Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/KJiyDl7iQPSHbczb71sauO3rVJk.asa
File: KJiyDl7iQPSHbczb71sauO3rVJk.asa (raw, json)
Hash identifier: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=
Subject key identifier: 28:98:B2:0E:5E:E2:40:F4:87:6D:CC:DB:EF:5B:1A:B8:ED:EB:54:99
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019DD35353927EAEBF452BB3C7562E4A1B2D
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/KJiyDl7iQPSHbczb71sauO3rVJk.asa
Signing time: Tue 28 Apr 2026 09:02:26 +0000
ASPA not before: Tue 28 Apr 2026 09:02:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199653
Providers: AS: 174
AS: 1299
AS: 3356
AS: 19905
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:53:53:92:7e:ae:bf:45:2b:b3:c7:56:2e:4a:1b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Apr 28 09:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2898b20e5ee240f4876dccdbef5b1ab8edeb5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:92:52:e6:01:50:7b:30:8e:13:a2:19:29:
db:35:21:2f:34:20:cd:ad:13:8b:0b:dd:58:d7:77:
c5:84:6d:38:f3:72:3b:04:7b:08:54:c7:05:7e:59:
b8:6b:99:86:57:bf:49:a5:a7:32:b8:d5:37:d8:07:
2a:05:30:4a:71:1a:66:d4:37:87:7c:a9:26:d6:39:
e3:47:7e:1a:36:6f:3b:83:c1:7e:50:9b:20:51:eb:
f0:bc:e6:c0:d8:d5:b9:09:b7:08:99:dd:df:14:40:
cf:de:22:93:54:a1:ef:09:d8:9c:51:9a:98:1f:1d:
b6:29:f0:2f:92:08:91:7a:91:e1:f0:53:ac:95:96:
66:ed:81:d9:29:d3:ca:ef:6c:68:31:ec:66:82:77:
a5:ea:5d:e9:60:b7:a9:5e:23:6a:7d:b5:b0:51:30:
9c:9b:d0:85:45:81:9d:1f:22:a2:4d:19:bb:02:ee:
58:1f:df:51:86:47:71:af:f8:50:02:c4:6e:ab:49:
0c:17:40:3b:bd:96:67:40:98:7b:df:72:43:18:13:
e1:4b:ab:a0:ff:ce:fb:9c:60:f7:88:2f:83:aa:fd:
76:4e:b1:76:ba:32:14:12:89:7e:a3:91:60:08:31:
42:25:a6:47:1a:14:23:d3:13:7e:ff:a0:3e:75:0b:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:B2:0E:5E:E2:40:F4:87:6D:CC:DB:EF:5B:1A:B8:ED:EB:54:99
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/KJiyDl7iQPSHbczb71sauO3rVJk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199653
Signature Algorithm: sha256WithRSAEncryption
98:8e:5b:2e:68:99:a3:0d:6f:17:f9:2e:8c:a2:8a:d4:49:67:
d0:3b:09:3f:99:25:8e:ef:cb:0d:4f:4e:e9:b4:96:1d:9f:b3:
c7:5c:90:99:43:ad:46:b5:3c:65:be:9c:ff:47:82:e6:81:08:
c4:dc:95:bf:86:91:88:9b:8b:52:c8:ec:7c:28:b1:c1:db:99:
c4:21:82:e6:e1:78:39:65:d7:88:4f:9d:8e:c4:24:81:2f:2c:
4e:eb:ac:7d:8c:bf:30:40:c6:e6:97:93:9b:f8:34:51:af:be:
57:2c:c9:6f:64:40:58:4d:6f:3d:a9:3a:d0:38:d8:ee:ba:61:
1e:71:80:96:5a:7b:14:d1:f8:eb:0b:35:7f:3d:a6:27:f3:ec:
39:7e:b3:bc:d9:cc:18:21:e6:81:78:1c:3b:49:9a:52:32:d4:
68:7e:33:4a:a0:4f:2a:af:73:f3:7b:6f:08:48:0f:25:3b:cc:
31:50:5e:69:ee:bb:c9:a0:bd:33:a8:1e:8d:70:a3:3a:b1:b9:
a5:c3:c0:b3:ef:62:b7:81:29:87:58:4b:37:ea:5b:eb:72:91:
77:19:e0:c2:76:70:a8:c7:fa:81:54:8e:10:f6:2e:d3:8f:d3:
58:93:f9:48:78:9a:62:3d:24:5c:62:7e:6a:fa:f2:ef:f3:6b:
f8:b9:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:06 2026 by rpki-client