Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/1CwYaTF28pVQLnSOtId8l3_eCrA.asa
File: 1CwYaTF28pVQLnSOtId8l3_eCrA.asa (raw, json)
Hash identifier: qLyy+tiAK5GYlt+mNKeWyT76GBBeXThOPac1EJ8mby8=
Subject key identifier: D4:2C:18:69:31:76:F2:95:50:2E:74:8E:B4:87:7C:97:7F:DE:0A:B0
Certificate issuer: /CN=c14a6d4c7a07b7eef60a20dcb0b353078dd357fc
Certificate serial: 019F08F0A656B095E44E9F98FA8901E65D5D
Authority key identifier: C1:4A:6D:4C:7A:07:B7:EE:F6:0A:20:DC:B0:B3:53:07:8D:D3:57:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUptTHoHt-72CiDcsLNTB43TV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/1CwYaTF28pVQLnSOtId8l3_eCrA.asa
Signing time: Sat 27 Jun 2026 11:56:56 +0000
ASPA not before: Sat 27 Jun 2026 11:56:56 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 59920
Providers: AS: 20473
AS: 30456
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wUptTHoHt-72CiDcsLNTB43TV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:f0:a6:56:b0:95:e4:4e:9f:98:fa:89:01:e6:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14a6d4c7a07b7eef60a20dcb0b353078dd357fc
Validity
Not Before: Jun 27 11:56:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d42c18693176f295502e748eb4877c977fde0ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:20:1c:7a:2a:2e:58:5e:fc:1a:2d:30:3f:
0d:54:fe:ed:40:a3:4c:26:79:5d:2e:f4:3a:fe:8b:
c3:ac:27:60:b3:36:dc:00:cf:9a:37:51:56:69:da:
d9:59:5b:b5:de:58:cf:6f:b3:83:90:5b:4e:33:93:
7d:65:70:34:ca:f5:64:b1:97:21:42:50:90:9a:11:
92:35:4e:39:20:87:99:d9:53:75:b1:c2:fc:92:79:
80:f6:04:95:c1:81:88:4f:fb:9d:0e:cc:50:a0:09:
4b:1d:04:90:40:2f:19:35:e6:bb:15:32:ee:05:49:
b4:07:c2:08:49:dc:c6:47:9b:15:fb:3a:26:3c:ad:
83:e4:70:5a:b9:de:9c:45:a6:46:4e:7c:fe:55:b9:
31:8f:08:6c:d6:8d:5d:da:fa:2b:6a:a4:6d:5b:fc:
04:62:7e:98:b0:31:59:b7:cb:b6:d0:f5:ab:62:19:
99:56:97:28:00:d3:64:f1:8d:89:c9:29:26:63:b3:
fa:64:c2:c5:10:a0:93:88:1c:de:0a:00:c7:3a:c6:
50:8b:d5:45:eb:57:34:a2:d2:54:6c:0c:d7:b5:e0:
c3:68:98:84:81:05:a9:e9:47:49:08:c9:3e:f6:2a:
6c:a8:8b:53:31:4c:d0:e9:14:f9:06:e0:77:18:61:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:18:69:31:76:F2:95:50:2E:74:8E:B4:87:7C:97:7F:DE:0A:B0
X509v3 Authority Key Identifier:
keyid:C1:4A:6D:4C:7A:07:B7:EE:F6:0A:20:DC:B0:B3:53:07:8D:D3:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUptTHoHt-72CiDcsLNTB43TV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/1CwYaTF28pVQLnSOtId8l3_eCrA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b20eca-9085-4b65-8bea-453a7e8eee56/1/wUptTHoHt-72CiDcsLNTB43TV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59920
Signature Algorithm: sha256WithRSAEncryption
4c:9c:9b:4b:84:9c:b4:2e:fe:31:a1:ba:6a:8d:40:d7:17:ad:
49:7a:70:1c:25:2c:b6:73:ea:ae:fb:16:f1:43:1d:4e:6b:9b:
31:6b:c1:02:55:56:eb:02:cc:b4:41:01:66:ea:c4:80:9f:ba:
e7:65:4e:95:ad:1a:5e:f4:12:bb:d6:be:0d:bd:ef:62:b4:a3:
5e:c0:7f:cb:66:70:07:8b:46:fc:52:81:1f:cb:f6:2c:d4:1b:
56:52:60:7c:7b:4a:f6:c4:56:3c:c6:41:f1:f1:ef:f9:e0:cb:
c1:33:e8:5a:80:ee:c0:03:c4:83:35:8b:22:63:0a:24:e1:0a:
1a:3e:4b:b4:d8:e4:48:a2:bf:5e:b2:f5:91:e0:88:81:3a:52:
2a:4b:ed:5e:27:28:96:e4:69:c4:12:7f:76:ba:c9:93:6f:b2:
1f:21:47:21:2c:bc:4f:24:89:13:73:7f:51:1f:cf:46:6c:6f:
03:4d:fb:11:99:1c:0c:7d:d6:b3:d7:4a:73:0d:a7:43:13:63:
e1:c4:e0:bc:b5:27:44:4c:42:27:a1:14:aa:88:7d:9d:6f:a1:
c9:fc:fa:e4:f7:35:50:79:c8:47:13:a6:02:33:d4:8c:2e:c3:
34:f0:41:0c:5d:c9:89:4e:58:30:af:2d:da:ce:66:7e:98:b1:
d4:0f:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:34 2026 by rpki-client