Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/ewAdiD0KrKaEi7PiMR-FmvrCcBM.asa
File: ewAdiD0KrKaEi7PiMR-FmvrCcBM.asa (raw, json)
Hash identifier: NC5LPBz1b/UNvaXQicR/eid3wdSm+AgdnSU9uYmrF3M=
Subject key identifier: 7B:00:1D:88:3D:0A:AC:A6:84:8B:B3:E2:31:1F:85:9A:FA:C2:70:13
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A0D9260FEBC5C9C74633C1A446CFA1738C
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/ewAdiD0KrKaEi7PiMR-FmvrCcBM.asa
Signing time: Fri 25 Sep 2026 15:19:05 +0000
ASPA not before: Fri 25 Sep 2026 15:19:05 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213622
Providers: AS: 174
AS: 3257
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:26:0f:eb:c5:c9:c7:46:33:c1:a4:46:cf:a1:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Sep 25 15:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b001d883d0aaca6848bb3e2311f859afac27013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:04:d4:46:78:93:94:c9:b9:77:31:46:06:
f5:e2:87:86:85:db:67:f4:ff:73:65:18:eb:f8:a8:
5c:98:1e:6a:35:6d:41:3e:05:47:85:bf:28:44:c4:
f2:98:c6:92:2f:1b:a5:11:1c:3f:79:89:ab:ce:3a:
50:a5:5a:d3:dd:76:79:a7:bd:21:ff:70:74:7b:9d:
02:47:cc:1a:83:c9:1d:0d:eb:d7:88:5e:07:66:f5:
4e:7d:89:d6:6f:cc:94:b7:31:0b:01:04:6b:de:7a:
04:99:e9:8b:2f:75:f0:6d:8b:6c:be:f7:50:9d:9c:
bf:48:17:bb:5c:5e:ad:7a:9a:73:80:fe:1c:cb:3f:
80:51:f8:bb:04:9b:32:5c:f3:ad:34:3f:d3:d5:9a:
4b:bc:35:d4:97:af:70:27:16:af:fb:5a:3c:69:9e:
9b:fe:15:68:e7:80:f6:d8:f1:5d:c8:a0:8d:6f:ff:
5f:5e:c7:5e:e5:06:b5:2a:28:62:c7:55:92:05:34:
a7:84:c4:87:dc:87:bf:ca:ab:8c:80:1c:8e:b3:8f:
8d:7b:7e:c4:de:6e:27:49:18:95:4e:02:19:fb:b5:
a6:3c:0d:81:be:77:f6:d3:b9:2a:81:fd:14:cf:58:
e5:55:56:5e:03:ff:59:e8:bf:ff:15:9d:7a:61:80:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:1D:88:3D:0A:AC:A6:84:8B:B3:E2:31:1F:85:9A:FA:C2:70:13
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/ewAdiD0KrKaEi7PiMR-FmvrCcBM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213622
Signature Algorithm: sha256WithRSAEncryption
3b:33:e8:aa:b4:80:7a:b6:62:37:ad:65:3c:7d:75:4c:33:f1:
25:cd:97:3d:f3:0c:03:0e:96:1f:74:50:e1:6d:a1:11:e8:ce:
91:96:9e:96:22:a2:60:6c:ec:cf:58:e7:99:ba:e9:8b:71:a3:
00:45:c2:3a:96:f5:17:e0:b3:32:74:99:2e:6b:0c:6f:ad:9b:
c7:16:1c:8e:99:22:06:6d:d0:32:71:3b:a3:5e:d4:a3:db:5f:
66:a0:1e:f1:79:53:52:cd:97:39:40:4c:18:59:08:12:ca:07:
40:ec:b8:3a:c4:b4:1f:3e:5a:0d:53:96:1c:e1:35:64:98:5b:
87:37:14:52:95:46:d0:77:2c:d2:f6:95:cf:a7:50:c9:20:cc:
a3:c2:0c:69:14:51:5a:2c:7d:08:31:33:f0:26:24:79:a0:06:
7d:26:fd:09:19:43:20:a1:a5:56:e0:52:42:c6:7e:44:60:bb:
9f:72:c3:0e:1a:23:0d:2a:ab:10:1e:fd:25:31:a1:96:e4:00:
7b:f9:09:33:66:d2:ca:88:b5:14:c5:a2:7d:5d:a9:95:31:9e:
ca:85:1f:cb:10:6e:ce:11:5f:19:b2:2e:1c:ad:48:42:d7:12:
76:74:04:5b:fe:1d:c6:80:9a:c7:99:8f:e2:59:2e:e8:8e:ce:
8b:c3:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:45:49 2026 by rpki-client