Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa
File: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (raw, json)
Hash identifier: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=
Subject key identifier: 5F:E7:A1:81:F6:AD:06:D3:80:9D:15:DC:CF:AF:B9:27:1D:05:F0:1E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019DB3F451ACA370AA2AF8B1509E6E9AA1B1
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa
Signing time: Wed 22 Apr 2026 06:50:26 +0000
ASPA not before: Wed 22 Apr 2026 06:50:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29300
Providers: AS: 8473
AS: 49788
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:f4:51:ac:a3:70:aa:2a:f8:b1:50:9e:6e:9a:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Apr 22 06:50:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe7a181f6ad06d3809d15dccfafb9271d05f01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:79:b2:11:e4:c1:89:3e:43:9d:96:df:14:
37:a9:44:e8:3b:02:66:84:b2:f1:37:4c:97:4f:14:
7c:b2:f3:3f:70:5e:5c:7b:24:7f:8a:04:3e:9d:0d:
1f:6f:a5:e5:23:92:a9:e6:75:76:37:6d:66:60:22:
d1:61:99:3d:10:ee:d4:8c:54:af:9e:1f:50:56:71:
fb:43:be:54:b3:b7:cb:ea:31:4f:24:01:da:b1:54:
2c:9d:a3:cb:9b:fa:77:a6:c1:ff:89:2f:38:14:70:
91:9e:87:80:82:ee:3b:e5:b8:bf:1d:a3:ac:5f:bd:
ca:1f:1b:b2:44:bd:27:e7:1f:c1:6f:95:18:f1:a6:
71:a8:e7:68:03:ba:34:46:16:e2:b2:0e:32:f3:e5:
6d:78:80:7e:57:d5:13:9a:ef:93:8d:2e:65:16:2b:
4d:a7:da:74:be:06:7f:0e:70:99:72:51:1e:e2:50:
37:ae:09:eb:70:ec:81:aa:9c:35:68:df:6a:87:5b:
09:f4:85:66:a6:1e:db:84:eb:92:5e:7b:93:3b:4c:
a9:97:b8:f3:86:6f:e7:f7:f6:75:c6:09:e6:de:0f:
7e:9c:7d:4a:3f:b6:07:e4:70:a7:81:ee:ad:bb:21:
ed:0e:ec:f4:cc:e2:98:b7:a4:20:75:eb:b0:8c:23:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:A1:81:F6:AD:06:D3:80:9D:15:DC:CF:AF:B9:27:1D:05:F0:1E
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29300
Signature Algorithm: sha256WithRSAEncryption
a8:7b:f9:6d:01:59:f5:9b:b6:ee:10:d1:66:8a:75:9c:5d:bc:
cc:de:7d:ee:89:af:4b:1c:cb:7e:da:f3:dc:81:f7:27:38:fd:
69:9e:ab:54:3a:b8:3c:df:62:e3:6b:b9:3d:d9:3c:e0:e5:ac:
69:ac:8e:41:eb:72:61:b0:fc:03:97:7d:ff:54:6e:c2:fe:3a:
cd:a9:2a:91:2c:d0:9b:7c:07:29:90:4d:cf:fe:a5:60:51:16:
69:e8:cd:6c:5f:c6:e7:1c:97:e9:03:14:ad:59:1b:94:94:10:
e0:23:6d:9c:21:83:5c:55:18:73:e8:dc:89:69:d7:9b:d9:fb:
a3:fd:7a:ac:55:dd:94:53:81:8b:21:19:3b:5c:9f:18:f0:1b:
56:3a:2c:36:a3:51:54:d1:47:3e:a4:d8:23:59:08:0d:a8:7a:
29:24:c3:4e:d7:67:11:ea:95:b9:bc:5a:20:0e:a2:f9:9b:52:
bc:29:f3:67:4f:7c:c3:bb:75:8a:ac:7d:19:5c:18:06:8b:61:
3c:1a:ae:f9:00:95:a4:8d:ca:1a:40:fd:7a:e1:39:45:a1:7b:
12:d1:8e:0b:c7:2b:36:7b:4b:fa:6a:3f:34:54:f4:d5:b9:f3:
a6:30:8b:3a:44:5c:57:c6:68:af:26:9a:d0:ce:0a:2d:36:cd:
26:51:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:20:48 2026 by rpki-client