Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/hahQKAiuPDo7KuYorhEHRlOECJo.asa
File: hahQKAiuPDo7KuYorhEHRlOECJo.asa (raw, json)
Hash identifier: 3FDMZPd9OV1qYm4PdkfgaCNm4mbduhJVKU7N+tAlDjQ=
Subject key identifier: 85:A8:50:28:08:AE:3C:3A:3B:2A:E6:28:AE:11:07:46:53:84:08:9A
Certificate issuer: /CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Certificate serial: 019CD3CA33F25C6DD60759610AC42B5E3FC9
Authority key identifier: 40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/hahQKAiuPDo7KuYorhEHRlOECJo.asa
Signing time: Mon 09 Mar 2026 18:09:30 +0000
ASPA not before: Mon 09 Mar 2026 18:09:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 213877
Providers: AS: 49418
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:ca:33:f2:5c:6d:d6:07:59:61:0a:c4:2b:5e:3f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40eed6d447dad459c2dfd98c14d0032d0d51a725
Validity
Not Before: Mar 9 18:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85a8502808ae3c3a3b2ae628ae1107465384089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:54:f3:39:34:f2:83:89:6d:e6:d0:26:a8:b3:
38:57:1a:d9:6f:12:d3:8e:17:da:59:81:7d:0e:64:
cb:5a:b3:83:11:55:4c:5b:05:62:ae:a7:02:b0:b2:
ac:3f:4e:0c:21:a9:b9:44:3b:6f:a6:b4:f0:f2:14:
21:7c:7c:05:2c:d1:81:9f:10:4d:21:c2:40:a6:95:
4f:c4:c7:1a:a3:3e:91:bf:7f:91:9a:ec:dd:95:cb:
9c:64:0e:3b:71:72:c6:96:9a:93:ff:6e:ec:10:a3:
cb:ca:2a:6f:4d:79:65:eb:5a:fd:b5:df:32:92:81:
eb:bb:1a:a4:48:26:61:be:1c:a5:a9:e6:3a:93:48:
8e:12:4a:ed:8a:93:ad:e0:5d:f4:3d:f6:2b:c9:cc:
af:df:c7:88:b4:b8:6f:e8:a7:98:db:d2:df:17:35:
a1:74:ee:66:4e:7d:96:51:cf:a7:9d:2d:bd:00:de:
f0:fa:09:c5:cf:56:a6:5f:c5:db:4f:70:0d:9a:82:
e3:6b:d7:5e:3a:8b:1b:42:26:16:ec:ea:c3:a2:2b:
3e:c9:5b:3e:ae:06:5d:9f:e9:91:6c:d6:d9:b4:54:
b2:ed:16:92:63:1b:f3:8c:b7:34:8a:43:d6:6b:3b:
12:12:85:d2:44:a8:f6:0c:e2:ef:2d:d1:d9:43:d8:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:50:28:08:AE:3C:3A:3B:2A:E6:28:AE:11:07:46:53:84:08:9A
X509v3 Authority Key Identifier:
keyid:40:EE:D6:D4:47:DA:D4:59:C2:DF:D9:8C:14:D0:03:2D:0D:51:A7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO7W1Efa1FnC39mMFNADLQ1RpyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/hahQKAiuPDo7KuYorhEHRlOECJo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/44bdb8-f997-408f-9bd3-e077d39ed727/1/QO7W1Efa1FnC39mMFNADLQ1RpyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213877
Signature Algorithm: sha256WithRSAEncryption
bd:03:8b:c2:41:ed:3e:be:e6:2d:38:21:05:7e:8d:59:1e:8d:
91:cf:89:26:e8:21:51:9b:8b:ae:32:9d:dc:9c:31:f3:dc:f1:
48:50:9d:20:1e:3a:75:b9:f0:8f:b9:55:7c:cd:4f:64:25:72:
e3:0e:cc:c3:66:4a:0a:c3:d9:cc:31:9b:fc:81:05:28:71:e7:
f8:92:18:00:7c:7c:ab:4f:38:fc:34:3d:7c:b5:74:b3:4a:53:
e5:2f:ee:3b:4b:d9:94:dc:52:fb:2b:8e:da:3b:fa:49:5a:28:
c6:fe:9f:3a:03:51:65:91:1b:bd:82:34:29:31:8f:9b:74:2e:
28:b2:d2:90:b9:76:96:85:89:c0:39:c0:62:d2:ec:79:0c:b0:
31:bf:14:57:52:f6:8f:3a:32:16:6c:dd:9f:94:8d:61:4d:ab:
c9:79:ae:c6:90:97:37:cf:b3:0d:15:ea:53:fa:4a:ab:ef:0a:
38:fd:16:47:a1:fd:94:5e:d3:1b:85:8c:e9:e3:e1:e6:8e:56:
8b:65:c7:6f:17:52:0f:9c:60:89:b6:29:4e:7d:a6:e5:1d:88:
38:6f:08:2f:d8:e1:4b:b7:63:90:bd:d0:82:ba:24:3e:63:e4:
5a:df:d6:8e:98:71:64:cd:3f:8a:1f:ee:6e:53:17:2c:fd:88:
97:1a:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:05 2026 by rpki-client