Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/1--FRY1CjawLnslfsBcAkrouqU6s.asa
File: 1--FRY1CjawLnslfsBcAkrouqU6s.asa (raw, json)
Hash identifier: NFM53UpFWBl2wcWeqeLFtEIb13ge6QGgn48A2dxQblk=
Subject key identifier: FB:E1:51:63:50:A3:6B:02:E7:B2:57:EC:05:C0:24:AE:8B:AA:53:AB
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019DD5B1BF4722BD788FA9282FD485BBB9B7
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/1--FRY1CjawLnslfsBcAkrouqU6s.asa
Signing time: Tue 28 Apr 2026 20:04:49 +0000
ASPA not before: Tue 28 Apr 2026 20:04:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 42184
Providers: AS: 174
AS: 1299
AS: 3257
AS: 3320
AS: 3356
AS: 33891
AS: 55002
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:b1:bf:47:22:bd:78:8f:a9:28:2f:d4:85:bb:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Apr 28 20:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbe1516350a36b02e7b257ec05c024ae8baa53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:4c:df:f4:3a:07:e5:0f:82:71:e3:2b:9e:
7e:00:65:70:cc:ab:4e:a1:56:ac:f5:1a:51:e0:1d:
6c:af:bc:77:bc:74:24:d6:36:de:48:37:10:90:9f:
f0:bc:f9:5b:31:9b:39:57:8a:0e:dd:77:6e:2f:5a:
1f:ec:75:50:2c:aa:27:4e:fd:51:bd:7b:30:33:8c:
c8:c2:c2:bb:c8:b4:d2:7f:0a:bd:5a:81:b5:c3:7f:
1a:fa:1a:0c:b3:2c:c7:f1:b7:7e:7c:a9:5b:f3:61:
06:c4:71:93:44:e0:cb:93:d7:eb:22:ce:78:f6:15:
63:fa:40:85:34:f2:0e:8f:9f:45:9d:9b:23:b7:ba:
7e:8a:3a:7c:74:04:f4:6c:64:0d:88:0e:89:19:d9:
46:52:03:e5:09:b9:4c:0f:18:61:fa:fd:3e:96:52:
5f:ea:59:20:22:2c:c1:f0:90:f1:d3:1a:5a:7e:d3:
bd:eb:1d:9d:df:2f:c4:9b:80:45:78:e5:ac:e8:f0:
12:5a:d5:e7:0e:33:4c:b8:fd:6b:f5:71:1c:93:20:
63:38:26:3b:44:cd:eb:c8:ac:f5:17:cf:8c:5b:73:
cd:9d:88:6c:bf:7a:1a:23:2a:9b:e3:11:f7:f0:b7:
ef:f0:07:d4:7c:73:b6:ff:6a:47:34:ab:7b:07:56:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E1:51:63:50:A3:6B:02:E7:B2:57:EC:05:C0:24:AE:8B:AA:53:AB
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/1--FRY1CjawLnslfsBcAkrouqU6s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42184
Signature Algorithm: sha256WithRSAEncryption
2e:3e:74:4e:ab:2e:97:38:37:0f:c2:71:21:88:fa:9b:c0:3a:
87:1d:cf:e3:64:b3:ed:eb:3f:72:04:6c:2d:34:86:e9:e3:21:
66:02:73:e9:0f:a7:87:2b:8c:ce:be:ea:46:5d:d5:c7:c2:a7:
55:0f:bb:4d:2f:52:e4:85:23:91:36:69:1e:c3:17:85:c3:51:
86:01:ec:93:44:8e:75:87:cb:6e:35:95:85:4c:87:d9:08:34:
8b:a3:9e:0c:bd:11:27:77:ad:6d:ca:c2:f5:b0:0e:ce:77:fe:
71:93:15:8f:2e:eb:46:88:91:f8:25:01:d2:82:20:0d:35:41:
87:73:bb:56:23:de:9f:67:f5:da:90:e2:6d:bb:92:b3:28:28:
12:6f:c5:8b:c5:dc:13:17:66:42:c2:8f:49:53:f9:76:14:65:
d7:57:d6:3c:0a:e6:2c:d3:08:48:4d:1b:f8:30:0e:c1:c4:10:
71:14:5a:d7:35:7c:6f:d9:e7:a4:10:67:b3:2d:59:da:12:ee:
12:2a:92:a2:ad:cd:72:f1:08:7d:ce:d3:3f:ec:13:c0:43:92:
7e:c3:0c:96:40:26:f6:11:b0:05:19:e3:a9:20:a4:41:55:e6:
55:14:0c:1f:84:35:12:96:b0:0d:94:5a:82:f2:cf:48:a6:59:
6b:c7:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:06 2026 by rpki-client