Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa
File: Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa (raw, json)
Hash identifier: okiWGqJS235fCpGNLndRTcJ9gZ0cQPFcyQUgRG2jzsY=
Subject key identifier: 43:E3:8D:78:DB:66:0F:7C:9B:03:34:D4:32:11:82:F4:C8:D3:34:DA
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019D0121414CE6238B19CCBFDA12E34242FD
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa
Signing time: Wed 18 Mar 2026 13:27:29 +0000
ASPA not before: Wed 18 Mar 2026 13:27:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 60533
Providers: AS: 6939
AS: 38949
AS: 48326
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:21:41:4c:e6:23:8b:19:cc:bf:da:12:e3:42:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Mar 18 13:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43e38d78db660f7c9b0334d4321182f4c8d334da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:0c:e9:c2:d6:5e:8a:5e:84:21:51:c4:70:
db:c5:93:56:68:cc:b4:b7:c8:49:f3:a7:9b:6c:e0:
75:17:64:41:ea:54:8f:b2:b4:55:64:d3:77:c6:c4:
f4:a8:b9:5c:8a:e7:d0:5e:fe:08:e5:29:ed:7a:19:
69:d1:2a:c2:0a:89:ec:ac:62:16:af:cd:b4:86:fa:
82:f7:8a:86:50:41:8c:40:15:84:fd:22:32:42:c8:
cf:c5:e5:d8:77:92:63:03:f5:f5:2a:35:08:ca:f0:
2e:6d:ee:26:a6:f7:b8:28:1e:fc:8a:68:83:5d:e4:
f3:5a:06:95:27:c4:9f:5d:a8:e9:cc:f9:b5:d7:92:
d8:0c:af:41:93:3a:51:af:07:4c:c4:d3:1b:a7:c7:
cb:f4:47:fd:a9:e7:0e:d8:f6:97:39:da:aa:53:e6:
8a:a9:f8:02:28:6f:53:3a:f1:22:dc:1c:13:9b:8b:
5b:e3:a2:e0:fb:49:f9:99:3b:f8:07:98:44:f6:1a:
5c:94:c8:ad:eb:69:d0:4e:f0:45:9a:d2:ae:e0:b9:
61:0f:12:15:30:3e:d4:69:de:dc:72:b6:ec:45:5f:
b9:48:d2:5b:cd:aa:35:39:2c:9d:73:00:5f:4c:ee:
30:45:be:53:0e:fd:1b:8c:94:54:d9:f9:dc:14:35:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:8D:78:DB:66:0F:7C:9B:03:34:D4:32:11:82:F4:C8:D3:34:DA
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/Q-ONeNtmD3ybAzTUMhGC9MjTNNo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60533
Signature Algorithm: sha256WithRSAEncryption
33:10:8d:b7:dc:69:ee:da:fe:e7:a1:34:7d:69:6b:68:78:2f:
b5:ea:b3:af:82:c0:27:3e:0f:e8:c2:35:94:34:e0:ec:b6:10:
b1:7d:53:b1:dc:ac:d2:ef:61:7f:8b:af:31:6c:53:82:2d:05:
fa:58:d3:b2:3d:36:20:7a:c0:70:fe:b4:8a:57:b3:a3:cd:9d:
35:11:85:a3:8c:31:7b:dd:86:7b:29:ee:82:e0:d0:27:c5:94:
4f:5b:bf:65:34:a9:bf:3d:48:19:28:b4:8d:91:00:85:15:f0:
6b:5c:2c:85:88:9f:cd:a5:a4:05:77:6e:c6:10:bd:e0:62:e7:
4e:b7:c1:44:9d:be:17:81:54:10:35:95:b7:45:41:65:14:b8:
6e:1e:92:33:39:38:da:e9:54:3a:69:b6:54:c1:0a:74:ca:de:
3b:1a:4b:9a:29:62:9f:16:cd:76:b0:08:74:65:33:08:9f:a5:
7b:86:fd:99:64:7b:03:ed:db:2a:77:a0:b8:37:b1:94:99:3f:
28:e4:1c:d2:95:37:fe:44:0b:f3:c6:8a:58:52:5e:e3:bb:b9:
e1:5f:76:8e:4f:0e:58:97:c8:f5:7d:c8:b4:ba:c6:7d:ec:33:
9e:d5:ba:c3:fb:ac:7f:fc:38:80:5c:7f:07:f0:1b:e7:65:c5:
4a:38:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:04:42 2026 by rpki-client