Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa
File: O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa (raw, json)
Hash identifier: 67is5rgLKuOUXA0v6cE8sl5V36YTQpNm07lUONgLSRE=
Subject key identifier: 3B:65:C5:B4:D3:23:E4:5F:25:60:95:0C:4A:E6:F3:35:46:BC:16:BE
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 01A057EE55F914197CA865D1E31864C85A1E
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa
Signing time: Mon 31 Aug 2026 13:07:12 +0000
ASPA not before: Mon 31 Aug 2026 13:07:12 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 41765
Providers: AS: 174
AS: 3356
AS: 8218
AS: 29075
AS: 30781
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:ee:55:f9:14:19:7c:a8:65:d1:e3:18:64:c8:5a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Aug 31 13:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b65c5b4d323e45f2560950c4ae6f33546bc16be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:47:68:7e:71:47:d9:e2:37:42:80:e5:5f:80:
1a:1a:23:55:f8:02:a9:9d:36:fd:06:db:eb:ce:2f:
6e:ac:ca:d4:06:e5:e4:32:ed:32:e8:3b:59:29:b4:
20:bb:e0:0a:7f:1e:67:ce:8a:c0:a4:89:fc:d0:02:
f6:37:e9:54:61:88:88:39:ff:2a:19:b2:89:d2:30:
55:e5:4e:0f:70:c5:d6:93:ee:4f:ad:3f:7d:d0:a8:
03:c5:e1:e8:5d:d0:0f:14:3a:7b:e9:a6:a8:ef:0c:
4d:4c:1c:3b:4f:93:20:1b:24:87:1e:92:ab:4d:1f:
81:84:34:46:4d:06:82:10:0a:64:ab:f0:0c:dc:0c:
0a:b3:2e:9d:58:91:0a:6f:01:15:48:02:8f:d4:14:
15:61:2b:f4:72:09:59:12:f9:ab:e5:16:6a:1a:4c:
35:86:e4:50:07:93:05:18:62:e3:0f:a0:56:b6:68:
f5:53:78:d0:d6:28:98:7f:fa:56:8f:7b:1d:92:67:
57:c0:68:7c:5b:18:d9:28:b7:c1:4d:e4:75:54:bf:
28:d8:47:0b:bb:d9:cb:65:fe:1a:84:31:2c:c9:44:
d0:61:84:6c:3d:9a:fd:7f:2f:5a:63:b4:d3:4f:b9:
23:9f:60:23:3b:a4:10:4c:d5:fe:d2:b1:22:6a:74:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:C5:B4:D3:23:E4:5F:25:60:95:0C:4A:E6:F3:35:46:BC:16:BE
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41765
Signature Algorithm: sha256WithRSAEncryption
84:4e:af:b4:71:ec:cd:90:9c:f7:a5:f6:c0:47:9c:a1:d1:76:
17:89:d7:dc:71:10:22:73:9c:47:a2:13:9f:9c:c2:1a:4c:2d:
4b:8f:e9:0f:53:8c:e3:fb:0e:a0:70:de:b0:c5:a4:d4:17:6a:
9d:f0:7c:82:27:e1:6b:91:bf:a1:23:ad:3b:7e:70:92:ca:9c:
1c:35:80:05:10:35:f5:30:ba:c5:33:15:06:68:9b:c2:cb:62:
08:43:c8:c0:15:5b:f9:40:25:91:5a:f0:a8:3e:20:78:18:ea:
a4:4d:d4:56:3f:7d:3e:ad:6d:c0:c5:9e:e1:1a:3e:b6:6b:53:
ec:72:29:00:56:7b:ca:77:20:8d:eb:ec:8e:98:0e:eb:22:10:
0d:71:39:87:0a:fa:bf:3c:d7:2d:43:b9:84:fb:4b:a2:87:27:
0c:ad:24:7e:02:85:99:1b:4b:5b:d1:4f:d2:11:d8:d0:6d:87:
e3:03:9e:93:98:8c:d7:d1:de:1a:fe:11:ff:50:78:ba:54:ef:
e6:f8:61:b3:22:80:97:f5:bd:70:bd:88:4d:4d:eb:a0:15:89:
7e:3a:ba:a7:4d:69:2e:ac:c7:6a:45:46:92:d8:4f:f0:5d:23:
03:1b:de:f2:7f:e1:53:9f:43:ef:f4:be:4c:c4:c3:84:95:9d:
1d:c5:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:48:18 2026 by rpki-client