Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/x4t20-hTYlVtQfEV1d9tm4qZfpo.asa
File: x4t20-hTYlVtQfEV1d9tm4qZfpo.asa (raw, json)
Hash identifier: DmvCsaiubWtr+iVHyUjqyqOnWaSxq7dIWGx+aJBhcYE=
Subject key identifier: C7:8B:76:D3:E8:53:62:55:6D:41:F1:15:D5:DF:6D:9B:8A:99:7E:9A
Certificate issuer: /CN=40d6d34d222c170abc3f880e66080ca53d473f70
Certificate serial: 01A0E39650D9F1FC0145B16A59A9EEE706E1
Authority key identifier: 40:D6:D3:4D:22:2C:17:0A:BC:3F:88:0E:66:08:0C:A5:3D:47:3F:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNbTTSIsFwq8P4gOZggMpT1HP3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/x4t20-hTYlVtQfEV1d9tm4qZfpo.asa
Signing time: Sun 27 Sep 2026 15:57:54 +0000
ASPA not before: Sun 27 Sep 2026 15:57:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 47563
Providers: AS: 1273
AS: 3356
AS: 8220
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/QNbTTSIsFwq8P4gOZggMpT1HP3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/QNbTTSIsFwq8P4gOZggMpT1HP3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNbTTSIsFwq8P4gOZggMpT1HP3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:96:50:d9:f1:fc:01:45:b1:6a:59:a9:ee:e7:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d6d34d222c170abc3f880e66080ca53d473f70
Validity
Not Before: Sep 27 15:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c78b76d3e85362556d41f115d5df6d9b8a997e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:6c:ae:05:9a:3e:6d:85:cd:3b:c9:26:03:
4f:3d:43:5b:42:d2:63:a1:41:75:19:75:a1:c0:14:
f5:71:29:75:ab:b3:c3:b4:fc:71:7b:ea:71:90:53:
2a:02:37:69:b3:62:89:70:94:a2:bb:57:6e:4f:6f:
10:3c:1c:2c:e0:a2:36:00:03:32:05:2a:45:47:6f:
1f:52:64:73:95:97:14:e7:82:c9:53:28:b3:f1:2a:
73:6b:60:78:20:a5:e8:db:b0:97:e4:cc:2a:7d:f7:
9a:3b:e4:18:f0:ad:20:4d:3c:94:af:0d:a1:df:8c:
a7:57:92:eb:1b:62:90:cb:95:61:6e:04:13:48:05:
57:63:25:c6:36:8b:dc:8e:db:51:66:1b:02:f4:08:
05:3f:85:86:8d:a9:c0:4f:29:5f:db:0e:bf:23:6b:
ba:ec:fb:0e:44:b6:e1:42:b9:4c:a6:14:56:ee:7c:
01:fc:0a:32:97:16:2f:18:fb:1a:64:47:45:8f:7f:
d5:26:72:11:37:74:bf:6a:05:8c:23:dd:90:b1:83:
d3:31:b2:e0:cc:a0:e0:a1:f9:8f:4b:bb:5c:1d:53:
22:a5:45:98:c3:22:d8:79:ed:7c:2a:7a:33:a4:db:
ef:64:ad:7c:5a:7a:b3:88:ea:a6:d6:1e:ae:2e:e3:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8B:76:D3:E8:53:62:55:6D:41:F1:15:D5:DF:6D:9B:8A:99:7E:9A
X509v3 Authority Key Identifier:
keyid:40:D6:D3:4D:22:2C:17:0A:BC:3F:88:0E:66:08:0C:A5:3D:47:3F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNbTTSIsFwq8P4gOZggMpT1HP3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/x4t20-hTYlVtQfEV1d9tm4qZfpo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ca9eb6-76d5-438c-a615-cfc7334454e2/1/QNbTTSIsFwq8P4gOZggMpT1HP3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47563
Signature Algorithm: sha256WithRSAEncryption
68:ea:f0:2f:99:fe:16:47:7a:88:41:99:91:c0:31:42:fc:8e:
26:b4:a3:d2:c3:a1:23:c7:8c:a1:61:26:6f:9b:dc:90:e6:0d:
3b:01:22:c2:73:dd:21:66:48:9a:a0:90:d3:4d:9c:e2:ac:4d:
79:43:1d:78:7e:1f:23:5e:af:dd:2c:8f:bc:53:29:2e:36:3f:
8e:4a:f4:a5:fa:13:72:28:eb:5f:47:bb:2b:1a:d0:22:f0:1d:
1f:ea:89:44:46:27:af:69:7f:ee:3b:fc:57:fc:11:75:9f:27:
ab:86:cb:95:01:68:56:7c:d3:e2:1c:f2:0b:81:19:67:3f:ee:
1a:36:b3:a8:ad:30:d9:8e:54:f8:d6:cd:6e:44:6a:6c:26:8a:
b9:72:d3:8d:f8:ce:9e:3a:27:2f:f0:67:8a:e7:ca:2e:f4:2f:
32:db:c0:25:cb:39:71:d5:46:b0:13:2a:17:79:80:2a:c6:72:
69:58:d5:c4:ab:7f:3e:5c:85:10:32:8c:25:38:f2:a1:8d:ab:
c0:37:8e:ef:b5:f6:23:75:cb:a8:ea:15:e8:c2:42:56:db:b8:
f0:0f:9a:04:61:68:aa:a6:55:af:04:b9:1d:1b:c6:66:67:7d:
27:cb:68:b6:41:cb:4f:0c:28:d0:64:b7:be:f8:8d:72:dd:2e:
64:c5:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:01 2026 by rpki-client