Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/MGhj0X-R9sE8_bxGpuMofPiVOac.asa
File: MGhj0X-R9sE8_bxGpuMofPiVOac.asa (raw, json)
Hash identifier: DvQwv9R87PLKWjVN3/wl/o55noyjeNHEbII9CUCtA+0=
Subject key identifier: 30:68:63:D1:7F:91:F6:C1:3C:FD:BC:46:A6:E3:28:7C:F8:95:39:A7
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 019EC4FAAFDC78E3AB0B62F47C749ECAECEC
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/MGhj0X-R9sE8_bxGpuMofPiVOac.asa
Signing time: Sun 14 Jun 2026 07:13:43 +0000
ASPA not before: Sun 14 Jun 2026 07:13:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 25091
Providers: AS: 1299
AS: 3257
AS: 3356
AS: 5511
AS: 6453
AS: 6762
AS: 55002
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:fa:af:dc:78:e3:ab:0b:62:f4:7c:74:9e:ca:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jun 14 07:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=306863d17f91f6c13cfdbc46a6e3287cf89539a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:a9:26:80:de:a2:6b:70:4e:8e:20:7b:4a:
6d:4a:d3:e7:4f:78:fd:4e:24:40:fb:34:af:6b:60:
b3:ff:49:5e:a1:6c:3e:46:8e:f6:30:33:74:7c:26:
c3:7e:f1:aa:34:17:c7:1e:bd:b2:4f:8f:c6:ac:54:
d0:0c:47:7b:e8:3c:23:25:54:23:d7:67:aa:45:c0:
9e:49:8e:14:7a:a4:23:06:02:7d:27:41:c0:f5:c7:
6d:f3:4e:ad:3b:9e:d1:e3:af:a2:5f:f5:98:35:9f:
da:7a:d6:db:9c:87:1b:a6:d4:6b:b9:02:cc:a9:b9:
d1:36:f7:9b:73:59:9a:32:6a:80:7c:22:23:2b:7c:
e7:66:fa:0e:ec:06:33:db:77:6d:a0:b4:99:cf:b4:
6b:94:15:e4:5b:dc:6a:40:75:8d:3b:4e:47:71:02:
0f:59:eb:bc:fe:85:a1:4a:a8:22:18:12:78:33:74:
0b:f4:74:5d:0a:96:e8:2c:f0:87:ff:da:12:83:04:
96:3b:6e:c8:f8:75:64:b1:d5:ba:5e:a3:83:ca:df:
65:f2:16:f6:84:b0:da:a4:b7:fd:1f:85:fe:2b:2f:
7f:c3:32:4a:d9:03:9e:b9:63:bc:e1:89:e5:f7:c9:
a9:7e:07:c1:ae:68:ee:50:f4:43:42:20:e2:ff:fa:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:63:D1:7F:91:F6:C1:3C:FD:BC:46:A6:E3:28:7C:F8:95:39:A7
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/MGhj0X-R9sE8_bxGpuMofPiVOac.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25091
Signature Algorithm: sha256WithRSAEncryption
37:09:b4:70:08:af:a1:75:a5:19:36:54:4e:9b:45:9c:8d:44:
e9:3f:b5:a7:ad:59:a6:98:05:65:70:55:1e:38:5a:81:fb:68:
bb:11:ea:63:88:a3:90:5c:df:4c:f9:ab:f8:87:14:62:2f:ad:
a8:c7:2a:8c:36:84:35:6d:69:24:34:b6:27:7e:21:56:39:ce:
68:e6:b3:b9:46:2e:a5:0f:69:b0:64:c7:d0:e2:e4:79:5a:e5:
c7:ee:76:1d:2b:ac:b3:d3:c1:5c:10:fa:4c:e9:d3:45:2b:63:
d8:c7:68:d7:fe:73:ad:ea:56:d8:fd:6b:d4:57:c0:37:59:0f:
29:b4:6d:06:f3:27:5b:63:d1:19:d0:cc:66:ed:37:71:f6:de:
57:75:10:6f:4c:d8:81:3d:b6:ab:bb:dc:db:2f:e9:5c:62:4d:
34:71:70:79:8d:d8:8c:bc:5b:94:e1:0b:0f:48:77:55:06:10:
6f:46:3d:bf:b5:b9:34:b1:e6:03:c1:e4:e6:4d:71:e0:c4:e4:
1b:69:5d:f2:79:7d:4f:0f:2d:2c:3c:29:5d:0d:c7:4f:e3:3b:
89:e6:15:ab:a8:a8:28:89:ad:9a:08:34:90:c0:62:d5:18:b6:
42:68:13:c3:73:30:04:97:1e:65:e5:fb:02:61:69:16:bc:22:
b9:97:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:24 2026 by rpki-client