Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/IEznk0K2jOJf0RAjHOt5CDCVLX8.asa
File: IEznk0K2jOJf0RAjHOt5CDCVLX8.asa (raw, json)
Hash identifier: uB1bFFV0qe10qLxLSlYG0HlTrXjZ4rIZEEW06Lw18P8=
Subject key identifier: 20:4C:E7:93:42:B6:8C:E2:5F:D1:10:23:1C:EB:79:08:30:95:2D:7F
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 01A07FB3D0E680156801DF0082E7FB453DEF
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/IEznk0K2jOJf0RAjHOt5CDCVLX8.asa
Signing time: Tue 08 Sep 2026 06:28:05 +0000
ASPA not before: Tue 08 Sep 2026 06:28:05 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 8473
Providers: AS: 1299
AS: 3356
AS: 5405
AS: 6939
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:b3:d0:e6:80:15:68:01:df:00:82:e7:fb:45:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Sep 8 06:28:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=204ce79342b68ce25fd110231ceb790830952d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:59:fe:95:32:74:2b:ae:99:47:89:cf:53:
97:f9:aa:be:81:f9:34:04:c1:19:57:07:81:41:38:
5a:f3:7a:7b:4a:8f:b0:12:03:cb:87:57:82:c2:47:
9e:7c:46:e2:db:df:a7:bf:a1:26:55:87:9f:d1:4c:
8e:5a:d8:a1:63:ea:7d:b0:e4:23:47:65:29:1b:ec:
6b:75:9c:89:cd:9f:fb:53:90:cd:80:60:74:aa:50:
ea:41:23:d3:80:41:32:94:3e:c7:53:47:c6:be:83:
ee:3f:c8:21:ea:f6:03:c2:a4:43:b2:88:15:79:ea:
d9:d2:51:30:84:10:5b:bb:4f:9e:98:cb:cb:2e:02:
0d:e5:4a:f8:15:0a:91:23:51:1b:38:6c:dd:64:0e:
8a:91:66:33:2d:89:d4:25:1f:bf:2f:a0:3b:60:b1:
5a:9e:01:ca:0d:3b:dd:8a:16:1e:e1:10:92:93:e3:
3f:28:62:9d:15:6d:f1:cf:fd:2f:fa:ad:32:cc:43:
13:d6:69:ad:27:4a:42:c5:c4:f1:0c:e9:c8:b4:21:
0d:f0:15:82:34:a5:67:1c:8d:d1:df:61:ed:bf:fa:
4d:ce:7f:34:a4:b8:6a:35:fe:23:4f:0b:11:69:e9:
a4:be:7a:d2:15:26:d1:14:42:a4:fd:72:bb:b5:e7:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4C:E7:93:42:B6:8C:E2:5F:D1:10:23:1C:EB:79:08:30:95:2D:7F
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/IEznk0K2jOJf0RAjHOt5CDCVLX8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8473
Signature Algorithm: sha256WithRSAEncryption
6a:04:e9:36:7a:8a:2d:f9:ed:e0:95:10:20:82:6d:b8:dc:91:
a6:81:19:cf:f4:73:46:6d:ac:c4:a5:4e:2f:37:c6:ef:de:40:
b1:f4:98:ae:7d:c2:14:21:af:b0:9d:2f:4b:89:33:c7:30:7f:
36:cf:27:9b:cf:db:56:4f:32:72:e3:ea:a3:58:9f:7e:f0:22:
1f:c9:eb:7b:d3:51:7b:5b:b0:17:0d:a7:b8:bf:b5:87:ef:93:
53:3c:9f:8b:1c:63:6e:11:6e:64:8c:1f:3f:03:5b:dc:5b:2a:
2f:3a:dc:f1:00:e2:10:58:09:4e:2b:83:34:8a:7f:03:96:0d:
3c:98:a9:41:84:3c:ec:58:68:39:1e:ab:86:7d:44:86:1b:1b:
90:15:53:47:25:52:1f:6b:51:a0:f4:20:8e:57:d4:cb:af:16:
02:da:ce:90:20:3a:45:07:8b:c4:7b:6e:cb:e8:3d:f5:5a:d8:
e3:80:e1:3c:4d:c5:23:d9:e2:d6:e5:8e:99:09:e4:c4:bd:59:
f2:6d:c9:7e:42:28:ee:be:f5:6f:c6:e2:c9:c9:f4:97:59:b3:
74:c8:de:11:da:77:68:a3:ab:7a:f9:89:5d:61:da:f1:16:78:
76:57:74:4c:49:d2:63:11:5d:c9:87:80:83:91:61:9b:a7:12:
c6:7c:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:11:41 2026 by rpki-client