Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa
File: 3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa (raw, json)
Hash identifier: 9PxpYct4ZYiB2ZINKKmfgomCpciPW9Ne+TgfTCByrxM=
Subject key identifier: DE:D4:D4:3A:DF:6D:22:A0:A5:63:E3:DC:9F:98:B1:71:68:15:90:7B
Certificate issuer: /CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Certificate serial: 019F2368DCB9EB8BA772DC855A09F206795B
Authority key identifier: A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ASPA not before: Thu 02 Jul 2026 15:18:22 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215362
Providers: AS: 174
AS: 8953
AS: 9002
AS: 62403
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:b9:eb:8b:a7:72:dc:85:5a:09:f2:06:79:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1872f513298c300a46b41b9ae62e4869e93b74c
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ded4d43adf6d22a0a563e3dc9f98b1716815907b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:44:38:5a:55:68:2a:2b:5d:89:79:2a:33:
7f:61:34:6c:f3:66:c3:6d:c5:5e:49:3c:24:f9:43:
00:60:fd:34:c2:7b:6b:50:49:83:4a:87:56:64:f4:
d3:16:cb:2e:5b:17:48:68:32:d1:c5:83:16:54:92:
7b:b1:f4:60:1a:a7:1b:af:b6:9f:fc:cb:fe:8a:26:
60:cd:2e:fc:04:06:7e:98:2f:05:c0:6e:ea:ec:d5:
6e:9d:38:3f:84:e5:75:b7:6f:c1:a3:97:e3:df:cd:
0a:5e:10:c8:5b:27:c8:e9:df:2e:f0:43:19:65:eb:
0e:7b:27:74:d6:bc:04:c4:7c:c2:70:a1:64:4a:16:
27:0b:87:24:65:39:ad:e3:98:bd:f8:47:0f:46:ac:
20:69:c1:b9:9e:5c:eb:97:ee:ff:1e:35:bb:ae:fd:
a4:15:a7:2c:06:1f:68:57:0e:f4:88:3d:12:d4:7c:
ec:21:1d:ef:77:c4:ca:a0:8c:d7:c8:4e:9d:91:b4:
1a:11:e5:66:9c:5d:6b:04:76:a4:9a:63:6e:46:90:
cd:d4:e1:3d:d2:b2:30:31:aa:4d:7d:96:b1:e5:12:
e0:6c:8b:9f:03:b1:3b:ae:bb:de:e6:61:12:06:9c:
af:da:7f:a3:48:72:c0:d9:61:11:45:8d:d0:16:d8:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D4:D4:3A:DF:6D:22:A0:A5:63:E3:DC:9F:98:B1:71:68:15:90:7B
X509v3 Authority Key Identifier:
keyid:A1:87:2F:51:32:98:C3:00:A4:6B:41:B9:AE:62:E4:86:9E:93:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYcvUTKYwwCka0G5rmLkhp6Tt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/3tTUOt9tIqClY-Pcn5ixcWgVkHs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fe8018-cae0-4a4c-b9c1-c136027a74e0/1/oYcvUTKYwwCka0G5rmLkhp6Tt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215362
Signature Algorithm: sha256WithRSAEncryption
7f:71:68:44:e3:64:b5:85:8f:cd:d6:4e:7c:a5:f7:6f:b5:08:
bb:49:08:8a:af:45:94:2a:8c:d1:25:f8:76:fa:8a:e0:6d:a6:
04:c6:62:ad:04:a7:8b:cb:37:f3:c3:ce:fb:ba:bb:6e:67:2f:
63:90:59:1f:b6:c2:e8:92:6b:fa:80:d5:ee:ee:ae:0c:3a:25:
f2:bd:7f:b5:31:67:6a:6b:3c:cf:e3:e3:43:02:54:6b:d1:0a:
9a:c1:05:1f:6b:98:f5:8e:01:ae:3e:00:d8:b9:4c:68:57:5e:
99:76:54:a8:bc:6b:c2:f0:51:26:be:1b:66:99:78:52:f4:82:
bf:1d:ce:66:2b:10:2f:45:c6:74:1b:d6:87:11:aa:2f:ad:11:
a7:90:22:9b:fc:57:a0:39:2f:f2:a2:97:2c:f2:f9:5d:75:2e:
b0:8f:2b:34:f2:65:45:4e:33:78:20:db:9b:93:ae:5a:92:f4:
6d:e4:9c:e9:dd:51:7a:b4:f5:44:15:2f:3b:2e:f1:cb:22:56:
2a:cf:a1:dc:26:8b:da:b6:ae:82:b2:2b:25:d5:84:ff:c0:28:
91:75:65:49:3f:94:cf:6e:5e:17:6a:02:30:28:14:7b:6b:51:
3f:93:f2:5e:17:7e:1e:1e:59:db:d4:61:dc:e9:1f:7a:41:f6:
35:9e:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:11 2026 by rpki-client