Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/wYNkgivHmczBfVK47-ZJaMoKgac.asa
File: wYNkgivHmczBfVK47-ZJaMoKgac.asa (raw, json)
Hash identifier: 1Kkc1HWLJWlsQ7tek7Nc/E33P76aNAyNEBUZAmhQX4E=
Subject key identifier: C1:83:64:82:2B:C7:99:CC:C1:7D:52:B8:EF:E6:49:68:CA:0A:81:A7
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019DACEA917D0087057A447AD5441A01C7CB
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/wYNkgivHmczBfVK47-ZJaMoKgac.asa
Signing time: Mon 20 Apr 2026 22:02:26 +0000
ASPA not before: Mon 20 Apr 2026 22:02:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214748
Providers: AS: 197686
AS: 200590
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ac:ea:91:7d:00:87:05:7a:44:7a:d5:44:1a:01:c7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Apr 20 22:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c18364822bc799ccc17d52b8efe64968ca0a81a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:fb:1c:c0:33:64:05:09:11:9c:cd:b9:fa:
d1:d1:fa:bb:7a:8e:64:8e:81:8f:e3:d8:80:13:19:
3c:84:ba:9a:c5:26:d5:cc:9c:c9:34:b4:0e:fc:fc:
f5:06:b4:be:e0:b3:2a:ea:04:44:68:ee:1e:40:ed:
8a:16:aa:7c:54:31:0e:d3:58:90:97:96:fe:2e:f5:
91:6b:83:de:27:cd:24:6d:67:c0:bc:58:e8:97:da:
5d:00:a3:4e:20:6c:b0:0a:a5:6c:06:ce:81:b5:b4:
e6:25:85:40:19:7a:47:e6:27:85:68:43:1a:75:16:
58:a4:6d:8e:2c:fa:3a:84:bb:33:1c:49:90:3e:35:
42:72:25:24:64:63:87:bd:a4:2e:41:17:9f:78:ee:
0c:c0:11:2a:80:fb:e3:ee:d6:5e:81:30:7d:99:b2:
8f:1b:37:5d:30:d8:05:1b:df:eb:8d:77:c6:1d:2c:
a4:0f:5a:2a:f6:20:b3:71:a2:ac:c2:10:f8:b2:89:
10:1f:78:1d:69:f5:7b:e7:0f:1f:41:61:38:af:bb:
87:21:63:cf:4f:a0:73:6b:a3:ad:be:e8:e2:0b:e2:
9d:64:01:ce:4c:66:6a:35:4a:95:a6:60:48:87:f7:
19:72:b7:1a:ca:1e:ab:cd:40:ff:f0:9a:f5:e1:53:
74:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:64:82:2B:C7:99:CC:C1:7D:52:B8:EF:E6:49:68:CA:0A:81:A7
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/wYNkgivHmczBfVK47-ZJaMoKgac.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214748
Signature Algorithm: sha256WithRSAEncryption
3f:13:96:d2:64:3c:b1:73:9b:00:ab:5f:7b:73:77:c7:20:61:
a4:66:f5:b9:ee:9d:f9:b6:63:98:6f:ff:bf:a5:e3:02:ca:41:
c0:a8:01:75:49:cc:9e:88:39:47:c4:07:a9:8f:3e:1f:49:88:
c4:41:f5:1b:9f:26:a8:30:93:af:5a:4c:73:df:1b:9f:11:4c:
c3:cd:1c:9c:db:80:73:2b:01:db:58:cc:52:01:91:9a:ed:40:
9c:30:00:6d:da:a2:d0:9d:1b:f2:27:12:ee:0a:be:b6:f8:33:
05:71:a1:48:a7:15:0d:ac:6a:d0:2a:02:8d:d2:57:f3:05:16:
9e:8c:b6:28:95:be:4f:a5:0f:3b:11:ea:29:d5:9d:a3:b1:98:
f4:a6:ac:d2:d1:ce:0a:91:e3:c0:39:0a:81:c7:a1:ea:8b:f3:
9b:4b:74:cd:51:c9:0b:cb:e0:64:bd:08:1f:f7:2e:f9:8c:91:
8e:36:a1:8c:25:04:5d:33:f8:41:19:5b:88:74:74:a6:4f:a3:
6a:9c:b7:dd:ec:ac:c0:bf:da:08:a7:63:20:69:e5:1a:9b:ea:
61:da:4e:c4:34:50:cc:34:7b:4d:95:22:1b:ac:6f:48:f2:32:
5e:09:2a:5b:d5:80:0c:3f:38:cd:08:29:4b:0d:ae:f4:bc:1b:
1f:a5:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:04 2026 by rpki-client