Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/XIFzkJPJ71521E26Mrj2xnc0JrU.asa
File: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (raw, json)
Hash identifier: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=
Subject key identifier: 5C:81:73:90:93:C9:EF:5E:76:D4:4D:BA:32:B8:F6:C6:77:34:26:B5
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 019CDA0FBEDD34B43B47FC98B6FF0B873681
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/XIFzkJPJ71521E26Mrj2xnc0JrU.asa
Signing time: Tue 10 Mar 2026 23:23:10 +0000
ASPA not before: Tue 10 Mar 2026 23:23:10 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 43950
Providers: AS: 8943
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:0f:be:dd:34:b4:3b:47:fc:98:b6:ff:0b:87:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Mar 10 23:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c81739093c9ef5e76d44dba32b8f6c6773426b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:3a:b3:25:03:16:f0:12:43:da:4d:e4:eb:
1e:1d:34:15:fd:66:86:e0:fd:69:03:d5:d4:28:95:
4a:de:c1:c3:c4:10:e5:9f:2a:40:b5:61:b6:80:05:
75:75:dc:16:d7:63:08:e4:60:70:37:e2:fa:48:76:
a8:db:53:82:65:42:05:27:d1:dd:0d:7d:03:4a:ec:
5f:19:38:2c:7b:b7:35:1e:e7:6a:2b:51:bd:0d:28:
53:74:ac:54:bd:46:57:4f:34:27:3f:0b:c9:ce:2f:
27:07:8c:c7:32:b3:f1:37:41:f0:70:be:48:a5:c0:
0b:64:d1:f7:55:58:8c:05:68:ba:b3:72:9b:07:82:
f5:16:31:f1:e6:9f:94:9d:22:cf:87:4c:bd:e1:cf:
29:12:10:1d:14:5e:32:63:03:81:e0:e3:63:d5:f1:
90:61:03:b0:ed:cf:e3:77:12:85:6d:d2:53:12:aa:
4d:15:53:1d:6c:c2:4e:c6:a3:b2:43:02:2a:8b:e0:
bc:26:ce:12:53:63:6b:0d:f0:44:0c:08:38:f7:b3:
a7:5f:93:d9:e7:99:2c:23:8f:c0:2b:87:00:b8:1a:
45:32:7e:e5:39:d8:1b:20:50:fb:03:3a:da:2b:bd:
99:7f:17:71:1d:9c:25:94:49:53:a0:5f:12:78:09:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:73:90:93:C9:EF:5E:76:D4:4D:BA:32:B8:F6:C6:77:34:26:B5
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/XIFzkJPJ71521E26Mrj2xnc0JrU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43950
Signature Algorithm: sha256WithRSAEncryption
66:ac:55:2f:7a:e0:e6:51:98:05:c0:52:a6:db:4a:5a:53:90:
44:a6:5a:0c:dd:32:49:d3:1b:aa:28:2a:eb:a7:85:56:a8:e8:
10:38:9c:b3:a5:aa:a6:ab:41:40:dc:e3:a2:4b:08:c6:b9:bb:
c7:c5:b3:e5:6c:6b:cf:af:5a:f5:e1:ec:f6:62:62:7a:75:c3:
89:45:a0:3c:4e:c8:8c:17:86:bd:d7:f4:b5:65:3a:fd:90:e0:
b6:27:98:65:3d:43:cc:d3:9c:69:68:c3:0b:62:69:16:ef:a6:
bf:3b:28:06:57:fa:9e:e2:9f:01:66:fe:5d:41:06:ab:1a:44:
af:ea:24:1f:3e:08:ef:d1:24:3f:34:f3:12:c3:72:08:53:4e:
a7:c0:7d:e7:34:eb:2c:c7:b9:ef:c5:5d:a5:35:7c:e8:26:ad:
20:cd:9d:40:6b:e6:62:6d:94:d8:10:90:51:db:19:60:5f:f7:
ed:6b:62:ed:8e:ee:85:0e:d4:6a:68:53:a2:04:d2:6f:90:c3:
b3:07:9e:91:12:e4:4f:97:86:66:b0:92:10:89:47:63:bb:f4:
a0:f8:35:b7:78:b8:c3:bf:23:cf:9d:22:65:17:54:9c:dd:ad:
95:2d:80:30:b3:eb:86:0e:21:90:9a:0a:dc:f2:4b:08:7a:2d:
61:e3:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:59 2026 by rpki-client