Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/uEzMp8gZyoHebkBdiY9KRs9lacE.asa
File: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (raw, json)
Hash identifier: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=
Subject key identifier: B8:4C:CC:A7:C8:19:CA:81:DE:6E:40:5D:89:8F:4A:46:CF:65:69:C1
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019CC2CB91AE578C9BF60FF4C74429424EFC
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/uEzMp8gZyoHebkBdiY9KRs9lacE.asa
Signing time: Fri 06 Mar 2026 10:57:26 +0000
ASPA not before: Fri 06 Mar 2026 10:57:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201503
Providers: AS: 3292
AS: 3308
AS: 31027
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:cb:91:ae:57:8c:9b:f6:0f:f4:c7:44:29:42:4e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Mar 6 10:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84ccca7c819ca81de6e405d898f4a46cf6569c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:ed:12:c4:e4:20:5a:37:47:cd:ea:3f:25:
96:a2:4a:56:ec:f4:fa:25:4c:38:76:0b:f9:94:40:
0d:18:58:5b:dd:48:0f:4c:25:64:88:84:74:2b:25:
ec:fd:b4:58:b6:dd:71:69:c4:60:ea:12:5e:70:3f:
52:11:ed:aa:06:2a:70:19:d5:0a:1b:e2:c3:8c:6c:
da:ba:7e:4e:3e:47:81:e5:29:a2:56:25:20:54:7b:
42:43:4d:75:fa:d8:e1:f2:a1:53:7c:8a:04:42:ab:
39:00:e3:1c:44:a2:c4:97:8d:ef:6e:53:b1:58:4d:
46:17:91:3d:7a:70:49:56:b6:d6:2b:b3:40:72:ad:
66:3f:2f:a3:04:63:07:70:48:18:76:08:1f:7c:e5:
bc:49:99:90:54:e4:b6:2c:65:8b:dd:1b:1e:46:e4:
37:ff:d8:d4:a2:70:65:64:cd:5f:dc:2f:02:85:43:
9e:28:09:72:fd:37:a4:37:ba:cc:12:63:6b:2b:82:
c6:e2:49:05:c2:cb:1f:fe:f4:73:b3:c0:ca:bc:0c:
c5:08:a7:4d:09:3b:5d:1d:e1:0b:cf:69:23:1c:a5:
e6:f7:3b:7f:ea:63:b8:80:59:2f:07:d9:d8:43:bb:
2e:de:00:f4:e2:a5:b7:ce:63:37:b9:f3:75:e0:95:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:CC:A7:C8:19:CA:81:DE:6E:40:5D:89:8F:4A:46:CF:65:69:C1
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/uEzMp8gZyoHebkBdiY9KRs9lacE.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201503
Signature Algorithm: sha256WithRSAEncryption
8b:a1:a9:4a:0a:f6:20:84:48:f1:1a:0d:4b:ad:0d:5a:55:f8:
3a:bb:5d:04:36:1d:d3:01:60:36:4a:1e:0f:26:7e:a1:0d:c0:
b8:fe:bd:51:14:a3:fb:57:17:be:0f:56:14:3d:90:6b:5b:0a:
3f:a1:08:3f:62:e2:99:59:01:df:79:75:b2:ef:b3:70:98:4d:
e7:1f:c5:76:4c:89:7d:1c:15:05:ed:7c:36:c3:01:5d:bb:28:
fd:34:f8:5c:be:12:82:27:07:bb:80:7d:d2:99:3a:bc:65:b3:
4e:74:51:e0:52:bc:6f:38:9d:8a:92:1a:48:32:89:b7:80:97:
5c:e3:80:c5:45:ff:64:de:5d:26:a1:08:7c:ea:c3:5d:19:e3:
34:f2:78:95:35:76:55:cc:0b:53:b4:f0:dd:c6:69:1a:47:4f:
a1:c6:c9:e0:f8:0f:09:db:52:38:2e:49:34:8b:9a:e1:53:f1:
07:6f:d6:b2:47:a7:55:ed:1f:0b:5e:e1:f5:20:b2:6b:64:67:
b4:b3:ac:16:cc:3a:90:d8:ea:fd:e0:d6:a7:99:92:63:5f:74:
3f:18:12:75:48:07:df:fe:cc:44:72:58:59:4a:16:ba:89:31:
db:e8:53:a7:73:fa:35:0f:b1:85:8c:08:98:bf:13:23:f8:d5:
af:6e:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:52:46 2026 by rpki-client