Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/IvpEH6hd1qJi0dDCHitCwtgqWwA.asa
File: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (raw, json)
Hash identifier: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=
Subject key identifier: 22:FA:44:1F:A8:5D:D6:A2:62:D1:D0:C2:1E:2B:42:C2:D8:2A:5B:00
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019CD956CF43FB61EA29FF0C5C6512C2E614
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/IvpEH6hd1qJi0dDCHitCwtgqWwA.asa
Signing time: Tue 10 Mar 2026 20:01:10 +0000
ASPA not before: Tue 10 Mar 2026 20:01:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 2852
Providers: AS: 1853
AS: 2607
AS: 6461
AS: 6762
AS: 6939
AS: 20965
AS: 21320
AS: 60606
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d9:56:cf:43:fb:61:ea:29:ff:0c:5c:65:12:c2:e6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Mar 10 20:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fa441fa85dd6a262d1d0c21e2b42c2d82a5b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:3a:28:54:f0:6a:de:15:cd:22:90:0e:f0:
87:0c:97:1a:45:a0:24:27:cd:3b:d3:46:c1:f4:f2:
70:4e:25:54:3b:69:63:02:b5:34:95:5d:f8:b9:f4:
67:6f:cc:69:f3:6e:80:95:bf:ae:60:a1:a0:26:24:
d4:25:d9:66:b6:77:41:01:f5:84:ef:16:12:ab:10:
c4:78:3d:e1:1b:12:62:55:86:1b:69:af:23:f6:b2:
31:76:90:a6:c6:4b:f2:b0:7c:16:6f:b1:1f:a1:41:
fa:3f:3b:cb:d4:42:87:85:19:c6:60:71:d2:f5:4e:
4a:77:3a:dd:57:ba:17:54:ca:0b:3c:b7:ee:58:16:
69:86:fc:47:e4:08:21:22:c0:a6:49:a3:8b:39:c0:
1a:06:b9:7d:77:28:4d:6f:41:69:bb:a7:0e:49:d2:
d7:2e:33:c4:6a:bd:85:08:46:f6:0b:c4:0f:f4:00:
9f:5e:7b:ab:91:d1:8e:ba:47:e9:67:22:25:20:56:
9d:f8:05:b6:c5:47:0b:8c:9f:e2:f9:97:af:47:ab:
91:67:38:8a:b2:20:22:5b:76:56:70:92:3d:16:46:
e5:72:60:81:19:ce:2d:bb:16:3b:c1:f1:df:cd:a6:
26:92:f4:56:e6:a9:c3:3b:97:20:83:02:1a:c3:2a:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FA:44:1F:A8:5D:D6:A2:62:D1:D0:C2:1E:2B:42:C2:D8:2A:5B:00
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/IvpEH6hd1qJi0dDCHitCwtgqWwA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2852
Signature Algorithm: sha256WithRSAEncryption
3e:1c:67:c4:1e:8b:b7:fc:65:cb:b8:57:b5:e6:86:2f:2d:7c:
b9:14:e3:19:8a:81:45:12:45:2a:41:df:35:da:44:5f:0a:83:
17:5d:84:fc:07:3c:5c:e0:15:84:85:92:f8:36:46:13:0a:6b:
31:bd:67:ef:69:e8:f5:5b:20:10:be:85:07:05:1f:13:db:7d:
d0:cc:41:01:33:bb:b9:db:20:80:f3:08:da:5e:9e:2e:b5:ea:
15:fd:53:ed:96:8d:df:cd:32:c7:c0:99:fc:68:3c:2f:bf:ac:
1e:73:36:ee:8b:93:37:cc:54:8f:be:5b:2a:17:14:d7:51:f1:
7c:2c:4a:e1:9b:b1:75:d2:0e:13:20:55:9a:fc:28:52:d1:be:
20:da:24:49:ad:ef:69:d1:9a:98:16:92:35:a2:1c:f1:46:df:
d5:84:73:e5:06:e7:b8:42:34:0a:be:c9:5d:b4:b7:ea:c5:9c:
56:18:e3:23:03:48:65:40:41:57:bb:f0:26:78:f8:ff:94:7e:
5f:e5:c7:f1:32:28:9c:a7:70:c8:f9:40:ca:b3:99:2f:66:4e:
ca:e5:9b:1a:8d:e6:e5:8b:d8:16:e8:8c:e0:92:b1:7d:65:bd:
6f:74:a8:89:60:66:b1:41:b7:ec:75:e5:e8:5d:96:4b:10:94:
24:04:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:45 2026 by rpki-client