Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/CRS1HgBRRYhOT9W4JyC0qOVJ3Lo.asa
File: CRS1HgBRRYhOT9W4JyC0qOVJ3Lo.asa (raw, json)
Hash identifier: UeI1SqyX8BhCcq94hLKCQTROAcOHueXMQP3bGhJ/1H8=
Subject key identifier: 09:14:B5:1E:00:51:45:88:4E:4F:D5:B8:27:20:B4:A8:E5:49:DC:BA
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019D77CEE19913C243D1D6D16BEEA8D062E7
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/CRS1HgBRRYhOT9W4JyC0qOVJ3Lo.asa
Signing time: Fri 10 Apr 2026 14:32:19 +0000
ASPA not before: Fri 10 Apr 2026 14:32:19 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215541
Providers: AS: 6939
AS: 34872
AS: 34927
AS: 216275
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:ce:e1:99:13:c2:43:d1:d6:d1:6b:ee:a8:d0:62:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Apr 10 14:32:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0914b51e005145884e4fd5b82720b4a8e549dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:31:34:8d:41:05:41:3d:7a:8c:af:1b:89:
e5:cd:46:32:a0:73:37:1d:06:6d:2a:a3:6b:f2:66:
f7:88:eb:f3:aa:a1:92:93:b4:05:96:70:18:ac:ed:
9f:d6:e3:a3:20:49:a4:ec:e9:2f:71:0e:35:34:05:
9b:a1:54:20:b6:e3:30:02:e7:54:c2:ee:5c:1d:cc:
53:05:45:84:14:a9:46:22:a0:3c:c3:71:45:8b:cf:
35:1b:ba:9c:ff:4d:00:0c:e8:92:8b:cc:95:63:bf:
5e:90:fb:23:d8:45:f7:e8:b5:89:04:f6:5e:4e:98:
a8:6d:1e:92:51:83:2d:94:9a:d1:0c:bc:15:d8:c4:
f3:5e:ed:01:b6:6a:ef:6e:6e:ec:d5:36:13:63:a9:
6b:23:63:40:d3:ff:a6:cd:8d:81:4e:f6:de:17:d1:
dc:c8:23:e1:f0:74:eb:ad:80:1c:a1:9f:54:e2:c4:
fe:33:81:fe:f3:46:a4:6a:d6:f3:36:a8:8e:3b:87:
cd:e1:9a:10:15:63:0a:5e:0d:55:22:fd:68:91:e3:
53:f4:5d:6b:85:b9:e7:6e:3c:ba:9f:7b:be:d0:3a:
2c:73:70:ba:bb:df:5c:8c:39:c3:cf:36:2e:e2:cc:
6c:84:2b:43:9c:d6:c4:38:5d:9b:bb:ab:3f:cd:a3:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:B5:1E:00:51:45:88:4E:4F:D5:B8:27:20:B4:A8:E5:49:DC:BA
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/CRS1HgBRRYhOT9W4JyC0qOVJ3Lo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215541
Signature Algorithm: sha256WithRSAEncryption
96:1b:65:dd:51:c6:1a:57:b4:7b:02:fc:81:69:25:bf:8c:91:
63:bc:f4:5e:a8:60:32:f2:82:b0:27:0c:80:ab:4a:de:6d:b1:
95:29:f7:75:39:b7:8c:2d:6c:46:9a:2f:08:ba:34:ca:70:7e:
55:ca:11:d2:07:57:2a:70:c0:1f:5b:39:f8:67:8a:b3:46:d4:
7e:c4:c0:31:aa:ed:a7:e2:19:4a:2f:9d:d1:51:48:c6:69:88:
17:83:bf:bf:90:3a:ac:78:f5:51:d6:22:09:0f:8c:40:ae:18:
d6:99:22:9c:89:cf:2d:5d:35:5b:d3:c8:bf:9f:5f:db:28:0d:
a7:9f:b8:8b:b0:30:68:75:08:68:36:9a:24:30:f1:69:7e:b5:
32:ca:b6:74:7e:7c:85:a0:e6:2a:d3:08:65:e5:ea:ae:5a:08:
0b:6a:9a:47:ef:b3:e2:a9:19:33:21:a6:e2:39:20:51:e7:f1:
e0:2a:3c:94:c0:ca:c4:8f:0c:e4:e2:87:f9:77:b5:31:a2:58:
bb:0f:6f:89:0d:23:7f:9e:d0:09:58:45:13:eb:a4:09:80:0a:
2e:fc:0b:99:3e:b0:13:cc:ab:f2:33:6b:55:63:67:d3:a0:0d:
ef:61:da:60:33:0b:37:e3:15:a9:d6:62:7b:a0:01:c5:e9:95:
8a:ba:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:45:09 2026 by rpki-client