Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/dnIjUmsEHgp_YFu7qyPBpGHMn1A.asa
File: dnIjUmsEHgp_YFu7qyPBpGHMn1A.asa (raw, json)
Hash identifier: /XZO0wlObj4P7b6zWnKA+wOQByUBrhSwjtvumpgT9Js=
Subject key identifier: 76:72:23:52:6B:04:1E:0A:7F:60:5B:BB:AB:23:C1:A4:61:CC:9F:50
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 019D2EAB65BA72C773977A47D3808EB2C5CC
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/dnIjUmsEHgp_YFu7qyPBpGHMn1A.asa
Signing time: Fri 27 Mar 2026 09:41:17 +0000
ASPA not before: Fri 27 Mar 2026 09:41:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 24824
Providers: AS: 1299
AS: 2914
AS: 3257
AS: 5385
AS: 8437
AS: 55002
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:ab:65:ba:72:c7:73:97:7a:47:d3:80:8e:b2:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Mar 27 09:41:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=767223526b041e0a7f605bbbab23c1a461cc9f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:68:52:41:c0:f9:77:ca:26:1c:ea:09:6c:
ce:ef:e8:bf:1f:04:0a:a9:c2:bf:11:e1:f7:49:78:
7c:89:9b:88:00:77:7c:ef:ae:e3:af:f2:ac:b4:f3:
f2:82:f4:fb:24:3b:72:b4:85:8e:3c:42:1a:fb:be:
1d:62:35:12:35:38:40:36:f4:ff:cf:e4:57:c3:8d:
63:25:82:df:41:23:12:3e:2c:a7:c6:78:05:c0:7e:
96:eb:4a:31:92:a7:de:10:c2:f1:40:01:eb:84:9c:
ee:ab:0b:11:8e:6e:38:a5:fa:e6:88:46:d0:43:3f:
e2:fc:94:27:c4:36:4b:ee:2a:0d:19:7c:75:4c:55:
1d:13:23:95:02:68:a9:4e:3c:07:58:c8:10:5c:49:
c0:70:a9:40:b8:87:3f:11:7c:67:ec:fb:8d:c7:cb:
9d:a2:99:c8:4c:1c:45:d5:29:8d:67:45:56:0a:70:
5a:89:be:89:f5:d2:9c:b0:fb:d8:94:1e:b4:86:c6:
f0:1f:77:43:e7:90:25:2f:77:ce:52:91:1d:4c:cd:
2e:4d:c5:b4:fe:11:85:70:13:c9:95:07:21:d9:68:
1c:ea:ca:2d:92:1a:7c:62:1e:a0:63:41:21:71:57:
94:5c:a0:58:c5:1a:fa:34:0f:cd:9d:d8:49:bc:d8:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:23:52:6B:04:1E:0A:7F:60:5B:BB:AB:23:C1:A4:61:CC:9F:50
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/dnIjUmsEHgp_YFu7qyPBpGHMn1A.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24824
Signature Algorithm: sha256WithRSAEncryption
01:13:a6:9a:17:f8:65:ec:cc:22:14:6a:d2:03:3d:3d:32:a5:
43:f6:25:9b:65:77:6b:61:fd:cf:68:a0:26:be:77:b6:62:53:
08:89:ca:62:0f:44:8c:22:e2:a7:d0:3c:67:d8:86:dc:b0:aa:
18:92:23:f7:8b:8c:be:24:b9:5b:71:0c:f1:be:0b:dd:89:16:
fc:bb:99:3f:93:24:43:46:de:f7:d1:77:c8:4a:77:a7:ab:8b:
e1:b0:66:e7:d4:c1:a3:ed:fa:c6:cb:2b:77:86:ba:f5:10:fd:
c6:c4:f4:c3:2a:88:f4:e4:c6:33:ad:74:0b:78:d9:5e:cc:8e:
72:63:23:66:65:0b:63:3b:89:9a:7c:15:f2:36:1f:fe:6d:2c:
f9:ec:5d:bb:56:46:10:a4:41:ec:19:a5:02:a6:3d:9b:38:18:
21:0a:eb:72:a1:14:e7:f6:40:42:e1:36:63:fb:63:8c:2c:d1:
49:88:bc:2a:8e:38:c4:49:5f:94:68:95:bb:9e:dc:e9:a7:d4:
c4:4a:3b:ff:da:40:48:cc:1f:f5:62:32:de:d2:ad:6a:e0:10:
8f:73:07:6f:93:90:2f:d5:7c:48:35:34:d0:1a:7a:72:c9:25:
67:f6:6e:5d:fd:1e:a4:30:0f:3a:39:d7:77:fc:b0:a5:67:ef:
8c:c6:60:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:30:39 2026 by rpki-client