Autonomous System Provider Authorization
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexusLTD/0/AS219189.asa
File: AS219189.asa (raw, json)
Hash identifier: wWAacWaZcsY8QZBLd0Bp3B+bJc7mB2N0J7IWkzFhuVI=
Subject key identifier: 26:EF:CE:A5:00:79:30:42:3C:3A:1A:A0:BA:4E:73:92:CF:FB:30:8C
Certificate issuer: /CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Certificate serial: 1C34A519829BD005BDE3C2D339C2B21EFB083173
Authority key identifier: 1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/AS219189.asa
Signing time: Tue 21 Jul 2026 19:20:28 +0000
ASPA not before: Tue 21 Jul 2026 19:15:28 +0000
ASPA not after: Tue 20 Jul 2027 19:20:28 +0000
Customer ASID: 219189
Providers: AS: 835
AS: 52025
AS: 207841
AS: 209735
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:34:a5:19:82:9b:d0:05:bd:e3:c2:d3:39:c2:b2:1e:fb:08:31:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Validity
Not Before: Jul 21 19:15:28 2026 GMT
Not After : Jul 20 19:20:28 2027 GMT
Subject: CN=26EFCEA5007930423C3A1AA0BA4E7392CFFB308C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:75:ed:18:52:3e:fa:63:60:df:ab:87:f5:
14:8b:31:d7:25:d3:8b:72:43:f0:52:9b:3d:75:68:
4d:c0:69:60:9c:6f:cf:be:65:14:0a:ff:cf:e1:11:
d2:46:42:35:0e:55:f4:31:c2:d2:bf:45:ee:a4:85:
7e:7e:83:36:20:3b:bc:ca:8b:c9:6d:8f:e5:fb:91:
18:14:d1:86:d0:bd:bf:71:34:f9:f1:5b:da:fc:5e:
3c:07:95:10:b1:f7:66:20:3e:fe:02:2b:79:36:96:
c2:04:55:cc:a7:53:e3:e6:d9:c5:38:74:40:d9:92:
25:63:17:a9:11:85:65:08:ba:c4:6b:4b:bd:5d:99:
d8:e7:0a:55:e7:c3:94:17:b9:8d:a2:7f:7d:57:b2:
56:55:54:df:13:43:aa:ef:17:ee:24:f2:f3:8c:e9:
43:0e:d0:4c:69:60:93:b8:2d:97:44:85:7e:5a:91:
4a:c2:15:35:ec:0c:f5:ac:0f:e3:df:26:81:95:c4:
01:6a:71:ba:6b:20:35:8e:0f:fb:2a:d0:04:4a:41:
c6:07:24:bc:73:6a:8a:08:0e:53:a9:6b:7b:0b:33:
f2:77:8b:d8:91:45:03:8f:20:dd:e8:7b:9d:e6:de:
c4:d0:50:00:46:95:f9:39:95:a8:b3:c4:d8:0d:fa:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:CE:A5:00:79:30:42:3C:3A:1A:A0:BA:4E:73:92:CF:FB:30:8C
X509v3 Authority Key Identifier:
keyid:1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/AS219189.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219189
Signature Algorithm: sha256WithRSAEncryption
25:7b:4f:21:d2:3d:e1:cd:3d:4d:54:be:93:2f:2a:aa:de:37:
2b:a8:c9:8e:f4:24:87:43:11:4f:66:0f:d0:09:e3:4d:de:b6:
