Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/IviSs_87UUl9qVXZnSSlcS-C_RI.asa
File: IviSs_87UUl9qVXZnSSlcS-C_RI.asa (raw, json)
Hash identifier: wdYAl3BdUIB3Umq2J3hRMzmaflBh8zzGwFUl64xraYc=
Subject key identifier: 22:F8:92:B3:FF:3B:51:49:7D:A9:55:D9:9D:24:A5:71:2F:82:FD:12
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 019DD94C30AF75D170E5F7D6D7965B2FC3A0
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/IviSs_87UUl9qVXZnSSlcS-C_RI.asa
Signing time: Wed 29 Apr 2026 12:52:22 +0000
ASPA not before: Wed 29 Apr 2026 12:52:22 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 43500
Providers: AS: 174
AS: 3356
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:4c:30:af:75:d1:70:e5:f7:d6:d7:96:5b:2f:c3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Apr 29 12:52:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22f892b3ff3b51497da955d99d24a5712f82fd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:1e:6c:a8:46:fa:f7:a2:62:b2:1f:39:b0:
95:92:43:95:7c:de:f5:e8:63:95:e3:dd:b3:0f:b7:
b3:ea:8f:15:c7:25:99:a6:6e:d6:d4:e9:9e:b6:0f:
e4:91:44:0f:37:81:2d:a2:6b:44:9f:a6:6f:34:60:
1b:f8:58:99:a7:d5:0b:d8:f9:43:71:de:78:0f:52:
79:1a:e0:95:15:32:81:a2:da:14:aa:4f:a7:22:32:
bf:c2:dc:60:4f:7a:42:2f:3f:f0:db:1b:94:ec:f6:
81:3a:55:80:05:bd:dc:48:b9:13:fd:da:55:7c:aa:
60:f3:69:aa:03:5e:ed:08:b0:a5:a7:ba:34:bf:6b:
9d:e3:ad:11:a5:5a:10:76:6b:f3:a8:65:18:fb:3e:
4f:ae:30:ed:bd:85:3a:b0:ea:46:02:47:a5:10:20:
fa:45:c0:7b:ca:9f:3c:bd:2f:b3:93:9f:ee:3f:3b:
4e:cd:26:1c:18:c8:5e:74:e5:5e:70:80:82:82:5e:
93:e9:ce:d5:82:7c:ed:cc:9a:82:58:4e:d9:d9:f6:
05:84:1d:9f:82:80:02:da:7c:4c:2d:56:7a:5e:62:
8f:b9:27:bf:58:5f:49:cf:11:8f:0f:fc:18:8a:43:
78:08:0a:68:5d:41:14:03:01:44:ec:56:3e:4c:0e:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F8:92:B3:FF:3B:51:49:7D:A9:55:D9:9D:24:A5:71:2F:82:FD:12
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/IviSs_87UUl9qVXZnSSlcS-C_RI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43500
Signature Algorithm: sha256WithRSAEncryption
4c:1c:be:02:c6:43:e3:76:d8:ff:01:25:55:9c:54:67:ed:98:
f9:7e:0a:18:8d:c6:24:9a:d6:33:4e:98:7b:cb:56:a7:f9:cd:
95:d3:5a:da:63:d1:de:0e:e7:26:a5:dc:1a:08:ec:4b:53:6b:
73:5e:08:74:3e:1f:55:39:50:69:9f:7b:a5:4d:63:a0:14:08:
ac:2a:36:f0:c1:45:c9:c8:5f:7d:8e:c0:a8:b0:eb:7a:c3:5f:
f6:ab:c4:44:ce:02:23:f3:c3:3b:bf:b7:35:6c:49:76:b8:98:
fb:d6:bb:09:ac:d2:12:1f:09:1a:94:c0:8a:96:e9:5d:54:fc:
13:c0:d0:6f:50:bb:ec:36:21:db:23:ac:36:bf:99:5f:7f:b6:
7b:d0:5c:9a:fd:61:cb:61:59:b9:bf:8d:99:21:5b:72:15:b1:
a1:6f:99:11:36:60:40:f3:c9:b6:ba:b8:b7:14:d3:e7:ee:2f:
c9:5c:91:2c:99:68:89:63:ce:91:ab:f0:30:0b:c6:aa:c4:8b:
9d:5e:36:be:40:34:18:c9:1b:66:b8:a0:da:84:53:78:6b:74:
aa:58:6e:d7:dc:98:b6:0f:d6:6b:b9:06:e5:5a:c1:8b:11:b2:
c9:39:01:26:96:41:84:d3:b1:83:1d:1d:ba:29:95:45:a0:23:
55:5c:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:07 2026 by rpki-client