Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/MxA5nOeYhvXqWhlLB7RwnnofywM.asa
File: MxA5nOeYhvXqWhlLB7RwnnofywM.asa (raw, json)
Hash identifier: OwE4V5j/z1QQ3UTL0xnNyAFabeAG1dV4F3vQTef4/hM=
Subject key identifier: 33:10:39:9C:E7:98:86:F5:EA:5A:19:4B:07:B4:70:9E:7A:1F:CB:03
Certificate issuer: /CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Certificate serial: 01A10DD04AE2348A422F7D2D0FE24DC5D0AA
Authority key identifier: 97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/MxA5nOeYhvXqWhlLB7RwnnofywM.asa
Signing time: Mon 05 Oct 2026 20:45:16 +0000
ASPA not before: Mon 05 Oct 2026 20:45:16 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199742
Providers: AS: 42532
AS: 49581
AS: 58212
AS: 62255
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:d0:4a:e2:34:8a:42:2f:7d:2d:0f:e2:4d:c5:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e1f8c0aa4bd034beaddb3389bd736ca443ec0
Validity
Not Before: Oct 5 20:45:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3310399ce79886f5ea5a194b07b4709e7a1fcb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:2a:da:f9:58:d0:cc:e4:d1:a5:2a:4d:91:
1f:6b:aa:9c:bf:8a:8e:72:d9:8d:5e:7a:8c:11:e2:
5d:57:4c:43:16:e1:27:c5:bc:99:7b:b8:1a:c9:9e:
84:96:bb:84:2f:05:b6:6a:13:85:d1:c9:96:d2:5e:
23:83:da:f5:e2:cb:a4:62:92:95:99:78:73:e9:13:
cb:66:7e:5f:05:a4:8d:65:2e:bc:c0:1e:3f:41:90:
6f:e8:29:fe:bb:90:33:80:f8:c6:47:c3:0c:94:9e:
8c:08:ed:66:0a:f5:90:65:54:a0:09:52:cc:37:fe:
72:40:f7:09:27:19:83:5e:2d:27:f0:37:5d:7e:b8:
45:48:0b:5c:9b:04:18:55:ec:f5:6a:dd:a7:c5:4b:
2b:26:1d:1a:fa:69:97:a7:bd:4b:15:0c:a1:de:7a:
15:12:bd:8a:11:fa:0b:f8:95:f9:a9:f5:8a:5d:f4:
47:be:b7:c4:cc:b4:d2:2b:83:c4:0d:1a:9e:5a:eb:
4d:35:6f:cd:f5:a7:84:39:51:4d:17:2a:32:74:64:
0e:8a:e4:65:2a:b3:12:c5:84:00:21:98:c3:79:7f:
00:44:35:d5:76:26:5a:29:5a:f3:b2:62:e8:69:14:
1d:61:aa:54:f3:30:ff:37:14:66:e8:19:80:e9:41:
b8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:39:9C:E7:98:86:F5:EA:5A:19:4B:07:B4:70:9E:7A:1F:CB:03
X509v3 Authority Key Identifier:
keyid:97:4E:1F:8C:0A:A4:BD:03:4B:EA:DD:B3:38:9B:D7:36:CA:44:3E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l04fjAqkvQNL6t2zOJvXNspEPsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/MxA5nOeYhvXqWhlLB7RwnnofywM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/996f02-b725-4813-99b3-859278648112/1/l04fjAqkvQNL6t2zOJvXNspEPsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199742