9d:6c:a3:fe:47:df:bb:e3:5d:ab:12:29:67:08:54:49:05:06:
d5:66:ef:b5:87:4b:7b:2d:a2:69:b3:7d:a5:3b:17:7a:63:16:
46:51:24:20:0c:b1:4c:e9:b5:cd:2b:74:db:47:8c:3e:71:62:
b2:32:b8:ee:07:8b:9c:08:29:63:2c:f1:ca:97:b1:5b:70:79:
3f:85:36:a2:29:44:89:e4:6f:33:79:d2:b3:9e:9f:b9:0b:9a:
cd:b5:97:08:d9:b4:dc:55:9a:9d:28:90:88:ef:11:0c:4f:10:
f7:d8:01:f9:1a:17:18:ce:83:33:03:e0:dd:12:95:aa:77:ac:
76:01:4d:78:58:a4:4b:85:11:a6:84:58:83:d8:16:e0:1d:6e:
ec:0e:ad:33:b0:54:d2:29:39:df:0e:55:d1:56:b0:2d:27:c3:
f2:f5:6e:c7:38:e0:e3:ec:af:90:70:84:6e:4a:aa:28:ba:2b:
ed:80:21:58:49:e9:be:46:74:66:00:c6:dd:bd:92:65:79:e3:
9f:c0:3a:7b:ea:06:8d:8f:7c:7c:16:22:d1:16:52:93:51:4a:
98:71:54:5d
-----BEGIN CERTIFICATE-----
MIIEszCCA5ugAwIBAgIUHDSlGYKb0AW948LTOcKyHvsIMXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWRlZDI0ZWQ5MWNjYmU2ODkyMDUxNmUxYjQ3MDZlNWRm
ZjQxZDdkMjAeFw0yNjA3MjExOTE1MjhaFw0yNzA3MjAxOTIwMjhaMDMxMTAvBgNV
BAMTKDI2RUZDRUE1MDA3OTMwNDIzQzNBMUFBMEJBNEU3MzkyQ0ZGQjMwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCXXtGFI++mNg36uH9RSLMdcl
04tyQ/BSmz11aE3AaWCcb8++ZRQK/8/hEdJGQjUOVfQxwtK/Re6khX5+gzYgO7zK
i8ltj+X7kRgU0YbQvb9xNPnxW9r8XjwHlRCx92YgPv4CK3k2lsIEVcynU+Pm2cU4
dEDZkiVjF6kRhWUIusRrS71dmdjnClXnw5QXuY2if31XslZVVN8TQ6rvF+4k8vOM
6UMO0ExpYJO4LZdEhX5akUrCFTXsDPWsD+PfJoGVxAFqcbprIDWOD/sq0ARKQcYH
JLxzaooIDlOpa3sLM/J3i9iRRQOPIN3oe53m3sTQUABGlfk5laizxNgN+m9HAgMB
AAGjggG9MIIBuTAdBgNVHQ4EFgQUJu/OpQB5MEI8Ohqguk5zks/7MIwwHwYDVR0j
BBgwFoAUHe0k7ZHMvmiSBRbhtHBuXf9B19IwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw
by9DTE5leHVzTFRELzAvMURFRDI0RUQ5MUNDQkU2ODkyMDUxNkUxQjQ3MDZFNURG
RjQxRDdEMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0hlMGs3WkhNdm1pU0JS
Ymh0SEJ1WGY5QjE5SS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL3JzeW5jLmtyaWxsLmNsbmV4dXMuZGV2L3JlcG8vQ0xOZXh1c0xURC8w
L0FTMjE5MTg5LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNYNTANBgkqhkiG9w0BAQsFAAOCAQEAJXtPIdI94c09
TVS+ky8qqt43K6jJjvQkh0MRT2YP0AnjTd62nWyj/kffu+NdqxIpZwhUSQUG1Wbv
tYdLey2iabN9pTsXemMWRlEkIAyxTOm1zSt020eMPnFisjK47geLnAgpYyzxypex
W3B5P4U2oilEieRvM3nSs56fuQuazbWXCNm03FWanSiQiO8RDE8Q99gB+RoXGM6D
MwPg3RKVqnesdgFNeFikS4URpoRYg9gW4B1u7A6tM7BU0ik53w5V0VawLSfD8vVu
xzjg4+yvkHCEbkqqKLor7YAhWEnpvkZ0ZgDG3b2SZXnjn8A6e+oGjY98fBYi0RZS
k1FKmHFUXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:38 2026 by rpki-client