Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/KMNQmTy4JK0pd0HJKR0ES1MMj1s.asa
File: KMNQmTy4JK0pd0HJKR0ES1MMj1s.asa (raw, json)
Hash identifier: LX7RRii6wd+61k4sqO6j2ZnNt8KGtnrTVWIStG+Obzs=
Subject key identifier: 28:C3:50:99:3C:B8:24:AD:29:77:41:C9:29:1D:04:4B:53:0C:8F:5B
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019F19010923CD1CE6F2C295E6B8361E5BCF
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/KMNQmTy4JK0pd0HJKR0ES1MMj1s.asa
Signing time: Tue 30 Jun 2026 14:48:45 +0000
ASPA not before: Tue 30 Jun 2026 14:48:45 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 45009
Providers: AS: 8283
AS: 25091
AS: 50869
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:09:23:cd:1c:e6:f2:c2:95:e6:b8:36:1e:5b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jun 30 14:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28c350993cb824ad297741c9291d044b530c8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:12:f2:91:1e:35:f5:5a:a7:d7:39:9e:06:
23:54:d0:b8:7b:1b:29:1d:58:52:20:54:28:e1:2f:
e2:18:83:75:0a:f6:35:99:30:4f:81:b7:31:cc:9b:
af:75:7d:ff:5b:21:ac:6d:c4:a2:35:0f:da:66:4b:
4b:32:96:13:e6:7e:4b:f6:09:d7:ef:c8:02:0e:b8:
a6:cc:02:22:bf:19:54:1d:fc:42:e4:f9:b6:6f:0c:
dd:7c:3f:73:77:2f:d7:3d:bf:c1:32:24:3d:e2:e4:
d8:24:c9:76:0a:53:ae:88:ce:b8:3c:cb:5a:46:51:
ec:67:f4:bd:4f:4a:61:01:74:e9:a1:67:4a:e0:66:
c5:48:41:5d:16:c9:85:1d:34:03:77:0e:8d:49:cc:
73:2b:49:b8:bc:62:82:4d:b5:66:ba:70:c8:f7:71:
e6:20:c9:4f:b7:69:e6:f5:20:86:ea:73:3c:fd:0d:
7a:ef:56:7f:59:8f:e7:66:a5:70:ab:93:86:2e:0c:
e2:06:eb:3c:31:64:bb:ef:f2:ab:8a:af:c6:7a:cf:
c7:8e:54:d8:ae:84:7a:b4:a7:a4:8b:82:8c:cc:d2:
95:00:12:c5:ac:64:93:44:60:9d:f8:cc:b7:e0:c3:
6a:a1:e9:10:e6:c2:4d:ef:cc:7d:d3:8e:81:e6:4e:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C3:50:99:3C:B8:24:AD:29:77:41:C9:29:1D:04:4B:53:0C:8F:5B
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/KMNQmTy4JK0pd0HJKR0ES1MMj1s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45009
Signature Algorithm: sha256WithRSAEncryption
26:77:35:1b:fd:8f:77:55:c1:2b:48:e0:16:ca:f1:6a:53:fd:
0a:29:04:65:df:bb:e3:43:ef:88:b1:1e:3e:55:1c:2a:88:13:
3e:91:ca:16:65:ad:fa:bf:75:39:6b:30:7a:17:70:d7:30:11:
e9:da:dc:ba:ea:7d:b2:18:84:e8:98:bf:c9:f1:c6:52:ce:ca:
47:59:de:de:58:15:18:13:91:f6:81:8a:1b:68:66:99:ce:34:
da:7d:fa:8f:22:b5:e7:e4:73:37:31:ea:fe:06:6d:73:af:c2:
31:be:0d:83:4f:53:a9:60:af:9f:a5:0c:73:e1:51:f8:ab:80:
35:f6:4f:23:7a:81:6f:02:44:a5:50:65:b3:d8:dd:2c:0f:08:
60:6e:60:a8:e1:5b:89:bd:84:9c:58:b9:d2:d7:dd:30:19:d7:
02:d0:df:43:77:c7:8e:fd:43:16:c3:09:5e:4c:23:1f:be:79:
83:d4:27:a9:46:75:a1:a7:5d:fe:c5:56:4d:65:eb:a0:fa:52:
c3:71:3f:31:78:97:60:a3:8e:36:80:45:15:39:13:1b:4c:88:
7c:4b:e1:e6:cf:e3:f5:0a:d4:21:33:48:c1:aa:5f:c4:89:e2:
23:f8:a5:53:98:9c:75:4d:9a:c8:51:c9:39:2a:59:b5:d4:e6:
48:f4:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:21 2026 by rpki-client