Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/h4vIF-8ITZKqKsLKI2pT3SkYKg8.asa
File: h4vIF-8ITZKqKsLKI2pT3SkYKg8.asa (raw, json)
Hash identifier: W1/tooXLdgBSSJtBFiG6RQP4FbCt5EqG/0VVT1dOGx0=
Subject key identifier: 87:8B:C8:17:EF:08:4D:92:AA:2A:C2:CA:23:6A:53:DD:29:18:2A:0F
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 019DD3FEDFB7390ABC8D360B49FA1F5E8D46
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/h4vIF-8ITZKqKsLKI2pT3SkYKg8.asa
Signing time: Tue 28 Apr 2026 12:09:49 +0000
ASPA not before: Tue 28 Apr 2026 12:09:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 12307
Providers: AS: 6939
AS: 29691
AS: 34927
AS: 50869
AS: 57118
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:fe:df:b7:39:0a:bc:8d:36:0b:49:fa:1f:5e:8d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Apr 28 12:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=878bc817ef084d92aa2ac2ca236a53dd29182a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:04:40:24:c6:54:f7:fb:04:14:c5:87:56:
cc:d9:f8:ea:87:97:9b:3e:e1:d8:c4:4f:a3:92:c2:
62:03:eb:fb:05:1a:cb:97:b5:b9:b4:86:d1:dc:c6:
73:00:d3:9c:83:84:49:51:76:cd:0f:0b:a5:4f:f0:
30:75:9c:99:13:1b:9c:67:8f:96:d0:91:27:cc:c3:
ed:91:14:1b:01:f8:c9:83:81:1b:a8:15:20:39:6a:
2c:52:45:ae:da:03:a4:72:ea:c2:89:27:74:46:22:
6a:07:fd:b8:2e:a6:04:01:ae:c6:7f:2b:7c:9f:83:
1c:7a:72:1d:aa:4f:32:9b:3d:f2:fd:19:12:9b:52:
5e:5e:b7:78:e4:d8:af:59:41:95:33:88:cb:0b:2e:
74:6d:87:ac:b0:25:55:5f:ae:84:bf:6e:2a:3c:34:
2b:db:26:64:56:3b:e6:fb:c5:b6:69:b4:10:35:4e:
2e:51:b6:a6:eb:bb:bb:51:13:95:e4:82:c2:08:8d:
c9:a3:e4:fb:77:2f:e7:8d:4f:d0:26:b7:56:eb:cd:
91:08:42:15:e6:a6:e7:2b:77:66:52:ea:45:8c:b2:
6d:c2:c7:42:53:56:70:70:51:a2:07:34:d6:1b:ab:
54:b9:2e:66:fe:4b:5d:7b:08:3e:e4:33:45:d3:3b:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8B:C8:17:EF:08:4D:92:AA:2A:C2:CA:23:6A:53:DD:29:18:2A:0F
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/h4vIF-8ITZKqKsLKI2pT3SkYKg8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12307
Signature Algorithm: sha256WithRSAEncryption
46:bd:59:8b:7e:be:b6:1f:f7:4c:e0:89:e8:76:4f:7d:df:da:
4e:82:8c:a0:99:14:0f:3e:8c:02:00:ba:a9:ca:31:69:09:fb:
28:0e:d1:c7:90:12:60:9e:21:36:3f:d9:15:9a:f8:82:b9:06:
41:27:7a:7e:68:ec:89:13:b3:a1:cb:22:af:1f:3c:e7:c2:95:
84:1f:10:67:f8:c2:0f:ce:7e:bc:e9:e3:83:72:bd:0a:f8:02:
50:88:0e:87:1c:ca:d4:d9:eb:eb:5b:e3:46:f2:52:f1:1a:ed:
f7:6d:cb:d7:da:8e:f6:6c:54:ce:5d:13:80:d4:49:db:ef:e9:
6e:34:56:99:1e:24:93:53:3e:b4:ad:30:2a:bf:43:1c:42:43:
9e:1b:cd:e0:76:73:07:b4:3f:d2:e4:b8:0a:e7:54:c0:8a:2f:
26:3b:19:8c:38:8e:2e:7b:78:28:39:7d:35:66:e6:fe:48:c0:
19:e9:6f:ed:27:fe:9c:d9:be:ab:09:57:50:f7:a6:a7:4a:b3:
e6:d1:0e:0c:51:26:e8:cb:8b:20:3a:2c:dc:5c:45:12:ef:07:
a3:ff:6e:f6:05:8c:15:5f:3d:92:75:16:39:22:5d:7d:b6:eb:
e4:30:2d:53:74:8c:f4:92:78:11:33:d3:19:c0:78:1d:01:fa:
21:f5:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:41 2026 by rpki-client