:0a:61:d6:04:09:c6:9c:0c:ff:30:74:ee:da:fc:4a:43:
b5:ad:6c:41:b2:93:4f:c2:19:a3:dd:15:b3:e2:eb:ea:65:0a:
c1:6c:c8:e5:e3:76:ab:15:ce:f0:1e:79:7c:31:8b:20:10:73:
ba:d5:19:bf:68:dd:58:29:05:5c:ce:13:61:e3:cc:88:2f:ce:
0f:4d:43:27:9b:3d:d8:46:1b:ec:1f:41:c7:3f:2e:12:0b:0b:
e5:67:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:48:27 2026 by rpki-client