Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/Qws2yWKE1wuEwRfUIOoXNnHervY.asa
File: Qws2yWKE1wuEwRfUIOoXNnHervY.asa (raw, json)
Hash identifier: C7hAs2ygABJ78/PBgxKCBdb1HV6V0FUbNT6o6bKZ01I=
Subject key identifier: 43:0B:36:C9:62:84:D7:0B:84:C1:17:D4:20:EA:17:36:71:DE:AE:F6
Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48
Certificate serial: 019F190140C6DFAA42036EE0D709B652665C
Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/Qws2yWKE1wuEwRfUIOoXNnHervY.asa
Signing time: Tue 30 Jun 2026 14:49:00 +0000
ASPA not before: Tue 30 Jun 2026 14:49:00 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 43851
Providers: AS: 3170
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:40:c6:df:aa:42:03:6e:e0:d7:09:b6:52:66:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48
Validity
Not Before: Jun 30 14:49:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=430b36c96284d70b84c117d420ea173671deaef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:e5:8a:16:b3:60:7b:f4:c2:37:79:8e:4e:
2f:88:7c:dd:f4:2d:d8:35:90:a9:8b:6e:bd:c0:91:
31:56:02:32:06:c6:1d:2c:fa:c2:53:8e:fb:0b:a9:
04:6c:0d:93:50:9a:d3:bc:a3:be:59:44:da:7b:e1:
b1:b9:b4:34:e1:59:3a:40:38:cb:95:f5:a4:c2:75:
50:ac:d9:83:97:6a:92:9c:5f:c3:3e:a5:bb:2f:8d:
32:95:da:81:b6:59:01:03:e7:3f:86:10:26:8c:a7:
24:5a:59:41:3c:02:2b:b9:da:65:06:2b:5a:4d:a2:
06:cf:69:c8:4e:2f:b4:c7:8c:02:07:4a:43:89:90:
1b:b2:e9:4b:38:4e:2f:a4:d0:db:d9:5e:fe:4f:b4:
af:8a:cc:fa:02:22:c3:c2:c1:8b:94:85:61:53:d1:
a4:30:90:3d:c0:a2:3c:7c:50:1a:25:13:b0:f4:3d:
62:cd:d4:44:7e:0f:7f:e3:a7:08:f0:13:dd:0b:df:
58:0f:25:61:8e:63:50:81:56:3c:72:3a:07:9f:ca:
c0:f5:40:90:9d:c7:2e:be:5d:ef:d7:e3:2e:07:e4:
13:62:34:a9:5d:86:37:e7:50:ca:ff:08:0f:0f:23:
49:b6:24:30:23:44:eb:f6:e5:b7:0b:26:83:c0:b0:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:36:C9:62:84:D7:0B:84:C1:17:D4:20:EA:17:36:71:DE:AE:F6
X509v3 Authority Key Identifier:
keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/Qws2yWKE1wuEwRfUIOoXNnHervY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43851
Signature Algorithm: sha256WithRSAEncryption
0c:30:5f:26:8a:ef:af:6b:5e:b8:4e:17:69:cf:b7:41:4a:9f:
c4:22:bd:97:21:bc:78:c7:2f:ef:5d:e4:93:c0:f0:e6:6c:9a:
ff:80:9f:11:05:02:55:d3:03:75:63:82:92:8c:2c:fb:3e:fa:
9f:8e:b8:cd:90:96:94:cf:c4:1e:25:d3:7e:50:4c:78:c8:f0:
7a:a7:1f:8b:bd:b5:75:f3:c5:38:28:29:9a:fc:29:88:bb:0a:
b9:c2:b4:2b:0e:1e:38:c8:c3:55:58:a6:98:0c:27:f8:97:fb:
35:52:fd:55:67:b8:a6:b2:de:a7:66:32:26:05:b0:59:4b:43:
0e:40:67:f0:29:3c:29:3a:e6:ca:75:aa:bc:c6:8e:bb:82:56:
e6:b5:6f:31:12:2d:3e:ad:a4:f6:8e:5a:7c:33:79:ab:5b:db:
3b:51:cd:fd:65:6a:a0:bf:66:07:91:eb:d6:6f:d6:bc:0a:01:
57:70:1b:ef:3b:9f:92:b1:c9:c3:b3:e6:d3:61:d6:83:fb:27:
a0:7b:b0:f1:30:70:03:b1:e9:1c:a3:64:cb:bc:94:f6:84:ed:
98:5c:af:1b:23:c0:ba:fb:4c:ef:cd:8c:62:ae:f4:20:34:d3:
e9:c9:60:22:c3:8a:df:ed:98:f8:f0:8c:18:8d:1c:84:18:08:
85:be:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:19 2026 by rpki-client