Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/3-jw2Mn4GAjthDEPkukJUUAA8ms.asa
File: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (raw, json)
Hash identifier: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=
Subject key identifier: DF:E8:F0:D8:C9:F8:18:08:ED:84:31:0F:92:E9:09:51:40:00:F2:6B
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019D0ACF957F6DE3450086B96C683B035A1F
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/3-jw2Mn4GAjthDEPkukJUUAA8ms.asa
Signing time: Fri 20 Mar 2026 10:34:29 +0000
ASPA not before: Fri 20 Mar 2026 10:34:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 12732
Providers: AS: 174
AS: 286
AS: 3356
AS: 5405
AS: 6939
AS: 8220
AS: 20676
AS: 30742
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 10:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:cf:95:7f:6d:e3:45:00:86:b9:6c:68:3b:03:5a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Mar 20 10:34:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfe8f0d8c9f81808ed84310f92e909514000f26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:8f:dd:88:21:0f:bd:93:28:aa:ad:61:0f:
dd:c3:cc:d3:09:4e:6c:22:9f:56:42:37:69:32:6b:
41:6a:cf:75:fb:cf:f8:29:9d:93:9f:02:39:ed:3b:
0b:4e:93:14:64:69:45:79:a8:a1:4e:25:a1:53:42:
55:7e:29:8d:94:ed:1a:47:63:31:98:3c:27:ac:ee:
27:d2:75:ab:e8:bc:28:ad:58:cd:7f:3b:38:b7:f0:
26:2d:29:4d:72:d8:fc:14:13:85:cb:84:49:ea:91:
b1:bf:94:a5:ff:57:37:d1:b9:06:e7:3e:0f:82:5c:
53:b2:cd:e9:67:82:6e:ec:7b:ac:a8:55:0b:b1:9d:
f6:1c:b5:f7:76:62:33:e1:ce:d0:67:05:f8:62:e0:
60:b7:c9:68:82:93:37:ba:3f:43:87:77:9b:dd:b1:
29:24:62:84:2e:f1:52:08:6c:76:98:80:f7:b0:37:
33:d4:77:3b:06:47:5f:70:c3:34:10:5f:a9:9a:00:
82:d7:5b:fa:3a:f1:77:2a:29:e1:1f:da:47:e6:c0:
5a:b8:51:f3:9f:4b:23:4e:1c:fb:e5:c1:bd:7d:0c:
84:35:1a:2d:f2:ab:cc:45:39:8b:a3:64:df:42:41:
ea:82:41:19:c1:8e:17:52:13:dc:12:6c:c2:f5:c9:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:F0:D8:C9:F8:18:08:ED:84:31:0F:92:E9:09:51:40:00:F2:6B
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/3-jw2Mn4GAjthDEPkukJUUAA8ms.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12732
Signature Algorithm: sha256WithRSAEncryption
88:9f:de:28:9e:e9:d2:0a:e1:f5:72:f2:fe:70:aa:1e:3f:aa:
78:0f:a4:0a:3b:61:41:4b:dc:51:34:fb:4c:ec:95:6f:72:ec:
46:6c:3b:31:e4:f0:7a:a4:08:41:e8:46:64:96:a8:13:87:da:
79:84:49:b8:44:c9:f7:28:20:b4:8e:1a:db:96:da:00:ec:47:
b4:7f:1b:55:a0:80:55:1a:e3:0f:1d:9f:cd:e6:b0:de:a1:81:
91:33:31:47:2d:f5:66:b8:c6:02:25:3e:95:01:49:6a:a7:ba:
a2:78:b8:6b:55:7d:95:57:5d:5f:23:90:6d:49:3e:cb:2e:49:
27:bc:ce:66:7e:ff:87:9d:47:35:1d:9d:35:0a:01:db:e7:8e:
54:8f:c8:09:2e:7f:0b:3a:83:e7:3e:fa:dc:36:39:44:c5:15:
b0:07:13:ab:9b:7a:02:52:01:db:13:b7:29:e6:82:fe:3f:d2:
bd:c1:c9:56:e3:8b:01:bd:3c:40:0e:41:a9:cb:ab:d9:ee:c1:
5b:9f:44:52:58:63:63:72:ce:b6:73:f1:6a:76:59:88:f5:47:
2e:25:e9:7a:58:42:09:1a:30:5d:2c:c4:f1:83:7d:2a:98:82:
fc:0f:b3:62:21:6a:74:79:d4:3a:3b:c8:df:21:5f:db:d9:a3:
64:76:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:04:07 2026 by rpki-client