Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kLw9lhcXnvuEGHBVOqEx11u40-U.asa
File: kLw9lhcXnvuEGHBVOqEx11u40-U.asa (raw, json)
Hash identifier: FtRljyUVQiyGpsb5h7hr0NWHTAe0q/cSAw4aMiyQnwU=
Subject key identifier: 90:BC:3D:96:17:17:9E:FB:84:18:70:55:3A:A1:31:D7:5B:B8:D3:E5
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2369251FFADCCC810D5683FF6DB1C5D7
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kLw9lhcXnvuEGHBVOqEx11u40-U.asa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ASPA not before: Thu 02 Jul 2026 15:18:40 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 21273
Providers: AS: 3303
AS: 8220
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:25:1f:fa:dc:cc:81:0d:56:83:ff:6d:b1:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90bc3d9617179efb841870553aa131d75bb8d3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:6d:c0:2a:fd:58:fd:91:ad:13:6d:cf:96:
eb:a4:77:85:2b:40:5f:96:d5:5b:cc:71:12:c0:da:
a0:af:42:5c:76:f2:17:66:57:29:7a:36:e8:a6:c2:
1f:c2:a2:36:e4:71:ca:e6:45:a0:a1:cd:d9:d6:e4:
8e:79:0b:a7:e3:a0:bc:76:26:ca:95:a6:e4:a9:c6:
2c:84:52:78:66:ce:49:13:49:39:27:9d:90:7c:44:
0e:60:e1:e1:03:a6:50:11:16:a8:44:b2:dc:5a:5b:
93:e3:7e:dc:67:02:2c:ed:25:ed:47:bb:c6:d0:a7:
7c:3d:97:66:8a:50:bb:70:4e:20:be:2c:2c:30:b6:
83:c9:dc:59:ab:7b:db:b7:b2:78:5a:db:e2:1b:4a:
26:5f:e8:73:4f:2e:c9:7a:9d:38:61:12:c1:75:3d:
f7:30:f9:32:1e:71:26:15:48:84:ba:30:85:19:f7:
86:ca:e0:78:b9:d7:ca:ef:98:39:49:45:8a:c0:3d:
45:c4:dc:a3:83:78:47:1e:2c:63:1a:a3:76:d1:b5:
9b:8d:47:30:ea:db:0b:da:d3:d8:e2:57:39:73:27:
f2:f6:2e:36:74:5c:71:ba:94:46:6f:23:f4:96:80:
bf:6f:da:63:16:33:f2:e8:cd:83:b3:a6:e5:5e:d0:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:3D:96:17:17:9E:FB:84:18:70:55:3A:A1:31:D7:5B:B8:D3:E5
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kLw9lhcXnvuEGHBVOqEx11u40-U.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21273
Signature Algorithm: sha256WithRSAEncryption
3a:58:95:a6:5f:f4:f8:4d:f3:d0:3c:28:4d:17:57:70:64:aa:
a8:95:8a:b8:c1:d8:a5:df:3d:4a:a7:ee:6d:5a:78:a6:5f:9b:
27:aa:3c:e1:f1:f4:b5:b1:17:04:43:39:5a:98:1c:10:42:09:
fb:6c:15:a3:da:ab:02:17:33:ad:ab:24:ea:e9:8a:23:ae:f1:
ad:b1:72:89:e0:bf:a4:bc:c3:d9:83:e6:f8:37:eb:c1:fc:9f:
2d:b2:21:96:c1:fd:84:28:ea:15:6f:b7:fc:04:6d:f9:3b:63:
e4:d8:c4:b8:7b:60:51:ba:d0:22:e5:ef:4a:e0:d6:95:52:a5:
4f:92:d0:e0:16:4b:35:7b:92:dc:fe:bd:57:19:d1:ed:95:3d:
4a:2e:30:d1:76:07:02:2c:7c:af:57:0b:18:6d:d4:f3:b5:56:
4f:88:e2:94:9f:3c:83:6a:35:c0:a7:3a:6c:3c:4b:25:74:50:
e3:c4:14:df:3c:66:ca:fa:27:6d:25:a9:ab:88:06:bf:79:fb:
30:59:77:34:73:d9:76:89:dd:e9:d6:64:d0:41:3a:e6:21:05:
ac:e8:4f:17:0e:23:70:f8:91:72:56:2b:30:84:38:be:38:3b:
cc:57:63:c7:0a:dd:ab:bb:d5:f9:b2:a2:67:42:69:98:36:9d:
b9:28:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:44 2026 by rpki-client