Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mRmLQOXFcHHZQcxHBf-XC4J7r54.asa
File: mRmLQOXFcHHZQcxHBf-XC4J7r54.asa (raw, json)
Hash identifier: 1nL8Bx79uS8kNTsCQSbPCI6N8evEGwJjIfPQv85CdgU=
Subject key identifier: 99:19:8B:40:E5:C5:70:71:D9:41:CC:47:05:FF:97:0B:82:7B:AF:9E
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019C74ED966375ED7DF5C23577C12926AEF7
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mRmLQOXFcHHZQcxHBf-XC4J7r54.asa
Signing time: Thu 19 Feb 2026 08:04:13 +0000
ASPA not before: Thu 19 Feb 2026 08:04:13 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204794
Providers: AS: 43289
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:ed:96:63:75:ed:7d:f5:c2:35:77:c1:29:26:ae:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Feb 19 08:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99198b40e5c57071d941cc4705ff970b827baf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:da:7a:67:03:06:ab:7d:da:e1:d6:14:2c:
69:1e:d5:88:8b:7f:e0:81:83:be:51:81:39:0f:ba:
3f:54:5e:6c:2e:b7:39:cf:d2:0e:a4:e3:cc:c5:0a:
ca:4b:6c:00:cf:7d:2e:72:eb:f1:14:a5:65:80:a8:
6e:1c:5e:8e:f5:0b:cc:19:4d:2f:f1:8c:aa:58:5f:
fc:94:44:d5:5e:63:0c:61:e5:83:5d:22:69:da:c8:
ec:6c:29:39:88:70:d9:3d:54:9e:bc:6c:ae:b7:9b:
58:3d:c1:f1:0d:f0:a2:89:40:26:ad:33:d0:d1:98:
3e:98:9f:1a:27:80:43:8f:37:f8:8c:14:8a:42:b8:
a1:f1:e5:2f:86:c2:ac:db:93:b9:a5:b1:92:02:75:
e4:ff:72:c9:dd:d8:cc:d5:74:3c:7d:81:27:9f:52:
d6:14:9d:43:26:a6:d1:76:60:59:95:c4:7c:01:ad:
73:e4:49:4a:62:1e:fe:7f:6a:b0:7f:e8:43:10:e6:
1d:03:28:47:a4:15:a0:68:8b:0c:de:4d:2b:97:89:
9c:03:d9:a7:9e:bd:4f:77:b4:e0:62:9a:aa:76:50:
da:ef:5e:18:08:a7:b7:f8:58:e6:d3:43:d4:c1:eb:
de:3f:ee:d0:a9:a7:83:31:56:05:86:a5:50:7d:8b:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:8B:40:E5:C5:70:71:D9:41:CC:47:05:FF:97:0B:82:7B:AF:9E
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/mRmLQOXFcHHZQcxHBf-XC4J7r54.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204794
Signature Algorithm: sha256WithRSAEncryption
12:1f:af:0f:2e:da:2c:da:10:a4:23:71:6b:53:bb:91:33:78:
4f:eb:ae:8b:7f:25:f2:2c:8a:f0:13:66:3f:12:1e:bd:20:7f:
b5:3e:07:a8:f8:f0:7f:2a:20:a5:1c:e3:a3:bc:1f:1e:2f:95:
59:d0:ff:2d:e7:0d:ae:ec:a1:6d:24:3e:b2:96:11:54:1f:38:
0b:8a:c3:a6:08:47:66:f2:80:1e:dd:c3:d2:ee:37:83:b2:16:
93:29:f3:57:36:3c:bd:9f:f9:6b:14:02:13:17:5a:73:69:2c:
18:d3:f6:90:34:e5:fc:ce:63:32:96:de:f8:ae:df:ad:c6:cf:
1d:c4:84:e1:83:d3:60:b5:3d:81:74:e1:c3:4a:7a:19:20:71:
68:53:66:82:3f:a1:a1:72:45:83:49:89:e2:e8:9d:2c:34:86:
10:b4:4d:3d:45:b6:96:e8:03:bc:4c:1c:3d:69:98:87:dc:1d:
39:30:72:0b:9c:4e:f3:29:c7:4c:57:70:8e:62:a5:db:26:bf:
40:84:ef:c9:de:86:0d:fc:52:c4:78:47:25:0a:a6:01:0d:10:
96:0e:fd:0a:ef:55:32:69:08:a6:69:eb:3d:6b:74:dc:4b:82:
50:fc:61:cc:0c:91:e1:6b:9c:b4:3d:c2:87:d9:fe:d8:e4:94:
a8:d3:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:04 2026 by rpki-client