Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/qY64LLAKmXVBF2yF2a0AG56IVAo.asa
File: qY64LLAKmXVBF2yF2a0AG56IVAo.asa (raw, json)
Hash identifier: ucX67FWJ1VM3ZcVEhzhFpCcYubHiPMVmYsb/9Ginm64=
Subject key identifier: A9:8E:B8:2C:B0:0A:99:75:41:17:6C:85:D9:AD:00:1B:9E:88:54:0A
Certificate issuer: /CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Certificate serial: 019EF94BCACEF8D03B07C3A477890AD1E62F
Authority key identifier: 1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/qY64LLAKmXVBF2yF2a0AG56IVAo.asa
Signing time: Wed 24 Jun 2026 11:02:34 +0000
ASPA not before: Wed 24 Jun 2026 11:02:34 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29298
Providers: AS: 7018
AS: 7922
AS: 28725
AS: 29208
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4b:ca:ce:f8:d0:3b:07:c3:a4:77:89:0a:d1:e6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Validity
Not Before: Jun 24 11:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a98eb82cb00a997541176c85d9ad001b9e88540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:e1:55:95:41:89:2d:69:23:b9:dc:77:b0:
1a:d7:48:c3:6f:dc:af:e9:c7:f9:22:dd:6d:af:e8:
13:e0:b8:a4:85:26:d4:96:11:e4:9d:52:d3:f1:b0:
97:41:e3:8d:08:64:f2:d5:29:f2:cd:04:19:82:43:
22:7a:87:72:d7:9f:e0:1b:48:86:86:bd:5a:00:96:
d1:84:25:ab:e9:93:26:75:8b:ec:9d:1e:93:fe:90:
45:e8:fe:1c:8a:21:c6:5e:98:92:84:66:31:b6:40:
54:d1:a9:c2:46:df:a4:58:99:8d:e5:73:a0:00:93:
05:a5:b3:a2:0c:d4:99:00:8c:0f:db:c2:ae:41:9d:
de:5b:40:c2:3a:56:bd:d0:32:92:0b:1b:a7:f9:75:
3b:85:5c:b6:38:a5:2e:ec:3e:42:01:d8:8d:c0:25:
97:f8:41:54:0f:9c:7c:6b:41:dd:6a:58:f8:9a:b2:
73:ca:53:4d:59:5b:87:54:a9:c2:11:74:4e:d1:1e:
20:4a:ee:6b:9d:75:a5:64:83:74:f9:7f:98:3a:2f:
a2:57:52:93:b5:bd:e1:e5:4c:81:5b:b6:25:5b:ab:
75:c9:ca:f2:60:ef:ae:c1:aa:d1:71:ed:ef:25:b9:
eb:2b:8b:6e:26:48:ab:8d:07:6b:4e:b2:cc:c7:0f:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:B8:2C:B0:0A:99:75:41:17:6C:85:D9:AD:00:1B:9E:88:54:0A
X509v3 Authority Key Identifier:
keyid:1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/qY64LLAKmXVBF2yF2a0AG56IVAo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29298
Signature Algorithm: sha256WithRSAEncryption
81:61:a5:09:71:3a:9b:c0:d6:3d:21:8c:9f:55:ac:d8:2a:71:
12:92:c7:f3:c4:bb:f4:3e:bf:73:f4:09:a7:45:23:a0:a4:4c:
0c:75:6c:8d:1e:16:f2:b2:43:75:fe:12:43:6e:df:b8:59:9f:
b4:35:8f:46:35:54:22:da:ca:84:08:e0:10:2d:dd:85:b8:6d:
d2:6f:66:30:0f:40:b8:3a:eb:46:be:de:0b:59:4c:4b:b0:97:
b7:bf:c9:0b:e8:52:13:7f:8d:ec:a1:1d:21:43:e1:f2:b2:eb:
7b:78:6f:9c:8e:0d:da:8a:ca:53:fe:9a:1e:5a:27:91:c4:39:
be:e6:fd:f2:6e:6c:e3:cc:c7:fa:42:4e:93:14:d9:b7:4a:99:
87:f1:e5:8f:a7:39:46:46:77:fa:aa:82:17:fe:f4:86:67:4e:
2a:8b:0c:10:ad:56:aa:59:50:27:66:6a:5f:13:68:c8:94:90:
c4:1a:e0:b0:a2:53:80:4c:a0:a5:12:da:ba:db:0e:d1:27:16:
bc:3d:91:29:24:bc:5b:8a:fd:15:ec:90:6e:35:87:3b:5e:8f:
a2:aa:dd:db:e5:81:3c:32:ce:fd:ec:5c:bd:9e:1f:32:4f:35:
75:1c:1e:b8:9b:c9:f2:7c:56:3d:c0:71:10:fa:35:91:54:2e:
83:45:5f:4c
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZ75S8rO+NA7B8Okd4kK0eYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMGZkYTM2NWRjOTVkYTU3MjllMWY1ODliMDI5ZmQxNTdm
MDIzM2EwHhcNMjYwNjI0MTEwMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThlYjgyY2IwMGE5OTc1NDExNzZjODVkOWFkMDAxYjllODg1NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SbhVZVBiS1pI7ncd7Aa10jDb9yv
6cf5It1tr+gT4LikhSbUlhHknVLT8bCXQeONCGTy1SnyzQQZgkMieody15/gG0iG
hr1aAJbRhCWr6ZMmdYvsnR6T/pBF6P4ciiHGXpiShGYxtkBU0anCRt+kWJmN5XOg
AJMFpbOiDNSZAIwP28KuQZ3eW0DCOla90DKSCxun+XU7hVy2OKUu7D5CAdiNwCWX
+EFUD5x8a0Hdalj4mrJzylNNWVuHVKnCEXRO0R4gSu5rnXWlZIN0+X+YOi+iV1KT
tb3h5UyBW7YlW6t1ycryYO+uwarRce3vJbnrK4tuJkirjQdrTrLMxw8pDwIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFKmOuCywCpl1QRdshdmtABueiFQKMB8GA1UdIwQY
MBaAFB8P2jZdyV2lcp4fWJsCn9FX8CM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdfYU5sM0pYYVZ5bmg5WW13S2YwVmZ3SXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMTU1MWYtNDMyMi00MDU2LThjNzct
OTZkMmMzNzBlMWYwLzEvcVk2NExMQUttWFZCRjJ5RjJhMEFHNTZJVkFvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMTU1MWYtNDMyMi00MDU2LThjNzctOTZkMmMzNzBlMWYw
LzEvSHdfYU5sM0pYYVZ5bmg5WW13S2YwVmZ3SXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnJyMA0GCSqGSIb3
DQEBCwUAA4IBAQCBYaUJcTqbwNY9IYyfVazYKnESksfzxLv0Pr9z9AmnRSOgpEwM
dWyNHhbyskN1/hJDbt+4WZ+0NY9GNVQi2sqECOAQLd2FuG3Sb2YwD0C4OutGvt4L
WUxLsJe3v8kL6FITf43soR0hQ+Hysut7eG+cjg3aispT/poeWieRxDm+5v3ybmzj
zMf6Qk6TFNm3SpmH8eWPpzlGRnf6qoIX/vSGZ04qiwwQrVaqWVAnZmpfE2jIlJDE
GuCwolOATKClEtq62w7RJxa8PZEpJLxbiv0V7JBuNYc7Xo+iqt3b5YE8Ms797Fy9
nh8yTzV1HB64m8nyfFY9wHEQ+jWRVC6DRV9M
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:31 2026 by rpki-client