Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/qoT5stHghDnRteVtg_Px7AZoT7U.asa
File: qoT5stHghDnRteVtg_Px7AZoT7U.asa (raw, json)
Hash identifier: TskbWZWjs4ecsqraIt5QOAc8VDAfdc2BCzb4CrrRpfI=
Subject key identifier: AA:84:F9:B2:D1:E0:84:39:D1:B5:E5:6D:83:F3:F1:EC:06:68:4F:B5
Certificate issuer: /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial: 019CB01672ECEBB78B3F926F4B2A8FF3D31F
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/qoT5stHghDnRteVtg_Px7AZoT7U.asa
Signing time: Mon 02 Mar 2026 19:46:27 +0000
ASPA not before: Mon 02 Mar 2026 19:46:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 42729
Providers: AS: 1113
AS: 35492
AS: 39837
AS: 57169
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:16:72:ec:eb:b7:8b:3f:92:6f:4b:2a:8f:f3:d3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Validity
Not Before: Mar 2 19:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa84f9b2d1e08439d1b5e56d83f3f1ec06684fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:1d:d9:33:db:f1:40:a0:7f:b7:18:7c:a1:
46:01:da:8c:39:fb:74:19:c7:e1:35:13:3d:c4:b8:
7c:56:24:1c:62:b1:7b:6b:93:e9:c4:ee:a9:33:0d:
d7:a9:99:ce:d9:cb:5a:f9:10:1f:bc:d3:09:d4:e4:
a3:83:b0:d5:a1:b6:cb:bb:e1:f0:b3:c0:83:f1:7b:
1e:4d:35:57:fb:31:29:bf:42:29:2f:92:14:3d:61:
35:41:5b:3f:04:a9:73:a7:d8:25:bc:2c:d3:a3:34:
40:b1:06:ba:44:71:95:55:ba:64:6e:b7:dd:8f:a5:
c9:fc:07:48:36:2f:36:66:36:e6:cd:0c:ba:eb:ac:
a6:45:db:c1:d8:af:ed:9d:a7:2b:95:44:a7:87:18:
26:e0:7f:99:b2:dc:f4:1c:34:e9:f8:12:da:9b:5a:
c7:b8:a1:3d:42:22:cd:69:9e:f7:e9:5b:6d:0f:bd:
44:7f:ea:ab:92:6b:e0:08:37:1f:9e:66:b3:c4:3d:
31:6b:15:82:75:fe:77:e7:ab:6d:de:60:da:2d:f1:
90:bf:88:57:8e:46:d2:63:52:a8:a2:35:41:3e:e8:
b4:86:bc:c6:5e:65:56:05:9b:7a:15:37:8b:c5:7b:
87:19:0d:bf:80:45:a3:fd:a7:9e:93:29:ac:3f:9a:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:F9:B2:D1:E0:84:39:D1:B5:E5:6D:83:F3:F1:EC:06:68:4F:B5
X509v3 Authority Key Identifier:
keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/qoT5stHghDnRteVtg_Px7AZoT7U.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42729
Signature Algorithm: sha256WithRSAEncryption
7e:bd:66:51:30:9d:1f:ce:f6:2a:f6:d1:3f:c8:40:39:dc:b6:
e1:4f:7c:8e:ff:ce:cf:aa:2d:a2:9d:a8:24:15:85:ba:71:d6:
2c:aa:46:12:7e:2d:27:e8:ec:bf:11:4b:da:df:d1:34:7b:90:
52:84:37:ae:82:8b:81:a6:1e:c0:a9:a4:32:d6:72:22:18:85:
50:b1:f5:e7:78:d6:59:f1:7b:06:20:ee:49:54:8a:31:71:60:
59:93:a5:32:24:2a:e9:39:57:7b:48:ff:6b:5e:2e:08:21:5f:
57:b5:17:be:14:8a:5b:94:d4:c0:73:7b:e7:2d:8c:64:f4:54:
d0:32:63:79:e5:a6:ff:07:e5:0f:84:5f:71:f8:fe:c9:c4:a1:
58:be:2c:56:8b:4b:f5:5d:22:75:4a:df:3d:bb:bc:42:83:f5:
3d:c2:41:e0:d4:0c:cf:87:f1:f6:34:92:f6:85:49:56:53:bd:
b5:36:c4:7b:c7:c2:9b:bf:2a:28:9f:f3:de:1f:40:45:29:73:
c3:e4:b9:89:c3:44:c9:f1:64:32:6c:ca:27:46:80:49:7a:b3:
23:1b:de:ac:5a:45:9d:0d:7e:73:fe:52:43:c8:53:ea:75:a1:
ae:19:a8:41:83:6e:4e:f0:4a:87:1e:b6:38:14:0b:ed:3a:6e:
80:d8:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:47 2026 by rpki-client