Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/MXKD9QsPykWAQJhnjjbTV1rmUg4.asa
File: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (raw, json)
Hash identifier: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=
Subject key identifier: 31:72:83:F5:0B:0F:CA:45:80:40:98:67:8E:36:D3:57:5A:E6:52:0E
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 01A0A04983945485170255EDB3BC8CC453BB
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/MXKD9QsPykWAQJhnjjbTV1rmUg4.asa
Signing time: Mon 14 Sep 2026 14:19:27 +0000
ASPA not before: Mon 14 Sep 2026 14:19:27 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 8283
Providers: AS: 24785
AS: 38930
AS: 49127
AS: 57866
AS: 58115
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:49:83:94:54:85:17:02:55:ed:b3:bc:8c:c4:53:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Sep 14 14:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=317283f50b0fca45804098678e36d3575ae6520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:da:b6:c4:b0:26:5a:7c:7f:0a:d0:5f:36:
5c:6e:bc:d5:99:0e:b1:f9:f0:b5:f9:78:12:b4:57:
28:93:21:34:b4:a9:ff:ff:95:7e:a4:59:0f:cf:e5:
56:83:5f:69:a5:7b:a3:b3:71:76:9d:9f:ee:ad:b8:
bc:05:b6:ec:32:73:e0:05:0d:89:93:18:8f:71:15:
80:a5:00:13:98:09:22:b4:ba:a9:3d:66:83:9b:73:
64:54:5d:19:e0:f6:42:07:d7:d5:6e:65:b6:8c:f6:
cd:20:26:16:93:ff:f1:6a:56:33:cb:b7:6b:a5:2f:
d1:47:c2:71:d2:8e:51:d0:8d:d8:08:c3:1d:9c:a8:
a3:53:99:7f:34:8f:31:2c:7c:00:b4:43:2e:0f:c1:
a2:df:ec:b7:8e:ac:d7:ef:0b:ff:1b:e2:f3:64:2d:
82:7b:b9:94:23:41:23:e6:bd:f4:64:82:03:da:01:
e9:c2:84:bf:2d:ff:44:5b:7d:c8:e9:98:cd:23:1b:
88:ae:c9:ac:40:ef:f0:c2:6e:d3:10:e0:8e:fa:f0:
e3:a2:a9:8a:e0:a3:67:29:fd:38:c8:30:8a:6e:79:
e1:b1:22:47:2b:a9:55:67:90:bb:39:96:44:fa:34:
55:57:81:bc:70:d5:58:89:b8:a2:62:56:d4:c1:e9:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:72:83:F5:0B:0F:CA:45:80:40:98:67:8E:36:D3:57:5A:E6:52:0E
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/MXKD9QsPykWAQJhnjjbTV1rmUg4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8283
Signature Algorithm: sha256WithRSAEncryption
40:4b:ba:09:17:66:f1:f8:34:32:0a:06:56:eb:a7:89:43:57:
d4:f2:53:e5:65:64:e7:8f:f5:5e:1d:b1:d7:f4:32:a8:ca:16:
8d:44:3a:56:60:60:6f:c4:38:5a:13:88:e4:1e:2d:65:c6:28:
17:6b:06:6c:4e:5a:c0:18:f3:1b:6f:c5:bb:f8:c7:29:bd:89:
c7:e5:e1:06:5e:dc:25:39:60:ca:fc:63:0e:05:88:f4:8a:a9:
3b:d5:cb:17:e7:4b:e3:1e:e3:1a:9e:8f:0a:e9:cf:b2:e9:72:
97:3b:72:cb:a5:b2:1f:23:6b:bb:7c:14:c4:7c:a8:99:d6:b9:
98:e5:db:82:81:53:44:49:cb:f8:14:08:7d:42:70:74:df:ea:
e8:ed:9a:c1:17:bb:55:7f:b1:42:99:75:22:fa:b4:dc:7e:65:
18:ad:30:20:f5:96:b2:5d:11:dc:64:3c:f8:2a:bc:c1:b0:dd:
b1:82:dc:06:a5:07:1e:1a:33:2e:49:4b:2f:f9:79:ac:c3:e6:
da:a1:f0:2f:13:89:63:f9:42:ef:c4:95:4c:2e:35:77:bb:9d:
74:5b:dc:9b:d6:4b:07:ab:a4:dc:87:57:56:e8:4d:80:48:1c:
f4:94:84:88:e9:d6:cd:4c:3f:e6:ac:9a:3b:b2:86:35:28:da:
a8:f5:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:57:41 2026 by rpki-client