Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/KmNxzz7eij2vc69C4M9P6FeRw94.asa
File: KmNxzz7eij2vc69C4M9P6FeRw94.asa (raw, json)
Hash identifier: VXXdojaYOsWRnPXAdxFZSw+zRwZOX8i3XwGDi9HlnWY=
Subject key identifier: 2A:63:71:CF:3E:DE:8A:3D:AF:73:AF:42:E0:CF:4F:E8:57:91:C3:DE
Certificate issuer: /CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Certificate serial: 01A0216D05B0D33FD2CEEEB17066A782D3B7
Authority key identifier: 8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/KmNxzz7eij2vc69C4M9P6FeRw94.asa
Signing time: Thu 20 Aug 2026 23:06:27 +0000
ASPA not before: Thu 20 Aug 2026 23:06:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 212510
Providers: AS: 34927
AS: 41051
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:6d:05:b0:d3:3f:d2:ce:ee:b1:70:66:a7:82:d3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdd303c2458c3649ad5684e16e209603515f6f9
Validity
Not Before: Aug 20 23:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a6371cf3ede8a3daf73af42e0cf4fe85791c3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:0c:d6:40:63:6a:73:89:d1:11:6d:c8:06:
58:1c:4c:1e:fe:7c:b1:6d:db:43:6d:ba:59:7a:c1:
13:a1:82:2a:38:58:a1:66:07:25:3c:93:53:cc:9a:
7d:50:e3:5f:cf:9e:21:90:f8:d7:fe:de:70:a9:9d:
50:d5:bc:a3:26:02:c1:f3:84:05:36:ff:09:fc:e3:
00:91:8e:33:6c:72:ff:42:9c:3a:f0:29:69:0d:35:
27:91:72:a8:50:84:08:bb:45:00:1c:de:0b:f9:91:
a6:0d:fa:72:37:0f:70:24:0d:3f:d6:b7:5d:e0:2b:
44:76:14:db:7b:0c:6d:72:31:06:a8:77:a2:bc:6b:
a5:70:f4:ef:fa:5e:93:db:57:ff:77:35:6b:c6:d7:
b2:df:0a:7e:89:0b:ef:ad:e4:f5:08:5f:cb:3b:1d:
44:e5:b8:2d:ca:f2:44:13:6e:bb:1e:fb:9b:a4:41:
f3:64:e2:ca:02:f1:76:b6:9a:a3:53:82:56:da:78:
3f:a3:81:f4:6d:4c:e1:b5:07:10:57:3a:50:cc:e2:
d0:ae:30:92:c7:00:1f:d3:a4:a2:e4:27:2a:0c:e4:
2b:23:65:1c:49:a6:c1:40:f8:49:6b:b2:11:ff:92:
cd:5c:d3:47:13:66:ca:25:70:28:d2:7f:aa:bb:5a:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:71:CF:3E:DE:8A:3D:AF:73:AF:42:E0:CF:4F:E8:57:91:C3:DE
X509v3 Authority Key Identifier:
keyid:8B:DD:30:3C:24:58:C3:64:9A:D5:68:4E:16:E2:09:60:35:15:F6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90wPCRYw2Sa1WhOFuIJYDUV9vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/KmNxzz7eij2vc69C4M9P6FeRw94.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/2e3949-4bf8-4420-bb30-1099a899fb5b/1/i90wPCRYw2Sa1WhOFuIJYDUV9vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212510
Signature Algorithm: sha256WithRSAEncryption
62:68:43:40:3a:33:35:90:3d:47:55:84:13:8b:3b:45:a0:57:
fc:ac:03:66:0f:b4:0e:06:7f:86:0f:a2:18:57:d4:b5:31:b2:
91:93:aa:03:67:3f:25:23:7b:fa:84:2c:9e:c1:b7:8b:7d:70:
4b:54:d2:74:d1:f8:60:5e:fb:75:26:79:f9:f6:54:07:6c:d7:
94:ae:2e:8c:13:e5:f4:f1:d1:66:14:8b:12:c5:ba:a0:d3:09:
87:6f:3d:09:f5:40:07:d3:a1:57:80:03:78:6b:4b:15:1f:d3:
7b:57:e9:46:2b:86:30:4b:4b:f1:88:a4:24:05:ec:4f:e6:c2:
96:7c:f5:d8:bb:37:7d:7b:47:76:75:3c:2c:3f:d7:c8:8c:68:
9f:6c:2f:ea:8f:2b:d9:ac:72:5f:3d:0f:29:cb:de:9e:c5:a2:
b9:0e:8b:d4:af:9b:d2:76:9f:d4:40:1a:14:4a:da:c4:6e:d1:
8f:53:f1:a9:d7:ce:84:2c:84:78:62:01:23:be:9f:47:ae:ec:
5f:7f:b3:32:d3:41:54:3d:31:16:61:0a:81:ee:ee:ec:05:63:
73:27:ef:d3:5b:0e:af:b9:3f:9d:6f:85:5a:77:a2:7c:3c:03:
1d:71:82:e8:06:cf:63:e9:bd:f1:93:56:c2:fc:a9:a0:c3:66:
10:2b:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:29 2026 by rpki-client