Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa
File: HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa (raw, json)
Hash identifier: HhV1R0DUoNL9mOEHeM2zMa8hWDwUyMsVfzVpdgupYCM=
Subject key identifier: 1F:34:A2:43:97:16:8B:8F:69:84:75:EC:A9:46:CA:AF:BC:0A:E9:44
Certificate issuer: /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial: 019FEB60194B79B7AAFFDBFE40C8D5487658
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa
Signing time: Mon 10 Aug 2026 11:12:51 +0000
ASPA not before: Mon 10 Aug 2026 11:12:51 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201995
Providers: AS: 8455
AS: 51088
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:60:19:4b:79:b7:aa:ff:db:fe:40:c8:d5:48:76:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Validity
Not Before: Aug 10 11:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f34a24397168b8f698475eca946caafbc0ae944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:2f:30:17:83:7c:a2:72:0e:e7:8d:12:93:
fc:ee:b6:6b:eb:43:2f:18:86:ce:99:41:bc:55:73:
aa:18:5b:68:5d:d2:1e:20:1d:8c:a6:51:f0:e5:95:
5f:d0:d1:b5:ae:98:85:a0:9a:f9:75:66:f5:f1:f3:
ab:67:7b:40:49:22:2e:00:c2:cc:10:fa:01:d3:9b:
48:ae:6a:05:7d:37:ad:00:d1:93:8b:a4:06:67:f4:
db:0d:a0:83:2c:25:52:1b:12:cf:0e:a8:7a:68:dd:
24:bd:bc:2f:57:5f:4b:37:30:4f:f3:a2:8b:a9:4c:
96:3e:e4:4b:0f:56:61:e7:93:a5:ac:bc:57:ca:10:
b4:61:31:c1:57:21:05:7e:96:25:0e:7e:85:d7:ac:
a2:a3:13:25:ba:e3:e5:34:8d:76:a0:58:aa:eb:b4:
05:91:32:5d:ee:17:4e:a0:4e:2d:02:e2:45:49:5e:
b2:5b:77:b8:28:7b:c3:37:04:f9:c3:2c:db:a9:d1:
b3:28:76:18:e9:7c:3d:a5:86:27:fd:32:44:b5:23:
e6:62:45:72:34:ef:16:02:2c:47:88:68:80:49:b6:
44:77:2f:9a:93:f4:bd:15:0d:6f:3b:bf:d1:bf:bd:
ae:ab:5c:e3:bd:b3:84:24:70:07:28:25:03:b3:38:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:A2:43:97:16:8B:8F:69:84:75:EC:A9:46:CA:AF:BC:0A:E9:44
X509v3 Authority Key Identifier:
keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/HzSiQ5cWi49phHXsqUbKr7wK6UQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201995
Signature Algorithm: sha256WithRSAEncryption
02:6f:c6:92:7e:de:a3:c1:55:27:00:3b:ca:24:0a:6d:17:57:
e2:7f:d5:c5:48:de:e5:de:f8:c2:b4:59:58:ee:9c:9e:bd:a8:
ea:35:d0:aa:5b:38:4e:e6:ef:9b:c0:4d:43:89:7c:33:a4:84:
55:48:53:5a:bc:3c:a6:19:2f:f3:f1:07:d1:b8:00:51:fc:30:
7d:eb:f4:6b:81:a8:9b:aa:08:90:3c:67:29:27:a8:1f:84:ff:
6d:b3:8f:87:a2:b7:59:75:4b:a0:5e:71:ef:a7:9e:4a:7b:87:
98:a8:2f:c6:21:82:14:35:48:1e:d9:c1:de:39:d6:7f:e0:9c:
7c:bf:71:5a:9a:6b:dc:db:92:f6:66:ec:89:f8:f3:bb:94:47:
f9:2f:ce:89:70:59:f9:8d:82:07:cb:02:fa:d8:df:ae:55:7a:
64:89:6e:03:88:ed:e1:84:f8:2d:61:d7:5a:28:ef:7d:64:69:
b0:81:63:81:dd:45:16:ac:ec:46:9a:d4:7d:bd:56:9c:77:3e:
a0:e1:70:90:ad:84:8c:b0:1c:d2:43:e0:c8:43:42:f7:c5:a0:
15:c4:a9:78:2d:06:d7:99:51:8a:da:4e:fc:f7:49:84:9a:09:
b2:d3:92:cc:65:ec:86:76:38:fc:9a:33:8c:f4:5f:a8:71:2b:
42:05:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:22 2026 by rpki-client