Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/H-yLjUcnBU32gfTzCq1c3LA4yww.asa
File: H-yLjUcnBU32gfTzCq1c3LA4yww.asa (raw, json)
Hash identifier: PBQ22jXmW2kScgr9tVTXfL6hDBrDuWL0+iTLcGowRjQ=
Subject key identifier: 1F:EC:8B:8D:47:27:05:4D:F6:81:F4:F3:0A:AD:5C:DC:B0:38:CB:0C
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019EF0DED3048D8AD32A8E64CFE05EC177E1
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/H-yLjUcnBU32gfTzCq1c3LA4yww.asa
Signing time: Mon 22 Jun 2026 19:46:35 +0000
ASPA not before: Mon 22 Jun 2026 19:46:35 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 8283
Providers: AS: 1299
AS: 8455
AS: 15703
AS: 24785
AS: 38930
AS: 57866
AS: 58115
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:de:d3:04:8d:8a:d3:2a:8e:64:cf:e0:5e:c1:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Jun 22 19:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fec8b8d4727054df681f4f30aad5cdcb038cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:bf:98:3d:11:49:7d:ec:fa:64:a9:02:63:
f0:66:e0:f1:03:3c:fd:84:ec:a1:c7:2e:a6:7a:02:
9c:16:a4:89:d3:4e:62:2a:8c:19:a0:93:61:b8:a9:
d2:d7:a5:2c:a2:08:21:d3:bc:9b:48:e8:fe:05:0a:
a7:5e:e5:7f:87:d6:b6:66:84:29:f2:20:88:36:de:
33:91:61:9a:09:a6:82:09:05:78:e8:3f:57:fd:e5:
0d:81:cb:cb:33:65:58:93:18:f2:96:45:56:8f:4b:
50:73:b9:7b:7d:11:27:72:0b:34:df:89:b5:f4:9b:
e9:cc:23:5b:30:70:4b:4a:4d:6d:57:69:36:4a:81:
13:74:d2:df:0f:53:f0:97:96:d8:62:6d:33:85:bf:
49:fe:dd:3f:93:2c:b1:bc:52:b2:b6:c0:80:44:ee:
b2:2a:8b:cc:fe:3e:c0:3d:95:79:5d:f0:12:95:7d:
dc:48:30:44:69:62:93:8d:80:31:ff:40:82:58:35:
97:3c:32:34:cb:0b:00:73:81:39:f3:65:59:76:47:
af:c3:49:23:e6:30:2f:2b:2f:1c:9e:2c:f8:80:5b:
45:74:6d:f6:33:0c:0d:1c:21:99:05:59:6d:35:58:
ee:72:e0:63:66:5c:b5:12:45:41:07:36:03:12:7d:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EC:8B:8D:47:27:05:4D:F6:81:F4:F3:0A:AD:5C:DC:B0:38:CB:0C
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/H-yLjUcnBU32gfTzCq1c3LA4yww.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8283
Signature Algorithm: sha256WithRSAEncryption
00:e9:91:b4:6d:b3:1d:4b:f9:3f:e3:22:39:bb:52:64:a2:f6:
bc:83:40:de:df:80:f4:a3:0b:a0:25:83:ff:a8:24:9c:b6:03:
52:26:b0:51:68:4e:07:f1:52:26:4f:8c:15:54:91:e9:76:a0:
f7:1c:ae:3b:cf:e6:9c:57:f7:a4:39:9b:84:c7:14:23:d5:5b:
a8:15:aa:bd:90:fe:6b:ac:68:6c:95:74:ce:a6:ec:29:c9:ab:
a2:8d:66:6f:c0:6c:96:63:74:78:b9:74:64:96:10:ef:2d:cf:
66:5f:96:b4:15:ad:c1:8a:da:e8:7d:0a:8a:67:d4:96:cf:1d:
63:aa:96:45:3b:7c:e4:5e:31:43:50:4c:ca:ee:fc:4f:0c:4a:
31:f1:24:db:89:a6:9e:c7:3e:2f:78:d0:b4:60:f6:46:97:e9:
52:aa:5a:bf:95:8a:29:30:ae:6a:fa:5f:c9:11:01:02:00:2e:
b9:ac:b1:6d:81:e8:73:54:c0:98:4d:b4:d4:8b:00:f3:a8:da:
1b:2a:2b:20:41:fb:4e:14:fd:c2:6d:bd:9d:ac:79:84:5b:37:
47:bd:34:c3:1f:70:6d:65:a4:68:89:72:e5:f4:e4:26:b4:28:
df:dc:66:81:e0:ee:6e:18:56:35:3b:c8:96:89:5b:5f:8e:69:
38:3e:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 17:01:06 2026 by rpki-client