Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/s8rf2tML831KhZ_f-0fAXEJkgew.asa
File: s8rf2tML831KhZ_f-0fAXEJkgew.asa (raw, json)
Hash identifier: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=
Subject key identifier: B3:CA:DF:DA:D3:0B:F3:7D:4A:85:9F:DF:FB:47:C0:5C:42:64:81:EC
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019DB9B6518D4BD7990D59F788E78F5DE669
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/s8rf2tML831KhZ_f-0fAXEJkgew.asa
Signing time: Thu 23 Apr 2026 09:40:26 +0000
ASPA not before: Thu 23 Apr 2026 09:40:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215442
Providers: AS: 35819
AS: 39386
AS: 43766
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:b6:51:8d:4b:d7:99:0d:59:f7:88:e7:8f:5d:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Apr 23 09:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3cadfdad30bf37d4a859fdffb47c05c426481ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:25:d4:42:6a:54:6c:8c:e1:c3:02:24:e4:
72:60:fa:c5:22:63:4a:d6:76:8f:a6:36:e5:a8:b1:
30:2a:7f:71:e6:64:2d:c5:42:12:62:05:2c:e7:a0:
e4:3f:e8:6a:19:09:cb:53:97:b8:82:da:03:c0:0b:
19:54:c2:03:53:a6:4f:8d:08:2b:72:46:33:6c:e3:
d6:73:ae:d6:6b:cc:99:3c:e9:ac:43:e2:88:ed:6c:
71:95:f8:1a:aa:1f:8e:99:29:27:22:ae:b1:96:94:
7b:a0:7c:15:dd:44:f8:6c:e2:a9:2e:cc:3f:e6:35:
3c:96:c3:39:bb:a5:21:8f:93:49:ca:fc:53:be:6b:
66:81:b2:5b:66:41:e8:82:90:9f:16:bb:9d:e5:d6:
c8:0e:b9:0c:25:6a:14:d9:57:7e:89:47:f1:92:75:
ef:11:d8:d7:db:3b:21:33:c9:04:36:e8:b8:ca:5e:
c3:16:9b:5a:76:35:d0:e9:76:50:17:53:11:a8:5c:
0f:e2:b7:ae:f4:d6:83:e3:a4:bc:3a:81:08:9e:c8:
ca:1c:93:31:ab:87:c9:dd:f1:eb:ba:49:7c:94:d6:
12:22:56:f7:f9:31:65:2e:db:42:e0:b8:71:1b:22:
78:01:35:f2:1d:6e:9d:64:3f:84:a4:3a:99:29:a8:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CA:DF:DA:D3:0B:F3:7D:4A:85:9F:DF:FB:47:C0:5C:42:64:81:EC
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/s8rf2tML831KhZ_f-0fAXEJkgew.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215442
Signature Algorithm: sha256WithRSAEncryption
7d:d0:16:b2:e2:01:ae:8b:27:97:3c:e6:4e:89:3c:fb:dc:7f:
81:6d:87:8b:03:86:1e:dc:24:62:7f:dc:84:e1:cb:e7:49:38:
23:d2:d1:d6:17:c5:84:b0:74:0b:da:6b:4f:ef:42:ed:d3:00:
41:00:3c:88:4f:5c:b3:79:9a:6a:da:46:17:f5:39:a1:fb:77:
ea:2f:11:8b:88:a2:e3:13:e1:6a:2f:73:30:7e:d8:56:2a:d4:
28:cc:18:94:39:73:f6:fb:db:7a:a6:47:53:ac:cf:63:21:a8:
a2:5a:6c:89:7a:a4:2d:b1:db:b7:b2:1c:d9:ed:b0:95:2b:9f:
52:f2:26:40:db:65:12:7d:1f:57:3f:4e:a7:ab:57:01:43:6e:
ea:aa:5c:04:71:4d:dc:d6:28:d2:43:83:d7:10:4f:7f:52:b3:
36:87:84:b3:40:e9:19:5e:fb:ac:8e:8d:2f:27:3c:86:88:ac:
db:72:37:09:b2:1f:d7:48:4b:a3:5e:36:9d:85:85:c6:da:57:
1f:64:a8:03:7e:18:41:c5:0f:a7:c3:84:40:14:c8:c3:12:5a:
a8:fa:59:65:12:e6:e7:85:08:04:89:d9:fc:cd:b0:19:8f:1d:
87:07:39:a6:80:37:1f:58:67:c9:8c:1c:b0:24:5f:39:30:eb:
f9:0e:b2:f2
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ25tlGNS9eZDVn3iOePXeZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMTc3YmY3ZDA0MzU0NDFkMWFkYjE0OGEyMmNlZmUxZDZk
Y2MwZmIwHhcNMjYwNDIzMDk0MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2NhZGZkYWQzMGJmMzdkNGE4NTlmZGZmYjQ3YzA1YzQyNjQ4MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDcl1EJqVGyM4cMCJORyYPrFImNK
1naPpjblqLEwKn9x5mQtxUISYgUs56DkP+hqGQnLU5e4gtoDwAsZVMIDU6ZPjQgr
ckYzbOPWc67Wa8yZPOmsQ+KI7Wxxlfgaqh+OmSknIq6xlpR7oHwV3UT4bOKpLsw/
5jU8lsM5u6Uhj5NJyvxTvmtmgbJbZkHogpCfFrud5dbIDrkMJWoU2Vd+iUfxknXv
EdjX2zshM8kENui4yl7DFptadjXQ6XZQF1MRqFwP4reu9NaD46S8OoEInsjKHJMx
q4fJ3fHrukl8lNYSIlb3+TFlLttC4LhxGyJ4ATXyHW6dZD+EpDqZKaizXwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLPK39rTC/N9SoWf3/tHwFxCZIHsMB8GA1UdIwQY
MBaAFF4Xe/fQQ1RB0a2xSKIs7+HW3MD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGhkNzk5QkRWRUhScmJGSW9penY0ZGJjd1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83Njg3YjUtMzQ5OC00MzVkLTk1YzQt
NjI0NzhmMGRhODA3LzEvczhyZjJ0TUw4MzFLaFpfZi0wZkFYRUprZ2V3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83Njg3YjUtMzQ5OC00MzVkLTk1YzQtNjI0NzhmMGRhODA3
LzEvWGhkNzk5QkRWRUhScmJGSW9penY0ZGJjd1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNJkjANBgkqhkiG
9w0BAQsFAAOCAQEAfdAWsuIBrosnlzzmTok8+9x/gW2HiwOGHtwkYn/chOHL50k4
I9LR1hfFhLB0C9prT+9C7dMAQQA8iE9cs3maatpGF/U5oft36i8Ri4ii4xPhai9z
MH7YVirUKMwYlDlz9vvbeqZHU6zPYyGoolpsiXqkLbHbt7Ic2e2wlSufUvImQNtl
En0fVz9Op6tXAUNu6qpcBHFN3NYo0kOD1xBPf1KzNoeEs0DpGV77rI6NLyc8hois
23I3CbIf10hLo142nYWFxtpXH2SoA34YQcUPp8OEQBTIwxJaqPpZZRLm54UIBInZ
/M2wGY8dhwc5poA3H1hnyYwcsCRfOTDr+Q6y8g==
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:05 2026 by rpki-client