Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QKgFX19raDyaC8pEs2XbQC_74nM.asa
File: QKgFX19raDyaC8pEs2XbQC_74nM.asa (raw, json)
Hash identifier: GdDld2FSzGuPGcWhgWReNGXXCcKrM4Lf2rrVpAosUHQ=
Subject key identifier: 40:A8:05:5F:5F:6B:68:3C:9A:0B:CA:44:B3:65:DB:40:2F:FB:E2:73
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019CDE472711E582C3E03009BE5615051D5D
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QKgFX19raDyaC8pEs2XbQC_74nM.asa
Signing time: Wed 11 Mar 2026 19:02:10 +0000
ASPA not before: Wed 11 Mar 2026 19:02:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 30738
Providers: AS: 35661
AS: 50338
AS: 57707
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:47:27:11:e5:82:c3:e0:30:09:be:56:15:05:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Mar 11 19:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40a8055f5f6b683c9a0bca44b365db402ffbe273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:3a:50:74:35:47:9c:5a:f1:a0:82:75:92:
ee:f2:cd:74:ac:cc:61:f9:2e:ce:1b:9f:41:54:2e:
c7:b7:50:b8:b7:f9:db:cd:39:e4:77:70:91:a4:ae:
9b:53:de:2e:e0:33:f1:1a:9b:b0:e3:93:ec:bf:8d:
1a:c6:48:d6:58:17:e2:58:8d:09:d7:ad:fe:ff:73:
e1:01:b4:00:e5:28:c3:5b:76:34:34:78:58:91:ad:
e4:c5:3a:4c:c4:6e:03:a7:d7:6f:a4:7f:15:d8:a8:
af:bc:1c:3a:26:38:66:f0:96:f2:a8:8b:08:9e:08:
a7:18:39:41:f7:2e:d6:52:ca:e0:54:14:f8:85:16:
8d:4c:40:1f:3e:fe:37:e4:49:29:01:0c:54:c9:0c:
d6:1a:09:b3:54:b9:72:d9:8a:ff:b1:a4:39:3b:ba:
46:8d:36:4f:a3:f5:fa:75:bb:4e:86:af:e2:6d:d7:
4b:23:37:7a:dd:0c:a9:4d:42:02:ca:74:98:3f:27:
8e:44:fb:ab:18:86:d6:2e:c4:41:7a:9e:f0:85:0d:
7a:cf:d9:bd:3a:ac:a5:73:c5:33:19:0a:90:86:ba:
7a:e1:05:ee:e0:a5:b2:a1:7e:d6:70:4e:1d:bf:22:
b1:61:c6:20:8f:59:a9:3d:fc:40:53:60:82:50:b8:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:05:5F:5F:6B:68:3C:9A:0B:CA:44:B3:65:DB:40:2F:FB:E2:73
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/QKgFX19raDyaC8pEs2XbQC_74nM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30738
Signature Algorithm: sha256WithRSAEncryption
58:b6:67:c6:c4:49:32:ae:cb:d3:53:83:8f:69:e4:04:2a:b3:
03:b2:17:e7:58:21:f0:bb:6d:60:48:63:b6:88:80:5d:ad:26:
12:ef:e3:90:fd:82:22:06:94:70:4f:be:6f:72:75:d8:6e:ac:
af:1d:b2:12:08:dc:17:ad:12:c2:fa:11:9a:49:81:77:4d:a8:
1c:03:e1:5b:ba:a5:47:d9:91:89:34:ad:e5:c8:49:2f:82:5f:
ae:8a:b9:73:98:14:76:78:8f:8e:92:3d:70:89:fa:d6:e4:b6:
02:6a:5e:57:cd:3f:d8:67:e3:ff:4f:4b:37:3e:90:62:46:63:
3c:3a:3d:16:b3:4f:41:79:92:14:a7:2e:88:8e:e6:83:c3:60:
b9:2e:aa:04:47:15:55:7d:8b:e5:3e:48:50:68:9f:3d:cd:ed:
8a:2d:e6:5d:16:cd:73:57:e8:df:a0:1f:09:1b:38:e1:29:22:
2c:f8:1f:a0:74:d7:73:42:ea:51:88:d3:50:87:37:33:92:5d:
5f:85:5c:f9:bf:96:ac:f0:aa:a1:67:82:11:61:ea:00:7e:bb:
9b:61:df:18:4f:a0:a9:68:12:b0:f7:be:e6:f2:4c:5a:d5:4a:
7f:6e:6e:9b:77:d6:26:a6:a7:29:0a:d8:27:3d:dd:6f:3f:40:
92:7f:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:36:47 2026 by rpki-client