This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/CJHjJvBxO_A1o29RU77bYDobb1Y.asa
File:                     CJHjJvBxO_A1o29RU77bYDobb1Y.asa (raw, json)
Hash identifier:          OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=
Subject key identifier:   08:91:E3:26:F0:71:3B:F0:35:A3:6F:51:53:BE:DB:60:3A:1B:6F:56
Certificate issuer:       /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial:       019B923F474C270F538CB0338A3F65678B26
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/CJHjJvBxO_A1o29RU77bYDobb1Y.asa
Signing time:             Tue 06 Jan 2026 07:39:39 +0000
ASPA not before:          Tue 06 Jan 2026 07:39:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213418
Providers:                AS: 59891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:92:3f:47:4c:27:0f:53:8c:b0:33:8a:3f:65:67:8b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
        Validity
            Not Before: Jan  6 07:39:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0891e326f0713bf035a36f5153bedb603a1b6f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:42:47:45:98:ee:35:63:a0:76:81:04:93:
                    e2:46:8b:08:6f:b5:4f:d4:ad:ba:ef:34:78:20:f1:
                    86:3d:84:99:bb:b8:88:42:dc:0f:aa:90:53:f8:3c:
                    83:19:8e:fb:95:dd:2f:26:66:42:21:f7:1c:8d:27:
                    27:5b:0a:07:7b:35:d4:85:9f:49:c6:22:66:36:28:
                    01:97:66:97:b3:71:13:10:99:2f:de:e5:bc:15:b8:
                    99:83:1b:8e:68:8a:d9:19:ce:e9:ea:ba:f7:13:2f:
                    38:98:f4:36:62:9b:fb:44:c3:66:c5:dd:4e:eb:55:
                    c3:ce:6f:26:52:60:54:f2:bf:ea:e4:52:b7:98:b2:
                    26:f5:9e:86:ab:c4:97:37:ac:93:18:12:6a:b6:15:
                    19:d7:a3:e7:95:62:02:bd:89:45:a2:50:11:37:cd:
                    65:72:ca:24:be:bf:18:cf:83:76:0c:bf:60:5e:13:
                    19:a3:33:82:c0:47:cf:45:4d:7d:39:d5:7e:fc:55:
                    38:3b:db:6b:52:9b:0e:55:35:14:d3:8e:c2:c5:75:
                    38:38:24:30:fb:e2:ee:7c:90:bb:2c:d9:8d:9d:13:
                    73:74:75:8f:16:aa:4c:ca:73:f2:be:2e:7f:6f:ce:
                    3f:1f:43:ac:eb:fb:9a:02:eb:97:45:d1:02:29:d0:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:E3:26:F0:71:3B:F0:35:A3:6F:51:53:BE:DB:60:3A:1B:6F:56
            X509v3 Authority Key Identifier:
                keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/CJHjJvBxO_A1o29RU77bYDobb1Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213418

    Signature Algorithm: sha256WithRSAEncryption
         35:13:52:55:31:53:c7:08:29:b9:be:d1:61:06:bc:27:a4:a6:
         b0:4b:57:e9:8d:02:0f:e2:a8:e6:df:b6:a1:1e:05:3c:56:8a:
         d0:de:c0:e3:30:6d:d9:07:9a:5e:c8:49:7b:87:c8:13:4c:40:
         b7:57:7b:34:e2:a9:6a:b1:c9:2b:10:9c:2f:80:d1:b2:9f:4d:
         c2:0a:07:82:15:d5:86:76:fa:c8:4a:ad:5d:af:8e:77:0a:77:
         df:f9:48:3e:b3:a8:1b:67:3e:bf:c8:18:3f:a2:49:ba:6a:02:
         81:09:08:3b:dd:18:d4:77:32:61:f4:b9:f7:25:3e:c5:07:ce:
         4b:42:af:e7:ca:80:cd:1e:40:fa:8f:1b:06:1c:7d:ab:fb:0e:
         45:6c:e7:0a:c1:25:af:da:fe:eb:1a:53:37:d2:ff:95:9c:4d:
         62:09:8a:c5:ba:e8:22:6a:5c:36:7b:68:ae:e4:69:c1:0d:f8:
         22:fe:5c:95:33:d4:44:a9:94:4f:64:99:a9:b9:05:63:0b:4b:
         39:6f:6e:7a:3d:b0:7e:e1:96:98:a6:89:3e:5e:75:e1:4d:da:
         96:0e:49:3f:93:8c:3a:5a:35:7f:fd:a0:89:56:66:cc:a5:6f:
         52:57:98:47:00:e5:25:44:00:14:67:8a:1a:de:2d:b7:4f:e7:
         0d:a3:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:13 2026 by rpki-client