Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa
File: Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa (raw, json)
Hash identifier: k9FBf0lfIGm0CeilJQGz+ucSfZPD15fjm1nPffsNVfo=
Subject key identifier: 32:67:FD:88:CF:BF:AF:CF:BC:FF:BD:9C:F7:0F:D8:A6:45:71:35:C7
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 019CF75DDEF1D4E7A875A9FF32F1E4EA53E4
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa
Signing time: Mon 16 Mar 2026 15:57:30 +0000
ASPA not before: Mon 16 Mar 2026 15:57:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204697
Providers: AS: 3303
AS: 6730
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:5d:de:f1:d4:e7:a8:75:a9:ff:32:f1:e4:ea:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Mar 16 15:57:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3267fd88cfbfafcfbcffbd9cf70fd8a6457135c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:54:cc:89:07:ce:da:20:c7:e7:07:ba:d3:
fe:8f:2e:fb:a7:92:e0:41:d4:1c:4c:be:ee:4e:30:
3e:6a:05:9d:76:7a:c4:3e:57:13:8e:fc:2c:65:65:
7a:b5:d6:18:91:01:42:8a:bf:37:41:f4:e6:20:46:
55:bf:2b:64:b4:2e:c4:68:1d:ae:3f:09:9c:d2:2e:
ea:f0:45:64:85:24:04:fe:fc:d5:ee:18:d5:34:b3:
8e:6a:2b:c3:31:e3:93:02:91:6a:e5:ea:8f:ed:e8:
76:20:3b:bc:75:d2:f1:e9:37:c7:31:d2:ec:cc:83:
40:3c:9e:cd:9b:e5:02:97:e9:53:1e:2d:08:d6:4d:
7c:08:13:8f:87:03:70:2d:76:51:ca:bd:9b:05:c1:
af:43:65:02:0b:7e:f6:8a:69:e3:3d:3c:24:e0:77:
c7:da:ef:06:b5:e8:60:aa:80:8d:bc:a3:50:16:1f:
38:4c:20:6a:a4:a0:47:b0:33:ce:f6:cf:a1:a4:c0:
1a:5f:df:56:1c:f7:34:30:e9:15:e4:75:46:11:e9:
c4:c2:91:ae:19:a1:f0:57:01:e7:53:75:2c:04:50:
77:93:93:0d:52:5d:44:8d:96:20:39:ba:9b:3b:21:
40:d0:c8:4e:d5:a5:f5:48:bb:5b:b5:b1:32:0d:ba:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:FD:88:CF:BF:AF:CF:BC:FF:BD:9C:F7:0F:D8:A6:45:71:35:C7
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Mmf9iM-_r8-8_72c9w_YpkVxNcc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204697
Signature Algorithm: sha256WithRSAEncryption
3e:4a:3e:c6:81:fb:8c:4f:cf:40:2e:9f:df:3b:9c:bf:56:90:
7b:6c:04:2d:6b:7f:82:06:0c:f8:d9:1f:fa:b0:14:57:44:33:
54:fe:9e:4a:e7:e8:b1:a6:b9:1f:4e:b5:07:13:46:a1:5d:99:
8d:dd:14:a1:91:ce:1b:d2:64:34:4e:4f:3f:80:ab:0c:a9:fa:
c3:92:20:33:ba:7d:28:36:59:d5:5d:66:ad:1e:c2:03:da:42:
95:83:bb:52:2e:98:02:7c:55:72:c8:8b:5d:fc:98:2d:76:63:
77:d5:65:63:32:5f:2b:2b:6e:80:32:58:7f:67:5f:5a:e5:4b:
bd:0a:0c:5b:37:4c:e4:cf:49:41:30:98:aa:82:0e:09:f4:b4:
97:28:6e:f3:b6:86:48:40:78:5d:63:a2:03:21:eb:57:61:47:
3d:b9:79:f0:b0:8d:e0:d5:ff:aa:d2:ec:02:47:95:f4:23:c2:
40:2b:3f:5d:fb:67:68:4e:42:90:3a:65:d5:2a:8c:13:22:51:
6f:de:ef:3a:96:9f:0b:a8:32:e0:fa:58:f7:e5:4f:cc:17:61:
96:31:70:ba:3d:59:ae:f1:88:e1:d8:3d:43:eb:57:42:54:d9:
46:db:6e:6d:11:dc:7f:1b:8f:49:28:a3:a8:b5:5a:54:23:f2:
f0:3c:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:30 2026 by rpki-client