Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/XdHfu4aNbbqY05djIHZSat5N9NA.asa
File: XdHfu4aNbbqY05djIHZSat5N9NA.asa (raw, json)
Hash identifier: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=
Subject key identifier: 5D:D1:DF:BB:86:8D:6D:BA:98:D3:97:63:20:76:52:6A:DE:4D:F4:D0
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019E7342A111C57FA8C8E164032A73FF0F51
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/XdHfu4aNbbqY05djIHZSat5N9NA.asa
Signing time: Fri 29 May 2026 10:23:26 +0000
ASPA not before: Fri 29 May 2026 10:23:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 216081
Providers: AS: 6939
AS: 20473
AS: 200482
AS: 214915
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:42:a1:11:c5:7f:a8:c8:e1:64:03:2a:73:ff:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: May 29 10:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dd1dfbb868d6dba98d397632076526ade4df4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:d2:ae:bf:d8:c5:78:e0:6f:30:48:bd:76:
6c:86:b1:05:84:00:a0:57:ad:b3:06:7d:8f:a2:11:
99:0f:74:98:3d:b9:13:b9:a8:79:4a:74:26:ac:df:
43:1b:e5:d7:af:d2:d7:6d:6e:f7:5f:76:d5:56:68:
62:fa:20:22:7c:94:4a:2e:ec:5f:79:21:1e:a6:8e:
0e:3a:6b:59:f2:e5:b9:be:e8:a3:e3:1d:6b:7b:a0:
aa:b5:1a:04:b6:a9:6f:43:ad:44:a2:b8:b1:31:8b:
cb:f2:87:bc:50:d6:2f:04:5f:20:f3:ce:b1:13:28:
cf:92:03:22:74:47:79:77:4e:0b:e0:d8:b8:44:40:
33:16:e9:05:f8:08:93:fa:e8:83:bc:ff:c3:0c:84:
a0:f0:22:d2:dd:73:89:7f:4b:d5:60:e8:31:dc:cc:
57:3e:b2:bd:9d:14:b0:fc:c5:e4:66:2f:d8:d0:87:
27:49:2a:e2:57:4f:c3:89:e3:dc:09:44:d0:79:3c:
aa:b0:b1:94:34:92:66:d8:66:b6:25:fd:e5:4f:a1:
05:c4:2a:97:3d:40:60:ff:27:bb:0c:b7:55:e9:be:
b2:9f:bd:96:f3:61:6b:32:42:95:25:73:02:fa:4d:
59:f1:62:e9:d6:b2:fd:2f:ff:fb:d1:d5:81:c3:f9:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D1:DF:BB:86:8D:6D:BA:98:D3:97:63:20:76:52:6A:DE:4D:F4:D0
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/XdHfu4aNbbqY05djIHZSat5N9NA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216081
Signature Algorithm: sha256WithRSAEncryption
8c:3b:f7:da:1d:52:11:3b:a2:fa:c6:ad:f0:e0:4b:36:5b:c7:
69:af:3a:2f:59:38:2a:82:16:be:09:2a:4a:61:8a:35:bf:ea:
86:91:f4:83:08:2c:cc:ae:81:7c:b8:11:1e:b8:4c:39:7b:d4:
2e:a6:ea:ed:fc:08:12:1a:bc:c4:39:97:fd:6f:dc:39:ca:2e:
a2:7c:42:e5:31:55:60:d8:63:79:f7:03:84:0a:82:53:25:86:
c1:63:46:8a:2f:48:05:b9:89:37:90:ad:97:01:c9:5d:4b:05:
8f:b0:58:b4:09:ad:be:dd:1a:cf:1d:f3:8b:c8:c3:db:e8:07:
4d:b3:56:4e:d0:9c:0d:0e:15:e9:6f:a0:10:5b:61:30:1d:8f:
70:6c:d8:7b:40:fc:e5:03:43:10:d9:08:cb:76:60:c3:2f:33:
06:b0:a1:4c:62:f7:f2:24:7c:88:0b:f2:d7:fe:85:91:53:02:
e9:8a:6b:81:d3:92:ab:bc:2c:74:f8:2e:68:1c:65:90:54:42:
06:97:b8:9d:8b:3f:c7:1d:fe:07:19:b2:f0:af:aa:2c:f2:c3:
5e:35:68:9c:1f:ee:46:03:1a:8b:c8:58:34:22:76:8c:67:c3:
de:2c:76:26:2a:38:f3:de:b0:c7:6b:99:86:58:b8:a4:d9:83:
e3:52:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:04 2026 by rpki-client