
Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa
File: mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa (raw, json)
Hash identifier: 54Ei/fKavstT42M7Nu3Fn+AfVQtGsu2BCI644ANc1Xs=
Subject key identifier: 99:D8:BC:8A:C2:45:F5:94:34:23:B2:60:E9:8A:F4:71:51:DA:F0:87
Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Certificate serial: 019FD376EDD71879FAF44B9C4F0F92CF7116
Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa
Signing time: Wed 05 Aug 2026 19:46:54 +0000
ASPA not before: Wed 05 Aug 2026 19:46:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 209460
Providers: AS: 41051
AS: 209533
AS: 212895
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:76:ed:d7:18:79:fa:f4:4b:9c:4f:0f:92:cf:71:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378
Validity
Not Before: Aug 5 19:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99d8bc8ac245f5943423b260e98af47151daf087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:ed:b7:00:29:33:cd:aa:b3:5c:2f:a5:66:
18:28:ac:14:72:1f:ee:63:89:d0:f0:e3:6d:45:a1:
44:1c:59:9e:c1:76:f7:ff:f3:6a:ce:cb:a8:95:a8:
31:57:da:29:40:19:52:2b:e7:51:86:7e:1e:46:97:
94:57:e1:57:e0:a5:ff:6e:64:14:50:8a:f8:23:d7:
d7:ab:c3:77:71:5b:73:96:3a:7e:51:ee:a9:01:51:
da:36:a3:96:2a:0c:52:b3:29:5f:12:13:38:4d:44:
22:46:6a:dc:2b:6c:53:68:62:b2:d0:dd:49:cf:0f:
03:ec:8a:9e:3b:34:aa:83:2a:98:28:f5:85:23:ab:
9b:41:2d:09:cd:09:16:5f:43:ff:c5:ed:82:03:40:
3b:0a:da:2a:6d:14:ca:77:96:e2:08:cb:55:fa:57:
70:d6:12:a7:88:1e:9d:7b:d0:53:fc:b1:8c:be:cc:
fc:ea:62:c3:d6:62:24:f5:e7:28:ec:a6:eb:67:41:
30:5b:ce:e7:4c:7d:bf:5d:8a:df:76:9d:54:74:a4:
21:e7:c1:1a:fe:55:19:72:82:1b:a4:4a:9d:2c:bb:
43:53:27:b9:6b:7a:e7:f2:f6:d1:23:1b:39:03:f6:
19:d1:de:4a:0c:2d:6d:08:61:f6:ff:82:73:83:88:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:BC:8A:C2:45:F5:94:34:23:B2:60:E9:8A:F4:71:51:DA:F0:87
X509v3 Authority Key Identifier:
keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/mdi8isJF9ZQ0I7Jg6Yr0cVHa8Ic.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209460
Signature Algorithm: sha256WithRSAEncryption
6d:21:65:ba:c6:d7:67:f5:91:4f:36:19:3b:fd:c9:02:ec:51:
51:12:34:2e:45:5a:c2:24:99:71:16:18:68:12:78:8c:5f:b3:
93:86:46:be:4b:8e:04:d6:31:10:f9:c6:61:05:ba:97:1a:f6:
48:d1:93:fd:f7:ea:ad:7f:7b:74:bd:77:8b:23:b5:8b:36:b1:
dc:af:f6:91:b6:44:0e:50:a5:f9:89:94:51:0c:12:09:fe:0e:
89:a6:57:08:17:a1:5c:fe:41:00:5d:50:cf:61:13:cf:ff:c5:
4b:2c:77:a6:b2:f1:2d:9c:2c:cd:39:e7:d5:2d:a1:d9:99:01:
fa:31:0e:29:30:14:39:4a:d9:87:50:83:07:30:c5:74:5e:8f:
c1:1b:86:f6:6a:f7:52:6f:64:f2:f0:83:49:0f:34:b4:cc:c0:
ce:1e:ff:74:29:cc:3c:31:0d:fb:1d:c9:cd:a6:74:5e:01:01:
8d:14:15:13:01:4a:d7:9b:30:c4:bf:92:45:d8:5a:e9:b1:07:
4f:7a:34:f9:3d:0d:62:b2:d5:6c:07:d4:86:2f:a5:60:c1:d8:
a3:bd:9e:c8:84:19:3c:50:d5:04:11:b4:93:e4:90:1a:f5:92:
82:91:67:33:86:58:fb:1b:10:5e:63:ee:bd:b6:28:9c:52:1e:
20:2e:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:23 2026 by rpki-client