Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/OnKBtwyvSQXenD2TFYRv7-EZThE.asa
File: OnKBtwyvSQXenD2TFYRv7-EZThE.asa (raw, json)
Hash identifier: BYl5J46d6e9LW3J6fkLa75ROxvNZoL/fmWrmEBx/+H8=
Subject key identifier: 3A:72:81:B7:0C:AF:49:05:DE:9C:3D:93:15:84:6F:EF:E1:19:4E:11
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019CDD5BDCE8ED253DD80EB52D4D8B55F811
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/OnKBtwyvSQXenD2TFYRv7-EZThE.asa
Signing time: Wed 11 Mar 2026 14:45:10 +0000
ASPA not before: Wed 11 Mar 2026 14:45:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 205845
Providers: AS: 1299
AS: 3320
AS: 35280
AS: 44530
AS: 49028
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:5b:dc:e8:ed:25:3d:d8:0e:b5:2d:4d:8b:55:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Mar 11 14:45:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a7281b70caf4905de9c3d9315846fefe1194e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:f9:36:10:0c:3f:79:0b:a5:54:8a:63:15:
f3:5f:a7:cf:ed:6e:ab:ec:68:60:0a:9a:a6:bc:d2:
6d:20:a8:71:8c:ee:0c:6b:82:95:ab:88:3f:1a:89:
3d:bf:0b:24:0a:0f:c7:15:f8:bd:72:79:2d:c5:f2:
dd:da:80:84:95:32:8c:72:d6:e3:f0:10:72:c2:b0:
94:af:34:92:d6:7c:08:a6:3e:9e:0a:26:28:82:1f:
4a:e8:a5:25:86:a9:7a:67:42:5a:93:da:53:33:fe:
c5:d6:43:1c:28:88:47:94:bf:cd:a3:83:71:c0:ce:
91:c4:5e:50:b3:4e:71:d7:57:79:5a:9f:9d:a2:59:
aa:b6:13:df:55:34:f7:0b:84:88:5c:43:47:76:ac:
35:94:75:ee:e0:7f:bd:0a:fd:d7:06:1b:42:a6:bc:
63:9c:5a:7c:25:49:ca:88:e0:1f:2a:d5:e6:83:0d:
03:b7:5c:e9:f6:64:54:ed:1a:8b:6c:83:05:cc:e0:
91:8b:0c:80:fc:ef:0a:04:ed:85:60:aa:49:fd:02:
47:58:29:d8:72:8e:5f:2d:a2:49:6b:e0:06:d1:79:
d0:53:8b:3c:38:18:6b:c8:df:3f:12:15:c9:62:e5:
c7:4b:5c:18:5d:39:9c:6c:8e:45:7e:3b:f1:ac:64:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:81:B7:0C:AF:49:05:DE:9C:3D:93:15:84:6F:EF:E1:19:4E:11
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/OnKBtwyvSQXenD2TFYRv7-EZThE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205845
Signature Algorithm: sha256WithRSAEncryption
4b:fb:f5:d1:ee:8d:df:3d:4a:c4:77:b1:1a:b6:a4:0a:5e:c0:
12:5e:9c:94:b6:82:01:d2:d5:60:66:87:32:f1:85:3c:59:6a:
ae:81:e9:02:87:7b:50:cd:70:0c:83:26:34:c7:a4:da:2b:ec:
e1:3b:6c:57:8d:a4:97:9c:d5:ff:52:0a:7b:ea:8e:1d:85:89:
49:5b:91:29:e4:ff:a2:20:a2:1e:de:3f:8d:cf:6e:de:a5:2f:
16:30:65:ca:2e:7b:d5:56:e5:d6:42:8d:c9:e1:4d:2a:7d:97:
49:1b:ea:a5:f2:87:d9:2d:3e:8b:ed:c4:4f:28:17:ec:dd:b5:
44:74:a2:58:0a:47:c3:3e:7a:d2:75:45:1e:f3:b4:c3:a5:48:
7f:bc:40:f3:b8:2a:65:4e:eb:47:86:5e:ed:34:31:6f:60:78:
89:b1:86:e7:79:54:a3:82:34:6c:ae:4f:fc:a7:5c:8a:e6:11:
ac:3c:87:db:d5:ee:0d:78:bc:45:a7:19:11:05:2d:b1:c6:fe:
ff:fb:d7:b4:89:b7:90:43:ea:04:81:63:c2:97:38:33:ec:30:
df:53:63:d7:63:80:3c:fe:5f:93:aa:d2:c1:6b:cc:96:2f:e5:
45:a1:16:dd:cb:02:82:c1:ae:f5:6c:13:ee:f9:ed:72:8c:fe:
7b:9c:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:44 2026 by rpki-client