Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/eRzoAPCehzYUsTKWzumpWnRkGv4.asa
File: eRzoAPCehzYUsTKWzumpWnRkGv4.asa (raw, json)
Hash identifier: XuGTrIZBYEhP0vD01NV66qn1i9p1ktzdlWy+jaqHixE=
Subject key identifier: 79:1C:E8:00:F0:9E:87:36:14:B1:32:96:CE:E9:A9:5A:74:64:1A:FE
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 019CE313CACB09150580EC2E3F60B704709F
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/eRzoAPCehzYUsTKWzumpWnRkGv4.asa
Signing time: Thu 12 Mar 2026 17:24:10 +0000
ASPA not before: Thu 12 Mar 2026 17:24:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214915
Providers: AS: 3214
AS: 6939
AS: 24961
AS: 50629
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:13:ca:cb:09:15:05:80:ec:2e:3f:60:b7:04:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Mar 12 17:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=791ce800f09e873614b13296cee9a95a74641afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:a5:28:f8:55:a3:c8:8e:1a:61:c7:23:96:
8c:e7:1f:5a:19:3a:af:f4:47:3f:28:2c:46:9b:4d:
db:f1:35:f7:6a:86:ff:36:51:37:cc:c3:b9:bb:57:
6d:4d:2a:22:9c:e6:15:61:db:dc:df:81:56:e2:ca:
7d:a4:c8:e7:e7:6f:82:78:52:24:5b:7f:9f:16:b1:
25:d6:b3:a9:44:59:99:2f:a8:8c:df:b6:bd:7a:5a:
79:d1:e1:75:01:69:a1:79:dc:43:37:2e:6b:d8:09:
bd:a5:ce:da:44:2d:16:98:db:6c:f6:d1:43:8d:e2:
6e:cc:8c:bc:e4:d7:84:df:c0:20:73:e9:48:d7:4e:
76:09:a4:72:f1:8e:e3:fa:c4:b9:c9:46:fe:2c:f0:
52:b4:71:0e:2e:ff:3b:fa:20:60:b0:02:22:4f:c1:
de:ae:6f:81:46:27:8b:19:88:0f:05:56:83:3d:e2:
7e:b4:32:d7:15:e7:c5:8f:76:bd:0c:34:6c:8d:8d:
67:ab:a8:fa:3c:45:8c:f0:1a:ff:b4:72:3d:cf:84:
72:d4:59:b5:ad:34:29:ac:bc:93:d9:32:4b:3e:bb:
be:62:19:39:84:23:dc:42:bb:31:8c:19:79:2c:41:
90:8b:21:b2:17:2d:64:06:8c:9d:2b:ff:90:18:87:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:E8:00:F0:9E:87:36:14:B1:32:96:CE:E9:A9:5A:74:64:1A:FE
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/eRzoAPCehzYUsTKWzumpWnRkGv4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214915
Signature Algorithm: sha256WithRSAEncryption
75:d5:d1:41:1a:0f:b4:73:b9:83:8f:41:da:70:45:b8:d0:0b:
3d:c2:7e:28:ec:b8:f0:0a:95:c1:39:50:a7:3d:8a:55:93:35:
9a:02:ae:e1:f3:fa:90:ae:1a:da:e1:89:44:ff:25:a0:dd:13:
25:6e:ad:52:63:70:8f:2e:26:93:cf:11:ff:21:e5:8b:9f:9a:
09:70:0f:0c:6a:5c:89:bb:57:e9:34:d2:af:6e:bc:47:91:6c:
e0:19:02:c6:e8:d3:89:86:62:ab:c7:8a:5d:b8:6a:dd:ff:7f:
21:0a:37:df:64:39:e4:c1:dc:8f:a3:37:10:a1:69:fa:50:19:
db:36:87:ce:92:aa:51:24:f3:3e:85:e5:ca:37:1d:96:ea:ac:
51:d6:89:c2:bf:75:f6:c5:7f:cc:b4:c0:20:5d:4c:8d:c1:06:
42:1c:4b:c8:19:71:64:5f:18:67:7e:c7:c2:00:01:67:a9:36:
f6:b2:fa:83:bd:77:b8:ac:e0:cd:59:af:74:f7:b0:72:71:d5:
a8:96:15:71:35:94:55:c6:c4:a4:f2:43:b6:8e:b3:ff:d7:e8:
1e:5a:b4:99:a9:1d:81:35:16:28:bc:15:27:9e:6b:75:54:6f:
a7:da:3b:6e:5d:4c:d7:09:76:c8:05:59:24:36:ca:6a:a5:74:
e8:da:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:27:38 2026 by rpki-client