Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/l-eytLgQDESo3Q7U-g8ESB5Ei54.asa
File: l-eytLgQDESo3Q7U-g8ESB5Ei54.asa (raw, json)
Hash identifier: aE0YUeBi5ASRfymXp9SI39+Z6VBwaz/uCSaMfvjqWkY=
Subject key identifier: 97:E7:B2:B4:B8:10:0C:44:A8:DD:0E:D4:FA:0F:04:48:1E:44:8B:9E
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019DB48A7878CF7076336F2935D8D42B0573
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/l-eytLgQDESo3Q7U-g8ESB5Ei54.asa
Signing time: Wed 22 Apr 2026 09:34:26 +0000
ASPA not before: Wed 22 Apr 2026 09:34:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 198150
Providers: AS: 174
AS: 3356
AS: 20764
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:8a:78:78:cf:70:76:33:6f:29:35:d8:d4:2b:05:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Apr 22 09:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97e7b2b4b8100c44a8dd0ed4fa0f04481e448b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:82:ef:db:6a:2b:6f:81:18:84:c1:e4:71:
99:73:cc:d8:63:a9:db:b2:3e:4b:62:e5:87:3c:29:
31:92:76:84:e2:fd:78:fc:89:27:3b:03:4d:a7:ac:
7f:7a:8c:d2:73:73:d0:32:ec:35:87:a4:37:82:81:
b3:bc:39:99:96:c5:ee:b0:53:41:b6:a8:08:ef:fe:
62:20:da:bc:ca:6b:53:dd:bf:0f:07:83:15:fa:fe:
20:1b:66:45:be:37:01:2e:dc:87:63:38:c5:42:df:
1d:5e:a8:b7:8a:aa:46:37:c5:01:7d:4e:42:62:61:
63:de:a0:c5:33:87:f5:cb:77:b4:bb:c8:5c:30:e5:
03:89:c1:53:a2:7e:58:09:d7:48:f8:96:4b:3a:6d:
e5:e1:47:78:ac:f0:31:cb:17:5a:8b:05:f7:7f:84:
a4:83:be:bb:7c:e4:43:98:6e:b8:d9:44:91:fb:1b:
ae:cf:ca:85:bc:1a:fa:9a:c1:68:a3:dd:74:13:29:
3a:40:fe:e1:f7:f5:81:52:68:db:8d:4d:b8:a8:fa:
4d:09:6c:24:6c:91:84:b0:96:d9:42:a3:2d:24:2b:
fe:d9:7a:f0:e2:02:63:08:11:39:ce:5f:2c:cc:f9:
34:60:da:08:94:cc:6e:0c:68:cb:0a:26:5b:5f:12:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:B2:B4:B8:10:0C:44:A8:DD:0E:D4:FA:0F:04:48:1E:44:8B:9E
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/l-eytLgQDESo3Q7U-g8ESB5Ei54.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198150
Signature Algorithm: sha256WithRSAEncryption
70:9a:0c:e7:03:60:6e:7f:09:7c:f6:61:e0:0e:bd:b6:9d:d8:
5d:2c:6d:8c:25:89:06:ce:38:c5:85:f4:f7:d2:04:51:09:ee:
18:a1:48:f3:92:ad:00:a6:49:64:a4:ef:77:18:c2:f6:03:f0:
a9:2d:14:de:a8:fe:4e:af:69:a8:a8:aa:3b:78:ad:26:b0:2c:
df:3f:b9:ee:3f:fb:bd:05:8f:a1:90:cf:a6:a0:24:fc:67:b8:
e0:49:b1:53:9c:b3:21:c7:6d:b3:0e:b1:d6:5c:cf:0d:39:98:
7d:56:b6:20:77:c7:a2:0e:1e:c7:fe:65:7f:78:e5:1b:36:10:
9e:93:cd:c7:01:08:9e:c1:f8:e3:71:57:27:b5:82:83:cf:f7:
a2:35:41:f1:f4:38:15:09:0c:0f:9a:77:b8:81:a3:9e:b4:7e:
c9:1b:92:25:d2:b3:e5:ba:37:42:77:61:58:14:59:59:3e:8a:
31:e4:b4:e2:31:79:18:d6:81:cf:8f:15:c8:b2:7c:04:40:70:
26:d4:14:9b:3c:88:f5:6f:6a:cb:c8:01:13:55:84:6e:69:13:
00:10:36:46:81:e8:57:bb:6e:e9:fa:b1:90:af:c3:f8:7e:ed:
59:35:ce:0a:d2:25:c3:44:45:44:6a:cd:75:89:01:33:02:58:
63:e7:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:53 2026 by rpki-client