
Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/ljM9pOhYrVK3h1rVZJ9XhLMUSG4.asa
File: ljM9pOhYrVK3h1rVZJ9XhLMUSG4.asa (raw, json)
Hash identifier: RxT+6V52USm+6hcvr0jCLD6lK/qspI3FPyQIWiBtPkM=
Subject key identifier: 96:33:3D:A4:E8:58:AD:52:B7:87:5A:D5:64:9F:57:84:B3:14:48:6E
Certificate issuer: /CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Certificate serial: 019DDC037CA43F41CF605D2E1DBCDAEFC817
Authority key identifier: E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/ljM9pOhYrVK3h1rVZJ9XhLMUSG4.asa
Signing time: Thu 30 Apr 2026 01:31:49 +0000
ASPA not before: Thu 30 Apr 2026 01:31:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 201288
Providers: AS: 207841
AS: 209735
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:03:7c:a4:3f:41:cf:60:5d:2e:1d:bc:da:ef:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d22c01784656d4f5666e7703481a2f7084e4f9
Validity
Not Before: Apr 30 01:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96333da4e858ad52b7875ad5649f5784b314486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:c7:5c:8d:8f:43:00:88:ba:e3:81:32:f9:
16:59:14:14:f6:20:ab:36:b6:75:10:d0:2a:1b:01:
51:87:a6:87:9d:f9:1a:d7:ba:35:85:9f:4a:d6:4c:
d6:b0:f7:26:3e:57:b2:e1:6b:44:e6:f6:cf:59:d5:
3f:9d:41:80:9d:4b:a8:f6:a6:8b:c6:b8:a4:5c:5a:
9d:a0:ed:b4:1a:06:03:1c:c5:43:f6:90:71:b8:ce:
c9:e1:10:e1:34:e5:5a:62:5c:d3:c7:73:0c:43:b6:
99:2d:c8:b6:55:56:0d:82:bd:59:0b:5a:03:98:74:
34:1f:24:f2:68:fe:b5:94:69:0f:64:b7:58:22:f5:
13:97:2b:41:b6:b1:28:a6:22:ac:4a:98:b1:95:0b:
64:7e:31:db:14:fa:c5:4f:86:17:b9:84:b3:ca:31:
94:c0:ef:d1:5e:96:1b:e4:cb:26:fb:5b:8c:05:a0:
f3:1c:ef:cc:ad:9b:8f:de:2b:9f:c8:2d:51:cf:39:
ca:4b:50:c0:1f:3a:bc:32:10:a5:31:a0:97:a9:47:
38:da:1f:33:56:f1:28:36:c7:7d:82:68:ab:06:a6:
39:87:7e:f7:39:60:61:81:07:5d:67:e0:d7:35:f1:
25:a0:70:b3:ac:1c:4a:29:36:d2:e3:c2:49:96:58:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:3D:A4:E8:58:AD:52:B7:87:5A:D5:64:9F:57:84:B3:14:48:6E
X509v3 Authority Key Identifier:
keyid:E3:D2:2C:01:78:46:56:D4:F5:66:6E:77:03:48:1A:2F:70:84:E4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49IsAXhGVtT1Zm53A0gaL3CE5Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/ljM9pOhYrVK3h1rVZJ9XhLMUSG4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a42ffc-4c87-4afe-a18d-5d9f550282a4/1/49IsAXhGVtT1Zm53A0gaL3CE5Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201288
Signature Algorithm: sha256WithRSAEncryption
0b:33:8f:ac:af:1c:ac:60:3b:0d:c3:5c:f5:d4:af:8d:13:4b:
dc:b3:f1:7e:a9:45:39:81:88:08:3f:04:18:37:d1:44:d4:7f:
e7:95:57:a6:f4:b2:5e:d3:28:b9:e9:96:3a:b2:ee:99:3b:d2:
dc:96:76:37:77:47:90:ac:c5:9d:19:dc:24:69:66:5e:df:2c:
d6:af:34:b6:bf:88:60:5a:99:0d:96:9c:32:a2:41:80:a7:54:
60:3a:9c:16:b6:ac:f0:37:0e:49:ea:47:78:69:40:5b:1d:b7:
7a:47:59:c0:ca:db:f6:ac:7b:c8:29:14:10:a3:9e:60:27:d7:
34:b7:de:a8:3b:a4:38:3b:00:4f:37:92:18:77:85:8f:38:13:
34:ca:95:7f:95:60:91:12:f3:94:aa:02:fe:33:01:b5:4d:60:
47:b1:7b:5e:98:e2:86:c6:4e:ed:fa:21:1f:7a:fc:f1:07:eb:
df:2d:06:43:dd:37:cf:c8:4a:25:8e:e6:53:55:0e:9b:52:89:
1b:ef:ec:58:1a:5b:eb:c0:5f:24:ac:14:bd:f7:45:14:25:35:
a0:ba:c8:84:1f:66:38:8d:7b:f1:f7:7f:f5:c3:90:df:5c:aa:
28:0b:e4:c7:f9:e1:ad:13:af:ee:b2:d1:3a:68:b2:b6:9e:9a:
ef:60:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:38 2026 by rpki-client