Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/hXKR5zejn3_Hil5KhYu5iVmfXJI.asa
File: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (raw, json)
Hash identifier: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=
Subject key identifier: 85:72:91:E7:37:A3:9F:7F:C7:8A:5E:4A:85:8B:B9:89:59:9F:5C:92
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 019F03EAEFBC826F2088C27C653926F9B326
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/hXKR5zejn3_Hil5KhYu5iVmfXJI.asa
Signing time: Fri 26 Jun 2026 12:32:36 +0000
ASPA not before: Fri 26 Jun 2026 12:32:36 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214915
Providers: AS: 3214
AS: 6939
AS: 24961
AS: 50629
AS: 214862
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:ea:ef:bc:82:6f:20:88:c2:7c:65:39:26:f9:b3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Jun 26 12:32:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=857291e737a39f7fc78a5e4a858bb989599f5c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:75:1c:1e:b6:e2:55:cf:b4:09:4b:cd:2f:
83:02:19:74:ea:ca:e4:ec:19:f2:d5:7f:a9:f4:e7:
bc:c4:71:bd:64:3c:18:f2:18:e4:60:cf:64:fb:69:
8a:5c:24:a8:ad:c0:ac:5e:8a:4f:e1:72:05:e8:cb:
84:35:00:c5:6e:8b:e7:0c:1a:50:00:54:f0:92:3b:
20:70:90:fa:d6:b6:6a:02:e9:91:16:fa:72:b2:07:
e9:7a:c2:44:56:04:e9:68:ed:58:d0:b2:8f:d7:4d:
9e:41:f9:7c:35:ba:98:fb:d1:ee:ae:41:2e:07:bf:
ca:d0:73:45:a5:55:ae:38:65:88:37:17:cb:40:e1:
49:02:29:54:c6:26:25:2d:58:78:6c:c7:f4:99:8e:
44:8e:28:86:e9:b1:b2:36:ce:d3:53:ca:cf:43:32:
94:39:12:be:7b:7c:15:8e:88:cf:b0:06:dd:40:5a:
7b:4f:95:b3:1c:af:ef:8f:8b:0a:f5:e6:3f:06:52:
94:da:56:92:33:eb:fc:bc:8b:9f:ce:b9:ab:43:9f:
33:06:27:43:c6:7c:4e:07:8c:96:7d:07:fb:dd:1a:
35:ec:f8:e8:32:fd:c5:63:ad:87:77:71:81:01:21:
20:c5:d6:09:a0:e6:a9:26:d8:a0:0f:78:ef:e3:96:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:91:E7:37:A3:9F:7F:C7:8A:5E:4A:85:8B:B9:89:59:9F:5C:92
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/hXKR5zejn3_Hil5KhYu5iVmfXJI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214915
Signature Algorithm: sha256WithRSAEncryption
4f:03:00:e5:e9:83:c2:6e:db:9e:3d:fa:87:25:a7:62:bf:ad:
7c:5b:b3:92:a7:7f:78:38:fe:4b:44:19:08:c6:27:56:5c:c9:
c7:f4:28:85:82:6b:47:5e:f4:7a:5b:95:43:91:ee:53:23:36:
2c:7d:e8:15:29:79:86:65:98:9c:71:45:3b:28:59:36:66:22:
82:d8:80:d4:ae:8f:79:ab:12:00:83:0e:a4:20:85:da:7a:01:
9f:d3:87:9a:8e:a3:0a:c3:13:ab:79:97:9b:48:2c:45:4a:b0:
99:2b:e6:6c:bb:b4:44:7a:76:8c:81:ae:0e:d1:15:b7:0b:70:
6a:21:ab:11:d8:29:b0:7b:0c:d3:2c:34:ea:a9:11:c3:03:78:
04:1e:e4:13:36:3e:71:97:fd:2a:d5:b9:a4:74:55:41:dc:da:
f5:76:dd:13:14:0a:27:b8:30:19:36:3f:cd:7b:a0:a1:0f:13:
f2:23:ce:b5:6b:f0:1c:52:ab:b1:02:dc:34:00:34:83:9a:b0:
58:e1:05:27:0d:45:a6:df:6a:20:d4:f6:75:48:15:3b:b7:fb:
59:5b:55:4e:5f:55:b0:c3:3d:41:2d:3a:f4:06:0b:82:ea:63:
2e:07:60:3c:ec:e0:fa:ec:45:25:9c:6b:91:0f:3d:09:7c:ad:
71:85:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:30 2026 by rpki-client