Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/pHA-wecCe_-0TUCFnLhtFpBajVc.asa
File: pHA-wecCe_-0TUCFnLhtFpBajVc.asa (raw, json)
Hash identifier: r+rcdyyIoxTmsldj0f01A2ge+oukxOQrJPqbKIw0i1s=
Subject key identifier: A4:70:3E:C1:E7:02:7B:FF:B4:4D:40:85:9C:B8:6D:16:90:5A:8D:57
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 019DD3FEE007EF8BE97A692ACA19F31EE153
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/pHA-wecCe_-0TUCFnLhtFpBajVc.asa
Signing time: Tue 28 Apr 2026 12:09:49 +0000
ASPA not before: Tue 28 Apr 2026 12:09:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 42032
Providers: AS: 12307
AS: 57118
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:fe:e0:07:ef:8b:e9:7a:69:2a:ca:19:f3:1e:e1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Apr 28 12:09:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4703ec1e7027bffb44d40859cb86d16905a8d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:77:b2:28:5e:f4:c6:d7:28:38:92:78:b2:
ed:cc:86:dd:11:34:af:a6:1d:4b:e3:20:75:b5:d8:
51:4a:90:1f:de:8c:0f:4a:18:15:ed:04:28:ac:a8:
a0:81:95:67:08:e8:81:0c:5f:f2:6d:98:84:09:00:
e5:af:f1:f6:84:03:31:73:6e:b0:b3:f5:62:66:37:
09:5f:73:5c:f5:a1:03:20:f2:6b:81:6b:35:da:cf:
12:49:68:c1:74:17:4a:f8:f1:8b:ba:30:b4:6c:41:
fd:82:e7:a1:60:51:a4:d0:cd:d1:90:81:4d:31:bb:
31:4b:6f:d0:83:15:dc:33:4f:62:82:c4:26:49:4d:
d4:83:a8:74:67:b5:01:ff:f4:d8:cd:b8:1f:29:f8:
67:14:32:06:4b:b2:77:fe:ca:82:5e:30:81:ef:95:
f1:4f:cf:4a:2e:5b:db:a5:4f:c1:34:9f:8a:2a:c8:
12:d8:46:fb:46:e6:23:d7:e3:b8:49:3a:b7:56:85:
05:1c:87:2d:2a:4a:92:3d:64:d1:c5:6b:c6:af:7f:
15:31:08:b4:76:a0:a8:ae:aa:2d:a3:07:c1:26:67:
b6:eb:5a:ee:c9:ea:96:dc:a9:94:a3:62:f8:8a:54:
d9:f1:ec:1a:07:9e:6e:f9:9a:27:8b:2a:88:7a:f9:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:3E:C1:E7:02:7B:FF:B4:4D:40:85:9C:B8:6D:16:90:5A:8D:57
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/pHA-wecCe_-0TUCFnLhtFpBajVc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42032
Signature Algorithm: sha256WithRSAEncryption
2f:f8:48:5d:f1:9b:af:c8:6c:f8:df:78:13:9f:e1:1e:3b:c0:
de:84:27:69:b0:f2:4c:a3:c9:79:03:e0:93:bb:59:f5:aa:fa:
61:1a:ad:4e:0b:20:48:7c:77:aa:c1:d4:e4:8c:68:d5:66:37:
6b:b4:de:d8:6e:36:b9:66:cc:fc:85:72:c6:53:c1:54:3b:d0:
5d:dc:5f:eb:b5:2e:e1:ae:b4:65:76:31:61:22:42:7d:0d:d3:
fc:8f:69:65:04:f9:8e:cb:6b:09:45:91:d5:ef:49:96:d3:7b:
3a:14:4a:6c:43:4e:21:ac:d4:24:d8:18:84:6c:a5:33:15:09:
57:11:c8:7b:7e:0d:73:b1:e9:08:ff:1f:54:fc:7f:e7:5f:e4:
5e:25:cc:b9:05:4e:78:0b:40:54:4e:a5:b4:1f:64:41:ed:80:
d3:68:e8:e5:55:bb:43:92:c2:9e:08:ee:af:db:7e:0a:78:bc:
20:f5:20:7a:d2:b2:67:da:49:a9:6f:b2:98:ce:e7:80:81:86:
0c:2a:db:63:e9:78:9c:56:f0:b1:58:fa:4a:07:2b:50:d6:94:
2f:d2:e7:62:c0:51:87:0d:dd:1d:59:bb:86:2b:47:9a:81:7d:
b4:eb:8d:4d:59:ae:31:f2:dc:5e:01:e8:26:c9:65:1e:9a:aa:
76:47:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:06 2026 by rpki-client