Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/3SoEwaHYmzBhPq3SqrK7-97FxfY.asa
File: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (raw, json)
Hash identifier: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=
Subject key identifier: DD:2A:04:C1:A1:D8:9B:30:61:3E:AD:D2:AA:B2:BB:FB:DE:C5:C5:F6
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019DCF911DE144E4E4F35909493A10583AF2
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/3SoEwaHYmzBhPq3SqrK7-97FxfY.asa
Signing time: Mon 27 Apr 2026 15:31:27 +0000
ASPA not before: Mon 27 Apr 2026 15:31:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213224
Providers: AS: 31034
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:91:1d:e1:44:e4:e4:f3:59:09:49:3a:10:58:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Apr 27 15:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd2a04c1a1d89b30613eadd2aab2bbfbdec5c5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:f6:55:98:e8:0e:d2:3a:ee:2e:b6:d2:d3:
27:94:85:a0:42:7a:5b:e5:e7:a2:4e:08:5d:53:c6:
d1:5c:b3:82:58:1f:ad:81:bd:b0:64:62:57:ad:52:
94:16:2d:12:89:f1:45:8f:1e:01:22:e3:3f:6c:ef:
f7:8a:2c:5b:82:1a:8e:e6:1d:9c:f8:c1:9b:42:1e:
ce:42:a0:2d:5e:a0:c2:6d:f5:05:53:75:ac:8d:dc:
71:a6:43:7c:5f:2a:bb:0c:1d:ae:c6:af:0f:6c:ea:
af:78:fd:5a:e9:e2:63:db:ce:2d:cf:a5:86:e3:c4:
24:0d:6a:a7:12:a5:c1:b8:7a:21:6f:5e:7c:7e:99:
dc:be:a4:9e:ac:55:9f:70:cd:99:1e:51:27:9b:a2:
66:93:0a:9a:9f:f2:56:22:3b:86:8f:09:0b:e0:a9:
3a:54:7b:91:a2:43:68:34:dd:8d:a8:4a:ac:57:7e:
1a:f3:92:e0:bc:6b:7e:33:41:34:50:0a:fb:8a:1b:
4f:0c:9b:30:ba:b3:8b:00:da:6a:07:91:66:7c:d4:
44:a4:29:7a:33:f2:02:66:a4:04:f1:ed:78:bf:55:
a3:3d:77:51:84:84:df:e6:81:b6:36:50:48:b3:d5:
04:fa:03:44:29:06:a9:4a:bc:db:93:1e:e5:8e:70:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:04:C1:A1:D8:9B:30:61:3E:AD:D2:AA:B2:BB:FB:DE:C5:C5:F6
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/3SoEwaHYmzBhPq3SqrK7-97FxfY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213224
Signature Algorithm: sha256WithRSAEncryption
12:f5:bf:93:05:5a:43:bb:87:4e:53:89:fe:6b:8c:50:54:b8:
07:d9:52:55:c8:23:50:32:ed:7e:ef:b7:97:2f:0d:f7:e7:35:
9b:1f:55:88:f7:b3:9a:eb:c4:0e:f7:61:46:68:9b:e0:b4:0f:
cf:e4:86:8f:4f:67:bc:51:2e:ca:45:10:1c:fe:10:d8:51:4a:
83:1c:a2:7d:ae:64:f9:23:f0:4e:26:c3:2b:83:0d:97:17:ad:
48:b0:27:fd:ea:7b:73:6b:3b:e3:0e:df:d5:e2:16:dd:f5:cd:
c4:1c:d8:06:10:96:f4:fb:15:4e:62:d7:06:68:bf:57:7a:87:
ac:04:47:1e:82:d0:75:91:1e:cd:a3:f3:01:d6:85:4a:b8:5b:
99:91:3f:06:f8:c7:a2:a2:b4:40:a5:0e:a6:7d:96:36:85:d7:
44:ac:a2:62:cc:d2:b9:7c:50:31:e6:97:78:d6:58:06:03:35:
8d:80:0c:b6:64:9f:06:10:8e:b9:e6:f5:25:28:cb:af:0a:fd:
52:b4:6f:93:1f:cf:9e:2d:57:a9:5c:28:89:1f:bf:09:41:5d:
e1:13:ec:39:c4:b5:8b:3a:19:bc:fe:2c:69:40:1f:4b:1c:11:
ba:d3:c8:2e:86:00:c1:35:25:bb:cf:38:c6:2c:65:a7:e8:9a:
fb:58:7a:c2
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3PkR3hROTk81kJSToQWDryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjYwNDI3MTUzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDJhMDRjMWExZDg5YjMwNjEzZWFkZDJhYWIyYmJmYmRlYzVjNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyD2VZjoDtI67i620tMnlIWgQnpb
5eeiTghdU8bRXLOCWB+tgb2wZGJXrVKUFi0SifFFjx4BIuM/bO/3iixbghqO5h2c
+MGbQh7OQqAtXqDCbfUFU3WsjdxxpkN8Xyq7DB2uxq8PbOqveP1a6eJj284tz6WG
48QkDWqnEqXBuHohb158fpncvqSerFWfcM2ZHlEnm6Jmkwqan/JWIjuGjwkL4Kk6
VHuRokNoNN2NqEqsV34a85LgvGt+M0E0UAr7ihtPDJswurOLANpqB5FmfNREpCl6
M/ICZqQE8e14v1WjPXdRhITf5oG2NlBIs9UE+gNEKQapSrzbkx7ljnCkpQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFN0qBMGh2JswYT6t0qqyu/vexcX2MB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvM1NvRXdhSFltekJoUHEzU3FySzctOTdGeGZZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNA6DANBgkqhkiG
9w0BAQsFAAOCAQEAEvW/kwVaQ7uHTlOJ/muMUFS4B9lSVcgjUDLtfu+3ly8N9+c1
mx9ViPezmuvEDvdhRmib4LQPz+SGj09nvFEuykUQHP4Q2FFKgxyifa5k+SPwTibD
K4MNlxetSLAn/ep7c2s74w7f1eIW3fXNxBzYBhCW9PsVTmLXBmi/V3qHrARHHoLQ
dZEezaPzAdaFSrhbmZE/BvjHoqK0QKUOpn2WNoXXRKyiYszSuXxQMeaXeNZYBgM1
jYAMtmSfBhCOueb1JSjLrwr9UrRvkx/Pni1XqVwoiR+/CUFd4RPsOcS1izoZvP4s
aUAfSxwRutPILoYAwTUlu884xixlp+ia+1h6wg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:10 2026 by rpki-client