Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/HzqFtyFVPakRtNYp14MBZvDlL4w.asa
File: HzqFtyFVPakRtNYp14MBZvDlL4w.asa (raw, json)
Hash identifier: iL55KvROMB9oL+q0JgwnpXkOYgknv+uo4IWb8HLFj7c=
Subject key identifier: 1F:3A:85:B7:21:55:3D:A9:11:B4:D6:29:D7:83:01:66:F0:E5:2F:8C
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 01A0F22F95C67D408B4E5C78BE5A90CB16F0
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/HzqFtyFVPakRtNYp14MBZvDlL4w.asa
Signing time: Wed 30 Sep 2026 11:59:59 +0000
ASPA not before: Wed 30 Sep 2026 11:59:59 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214242
Providers: AS: 20473
AS: 41051
AS: 53667
AS: 199829
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:2f:95:c6:7d:40:8b:4e:5c:78:be:5a:90:cb:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Sep 30 11:59:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f3a85b721553da911b4d629d7830166f0e52f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:1f:99:b6:d6:28:3d:8f:eb:3e:2f:f8:04:
c4:3d:f8:a3:c2:8c:70:33:3a:48:05:81:39:77:8a:
d9:c1:7c:51:13:be:48:95:a1:16:15:eb:b6:f3:5e:
e2:36:1e:ab:e1:c2:ce:9a:89:e9:35:4f:a5:fc:bc:
f0:86:95:ed:05:3b:f2:94:ef:27:79:3e:87:f6:00:
50:e2:66:f9:44:39:49:11:b4:4f:cf:eb:64:26:cd:
a2:89:46:ff:1e:a7:0d:43:11:7f:bf:1e:d9:7f:d9:
ed:02:25:df:be:a9:94:83:a5:fc:c4:29:6c:32:64:
74:22:9c:90:f7:34:4b:de:8a:f4:f4:63:83:19:a1:
12:d8:65:2f:82:90:9f:a8:b6:f9:79:d7:11:c7:fe:
2d:f2:c5:6d:92:cd:1c:f4:a0:c6:c7:5b:b9:21:95:
48:9c:1d:96:49:97:9b:7f:fa:0e:74:03:e2:57:0c:
8f:2a:7e:a9:dc:c9:da:d6:5e:35:6b:49:70:89:d1:
8a:de:04:d6:80:cd:20:2c:a8:d0:7f:8f:c3:ca:8b:
72:90:ca:f8:ec:c1:d9:fc:9d:dd:1d:54:65:95:66:
c1:0c:34:ea:bc:85:8f:9a:94:41:f7:bf:42:1e:56:
02:96:14:90:41:78:4b:70:87:8f:30:c9:b0:7b:d5:
aa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3A:85:B7:21:55:3D:A9:11:B4:D6:29:D7:83:01:66:F0:E5:2F:8C
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/HzqFtyFVPakRtNYp14MBZvDlL4w.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214242
Signature Algorithm: sha256WithRSAEncryption
2d:09:80:c1:0c:93:1c:f5:24:a6:e8:d5:18:db:87:80:86:6c:
86:f0:17:0e:c5:43:aa:22:3a:6e:04:ad:b0:f8:8f:30:2c:e2:
d9:94:3d:6b:7c:de:ce:88:2b:0b:da:60:fa:c6:64:17:2d:ed:
45:c1:d9:47:3d:f9:a2:92:9c:07:5f:5d:9c:bb:4f:49:d7:be:
bb:40:17:2d:9a:1a:9d:97:0f:f4:56:36:bd:5d:bd:43:ad:ac:
a8:df:4f:03:36:f7:55:30:ac:3e:4c:58:34:5e:c6:95:f6:81:
60:a9:78:0f:a4:04:eb:e6:56:cf:31:f5:65:10:c0:89:fc:d3:
c6:63:08:66:8e:89:45:d1:b6:18:b5:6e:d6:53:99:25:63:ca:
25:90:a7:2d:1f:6f:fd:69:a6:31:1d:e7:f0:5c:8b:cf:a1:92:
0a:14:c6:fc:b1:35:e6:56:1d:02:d8:b3:cd:9f:8f:c9:8a:96:
ff:81:29:32:c4:f2:45:17:a7:43:bd:9c:7e:53:b0:f2:e5:5e:
12:e9:67:0c:8a:73:49:05:ec:4a:52:55:90:17:8a:59:67:53:
c1:1a:11:1e:a7:b2:b0:91:a9:5c:08:07:72:8b:7a:dd:24:0f:
56:64:55:b4:ad:ba:a6:2f:c6:41:e2:5b:72:7c:56:89:e5:e9:
96:2c:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:01:50 2026 by rpki-client