Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/MJ_OFBHcIzeBrfg3-951-LVb5io.asa
File: MJ_OFBHcIzeBrfg3-951-LVb5io.asa (raw, json)
Hash identifier: SbpsqjtQMsTpGNUpXLboZzUXtshS5pTy6uMfULCuOPo=
Subject key identifier: 30:9F:CE:14:11:DC:23:37:81:AD:F8:37:FB:DE:75:F8:B5:5B:E6:2A
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 01A159C67A578B57AB9C635D2157081507E7
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/MJ_OFBHcIzeBrfg3-951-LVb5io.asa
Signing time: Tue 20 Oct 2026 14:45:42 +0000
ASPA not before: Tue 20 Oct 2026 14:45:42 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 31368
Providers: AS: 28917
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:c6:7a:57:8b:57:ab:9c:63:5d:21:57:08:15:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Oct 20 14:45:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=309fce1411dc233781adf837fbde75f8b55be62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:c5:af:a9:b5:6d:06:6d:ff:87:21:7b:1a:
8f:1e:cb:4f:71:e4:62:87:c2:dc:e7:1f:ad:9d:e6:
62:a0:be:dc:d6:8e:23:36:d1:52:85:b7:08:e7:8e:
b2:39:36:08:1b:e9:23:71:d0:d3:e8:bb:f7:ef:57:
48:e0:4c:bf:90:e7:1a:a3:4f:47:93:d1:ed:b1:ac:
36:65:b3:c3:df:3c:fe:50:6f:6f:96:ee:28:aa:78:
77:5f:d1:69:8c:98:4c:c1:15:a9:11:bd:f1:c5:54:
d5:39:3b:6e:5e:42:fa:62:0b:62:99:3f:86:8b:56:
67:b6:b4:e0:c9:55:a2:10:93:59:d8:f4:d7:cd:95:
92:1b:83:cf:16:71:67:5c:54:66:3a:6c:90:e9:3f:
cd:e4:a3:ea:d1:d2:3c:67:8c:32:e6:d6:6d:c5:0f:
0b:78:e0:8c:b6:0f:83:a9:e6:b3:49:f5:c3:12:c2:
c3:db:15:1d:ad:6c:a5:7c:a1:25:02:27:70:d1:ad:
73:72:8c:b6:fd:65:6c:67:ae:64:64:0a:f1:0b:b9:
65:16:e6:8b:5a:8f:0e:c9:e9:6a:89:77:35:c5:67:
17:c2:21:17:39:62:0d:67:f9:75:7d:c9:1f:bc:2b:
48:5a:3e:e0:46:bb:e8:49:92:ec:3a:be:c5:f7:2c:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9F:CE:14:11:DC:23:37:81:AD:F8:37:FB:DE:75:F8:B5:5B:E6:2A
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/MJ_OFBHcIzeBrfg3-951-LVb5io.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31368
Signature Algorithm: sha256WithRSAEncryption
04:fd:19:77:e7:59:a5:d5:8d:5b:88:47:e5:3b:05:bc:d4:86:
26:82:58:c8:8b:7e:34:78:b4:64:5b:10:45:9f:ce:e3:f1:9d:
8c:84:8e:fc:06:63:19:46:1b:b0:81:27:a5:91:e9:2f:9c:58:
28:ff:b4:38:94:d7:14:a4:8c:0a:c3:cc:50:7b:a3:0f:a1:ab:
cc:76:0f:c1:6a:a2:e1:f5:1b:1c:a8:14:5b:2f:88:db:d9:90:
83:f0:c6:b0:c5:95:90:6a:7d:1f:5d:de:a8:86:d7:63:c1:1e:
46:56:8f:48:ee:12:38:79:d4:c4:f7:a9:55:9e:00:71:f8:07:
6a:15:94:6a:dc:64:4d:2d:b9:33:e5:78:93:f3:3e:ba:d3:fb:
a3:ad:db:bc:02:77:a6:91:9b:5e:f1:ca:e1:9f:2f:1f:5c:5b:
1a:de:f1:4a:4a:45:a1:cc:bc:4f:21:7e:d1:4d:00:b4:d7:6e:
05:5b:ef:7d:39:8d:4e:85:a9:52:19:28:67:44:d8:b4:04:a3:
87:4d:60:fa:92:02:a8:85:40:68:6d:d8:9c:1b:68:3d:24:91:
36:8f:55:9e:23:c4:d9:88:a7:77:aa:72:2d:62:24:16:db:33:
30:e0:d3:b2:8b:c2:c1:21:d2:0e:6d:85:cd:f7:aa:1b:7f:48:
32:18:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:52:53 2026 by rpki-client