Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/khusjgDek1ZBQK1fl-RLzw-PrNc.asa
File: khusjgDek1ZBQK1fl-RLzw-PrNc.asa (raw, json)
Hash identifier: Fm+ixIfZZ4SaI73vniK4Ehy3jDS/felGR2McFraX9lQ=
Subject key identifier: 92:1B:AC:8E:00:DE:93:56:41:40:AD:5F:97:E4:4B:CF:0F:8F:AC:D7
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 01A1A5C11A3AEF3C150BDEABF4BBAAA78E87
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/khusjgDek1ZBQK1fl-RLzw-PrNc.asa
Signing time: Wed 04 Nov 2026 08:50:58 +0000
ASPA not before: Wed 04 Nov 2026 08:50:58 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 20810
Providers: AS: 5405
AS: 6939
AS: 33891
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:c1:1a:3a:ef:3c:15:0b:de:ab:f4:bb:aa:a7:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Nov 4 08:50:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=921bac8e00de93564140ad5f97e44bcf0f8facd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:3c:cc:43:5e:36:e1:df:66:a7:f6:3f:9b:
13:b5:d8:dd:e5:2b:8b:b1:2d:c1:fe:df:55:ee:2f:
68:1f:00:6a:a6:35:e8:60:90:33:86:fa:10:32:39:
04:82:9f:a7:71:d3:43:04:5e:f9:68:ea:f0:e4:8b:
65:99:dd:65:e2:d9:02:43:3f:92:b8:48:3c:a8:53:
85:07:39:12:1f:67:85:53:0d:ab:d6:61:75:c7:95:
e0:cf:78:25:7b:9e:16:ec:4c:84:5f:54:d8:94:5f:
0e:6b:ed:26:35:96:3c:64:82:51:01:26:61:8b:1d:
69:8f:9d:67:9c:34:5f:7e:1a:3b:a6:f7:85:33:89:
0b:2c:37:c1:28:69:bd:18:4e:44:b1:1c:3b:7d:32:
1a:da:8c:5a:9e:eb:58:d9:6e:83:62:9c:aa:f8:19:
f7:d5:6e:a4:da:3b:92:c1:a4:bd:7e:c0:82:6d:9a:
61:90:c1:72:f9:a0:a6:eb:a1:3c:94:c0:73:2d:b0:
84:ed:e3:31:38:c6:d2:24:d2:8e:2e:5f:b7:6e:08:
e0:e9:e6:1c:fb:8a:a0:f0:41:f4:38:c5:16:aa:78:
64:69:68:e9:57:a1:1a:8a:46:e0:80:16:8e:00:73:
4f:fd:b5:5d:b3:40:85:14:a6:4e:0c:f4:aa:22:74:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1B:AC:8E:00:DE:93:56:41:40:AD:5F:97:E4:4B:CF:0F:8F:AC:D7
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/khusjgDek1ZBQK1fl-RLzw-PrNc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20810
Signature Algorithm: sha256WithRSAEncryption
8a:53:00:04:25:37:39:99:ab:fe:f1:c7:72:12:c4:fd:c4:da:
b4:45:73:5f:26:1a:9d:90:af:15:c8:5b:85:ad:52:fe:ff:83:
50:ff:44:eb:eb:84:81:26:d2:be:c8:d6:6f:d7:50:c5:86:33:
1e:f6:d2:fe:a8:b0:1a:16:eb:f9:3d:55:72:9a:dd:2c:ab:77:
0b:2f:a2:e6:63:19:84:7b:83:e1:7e:ce:53:05:8b:c6:a8:97:
b2:6b:c3:1c:ff:d6:cc:5b:b2:d6:cc:12:9e:94:f2:b0:df:bd:
2b:79:1e:38:9a:31:16:e8:71:f4:56:aa:aa:0d:26:e7:f9:d9:
b3:86:08:5a:2b:29:f4:39:17:8a:c1:52:78:63:7d:9a:fc:1b:
2a:37:b3:e7:96:8a:0c:7a:db:3f:58:cf:58:2f:b3:3c:df:d3:
88:c7:2e:1a:52:45:e7:1f:e4:38:6a:7b:c0:94:00:2e:a2:02:
d4:90:60:85:61:03:d1:9c:20:72:5e:16:2d:e8:f3:f8:34:bb:
fe:bd:49:44:bc:64:31:ab:18:46:c9:8e:ad:9a:93:6b:8f:44:
21:a3:c4:63:eb:76:9b:2a:12:1c:3e:9f:b3:33:44:b4:57:78:
0c:d7:07:17:fb:4a:6f:f6:db:86:a4:29:00:41:8e:a5:bd:c1:
b3:5d:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:54:55 2026 by rpki-client