Signature Algorithm: sha256WithRSAEncryption
53:af:0c:a4:b8:b7:cd:fb:1b:82:a9:1b:13:36:02:c9:1f:ce:
0b:08:a0:24:ee:02:1e:02:76:5c:e1:e1:33:32:f7:ef:f5:7c:
22:c4:da:8d:5f:b1:23:57:c9:53:2f:76:27:07:6a:a6:4f:38:
4f:d4:b4:98:1c:5c:97:57:f1:ba:a4:94:80:43:58:43:5a:5f:
13:78:36:5d:d8:f6:8c:ca:aa:f8:08:d2:37:37:e8:87:5e:e0:
b5:ee:d3:3e:17:b7:3c:aa:37:30:1c:bc:61:b7:25:4a:67:97:
1a:ed:df:5e:c4:91:08:7f:e5:51:83:54:de:d8:34:06:51:9b:
4f:cf:e9:f3:39:cd:88:a5:75:e5:88:8e:2f:c4:4a:55:78:e9:
9e:99:9c:9c:fd:da:79:24:91:4e:20:97:50:6a:f3:42:3c:cd:
d9:31:05:fa:5f:74:97:7e:a5:dc:06:b5:4e:1e:d2:bd:93:45:
7c:3a:81:c5:85:e0:55:98:89:c3:7b:ee:8e:4a:30:90:cd:b0:
10:59:fa:08:ee:65:47:d4:d0:fc:c0:56:f3:6b:1c:94:75:59:
20:3b:91:fe:67:39:da:6d:68:a0:2d:45:59:07:de:af:30:a4:
66:1a:a4:9b:77:3b:d9:27:a9:ba:9f:55:a5:46:cf:b3:5b:71:
09:1f:96:e6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAaEN0EriNIpCL30tD+JNxdCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NGUxZjhjMGFhNGJkMDM0YmVhZGRiMzM4OWJkNzM2Y2E0
NDNlYzAwHhcNMjYxMDA1MjA0NTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzEwMzk5Y2U3OTg4NmY1ZWE1YTE5NGIwN2I0NzA5ZTdhMWZjYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aEq2vlY0Mzk0aUqTZEfa6qcv4qO
ctmNXnqMEeJdV0xDFuEnxbyZe7gayZ6ElruELwW2ahOF0cmW0l4jg9r14sukYpKV
mXhz6RPLZn5fBaSNZS68wB4/QZBv6Cn+u5AzgPjGR8MMlJ6MCO1mCvWQZVSgCVLM
N/5yQPcJJxmDXi0n8DddfrhFSAtcmwQYVez1at2nxUsrJh0a+mmXp71LFQyh3noV
Er2KEfoL+JX5qfWKXfRHvrfEzLTSK4PEDRqeWutNNW/N9aeEOVFNFyoydGQOiuRl
KrMSxYQAIZjDeX8ARDXVdiZaKVrzsmLoaRQdYapU8zD/NxRm6BmA6UG4hQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDMQOZznmIb16loZSwe0cJ56H8sDMB8GA1UdIwQY
MBaAFJdOH4wKpL0DS+rdszib1zbKRD7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85OTZmMDItYjcyNS00ODEzLTk5YjMt
ODU5Mjc4NjQ4MTEyLzEvTXhBNW5PZVlodlhxV2hsTEI3Undubm9meXdNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85OTZmMDItYjcyNS00ODEzLTk5YjMtODU5Mjc4NjQ4MTEy
LzEvbDA0ZmpBcWt2UU5MNnQyek9KdlhOc3BFUHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMMPjANBgkqhkiG
9w0BAQsFAAOCAQEAU68MpLi3zfsbgqkbEzYCyR/OCwigJO4CHgJ2XOHhMzL37/V8
IsTajV+xI1fJUy92Jwdqpk84T9S0mBxcl1fxuqSUgENYQ1pfE3g2Xdj2jMqq+AjS
Nzfoh17gte7TPhe3PKo3MBy8YbclSmeXGu3fXsSRCH/lUYNU3tg0BlGbT8/p8znN
iKV15YiOL8RKVXjpnpmcnP3aeSSRTiCXUGrzQjzN2TEF+l90l36l3Aa1Th7SvZNF
fDqBxYXgVZiJw3vujkowkM2wEFn6CO5lR9TQ/MBW82sclHVZIDuR/mc52m1ooC1F
WQferzCkZhqkm3c72Sepup9VpUbPs1txCR+W5g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:10:50 2026 by rpki-client