Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/8HMwFyvkb56vT68uRLOGe_JnVwc.asa
File: 8HMwFyvkb56vT68uRLOGe_JnVwc.asa (raw, json)
Hash identifier: QdjySk2E2Enm4iVHj3OWaMhdITjDDhGuPrmg1feRZds=
Subject key identifier: F0:73:30:17:2B:E4:6F:9E:AF:4F:AF:2E:44:B3:86:7B:F2:67:57:07
Certificate issuer: /CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Certificate serial: 01A17F8C551F13F247AA8340D16E6E0A08A0
Authority key identifier: B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/8HMwFyvkb56vT68uRLOGe_JnVwc.asa
Signing time: Tue 27 Oct 2026 22:47:45 +0000
ASPA not before: Tue 27 Oct 2026 22:47:45 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213520
Providers: AS: 30823
AS: 49581
AS: 58212
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:8c:55:1f:13:f2:47:aa:83:40:d1:6e:6e:0a:08:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Validity
Not Before: Oct 27 22:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f07330172be46f9eaf4faf2e44b3867bf2675707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:03:82:f4:da:88:4e:65:d0:e4:2f:48:8b:
a6:ca:8a:d9:03:41:d1:74:8d:ce:dd:08:61:78:1a:
ca:d9:eb:0b:4a:8e:fa:ac:51:c6:ad:d2:f7:b7:54:
37:da:cd:a3:6e:b9:7d:26:2b:ba:69:00:09:73:ca:
48:09:52:e6:7a:02:8c:82:fc:e0:7d:f6:b3:76:c3:
86:34:ab:15:13:a3:9e:94:83:16:fa:c3:e5:49:35:
c4:62:70:1b:31:75:52:0e:35:bb:95:49:11:07:45:
86:fb:f4:f6:c7:eb:5e:1c:15:c5:e1:0e:10:7b:f3:
e0:4d:4b:03:9f:ea:dd:73:ca:42:61:57:56:57:23:
e2:38:48:42:5e:4a:31:02:88:67:b7:9d:1e:e0:77:
f8:07:46:05:6b:62:5a:98:f6:fc:0e:41:6d:44:b2:
c8:e1:18:f9:cc:75:f8:85:07:a8:f0:04:02:c4:72:
e0:b8:80:f3:77:93:72:7a:53:28:77:d2:2d:61:d8:
3b:25:06:01:ce:1e:ac:f8:32:70:1d:0e:6f:5c:6a:
dd:2d:38:ad:02:37:e3:bd:e9:67:e4:6d:94:ca:48:
2b:e0:cc:ad:54:72:40:57:7c:aa:47:d9:25:9b:83:
f7:a5:1f:fe:de:fe:88:04:42:9e:e7:19:30:6f:1b:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:73:30:17:2B:E4:6F:9E:AF:4F:AF:2E:44:B3:86:7B:F2:67:57:07
X509v3 Authority Key Identifier:
keyid:B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/8HMwFyvkb56vT68uRLOGe_JnVwc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213520
Signature Algorithm: sha256WithRSAEncryption
e1:b4:a4:87:ae:12:e3:6c:a3:43:4c:6d:2c:e0:38:3a:fd:1e:
30:87:05:d7:d1:22:f7:04:a8:fa:b7:89:fe:45:86:53:1d:c1:
f9:4a:e9:c2:16:04:2d:f9:10:a6:64:e1:69:8b:8d:f6:57:ed:
69:a7:fb:61:a0:48:1f:8d:1f:11:f0:bb:2a:94:13:8d:23:f4:
05:b9:3e:82:28:cd:86:b9:ae:5d:fc:0c:79:66:fa:9a:ca:b1:
93:2a:7e:ce:77:c3:b0:0a:61:7b:28:a6:58:a0:26:ec:6a:4f:
b0:37:3b:b0:ab:57:d5:e8:cf:21:9d:80:4c:ed:c7:6d:cb:4f:
58:03:af:44:16:35:8c:76:8f:e0:9c:6f:7d:1b:7e:ca:86:34:
49:9a:c7:0b:b2:28:0d:da:b5:fc:58:78:d7:2e:8c:76:8c:b1:
34:74:e5:cf:d5:ea:e5:87:e5:31:5b:87:f1:d9:e0:49:fa:9c:
ed:a7:65:c4:57:fd:46:66:96:dd:7c:7b:86:95:74:45:97:0e:
dd:38:cf:44:f6:b5:9c:e8:ad:17:be:af:e2:b1:6f:b8:3a:eb:
05:64:14:55:fd:b9:57:1c:9e:0f:20:45:ef:aa:09:37:19:8d:
6a:c1:bd:0f:1a:af:b5:82:94:8d:c0:d3:50:37:40:fb:0f:2f:
75:23:87:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 21:40:04 2026 by rpki-client