Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/2BKAXtln8KzReY8_THzqrmmiyM4.asa
File:                     2BKAXtln8KzReY8_THzqrmmiyM4.asa (raw, json)
Hash identifier:          Sc3aPkbPjVsQ6j/oD90t2utIy322EBG1ZVdIGT6gJ+c=
Subject key identifier:   D8:12:80:5E:D9:67:F0:AC:D1:79:8F:3F:4C:7C:EA:AE:69:A2:C8:CE
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       01A0A41D20DE3C19DBCB08A926FCD03FDACC
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/2BKAXtln8KzReY8_THzqrmmiyM4.asa
Signing time:             Tue 15 Sep 2026 08:09:27 +0000
ASPA not before:          Tue 15 Sep 2026 08:09:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47583
Providers:                AS: 174
                          AS: 1299
                          AS: 2711
                          AS: 2914
                          AS: 3356
                          AS: 4800
                          AS: 5405
                          AS: 6939
                          AS: 7195
                          AS: 9002
                          AS: 9340
                          AS: 9498
                          AS: 12025
                          AS: 13194
                          AS: 15085
                          AS: 15440
                          AS: 21859
                          AS: 24482
                          AS: 50673
                          AS: 52925
                          AS: 60068
                          AS: 61323
                          AS: 133296
                          AS: 396998
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a4:1d:20:de:3c:19:db:cb:08:a9:26:fc:d0:3f:da:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Sep 15 08:09:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d812805ed967f0acd1798f3f4c7ceaae69a2c8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8d:a7:a5:ff:7a:8c:a9:3c:92:9b:95:e8:59:
                    67:ab:16:cd:66:d2:c5:08:85:31:2d:b8:68:c4:4f:
                    f6:1b:40:5a:f5:52:ab:83:ef:5a:b0:b6:64:5c:5e:
                    e0:9a:ea:88:f8:35:5e:6c:57:cc:aa:7b:3d:c0:cb:
                    32:3e:d2:96:fe:9f:d1:2c:62:ce:2e:94:7b:f3:02:
                    06:45:bc:64:6c:1c:5f:c4:8a:26:36:20:f2:2a:3e:
                    df:22:29:68:63:ef:98:4b:d4:d3:e4:67:5e:59:27:
                    51:31:40:21:d5:5f:4a:c1:ed:f9:35:8a:06:6e:90:
                    5d:6e:83:64:1b:b6:27:6f:bb:43:20:46:25:1a:5e:
                    a7:e1:9e:5a:f1:d5:e1:45:60:2f:b6:a3:fd:0b:43:
                    8b:4a:2e:1c:a2:46:43:1c:4b:7d:58:15:0c:8d:b9:
                    43:30:52:fd:00:4f:1b:e4:d6:60:ae:e1:1a:02:ad:
                    5f:a0:46:81:a3:f6:cd:5a:75:ce:be:11:f4:84:09:
                    6a:e7:e6:55:96:f4:2e:08:11:85:e3:9e:68:3f:7a:
                    4c:75:ae:52:2e:6e:3b:40:ce:ee:a2:8d:51:ce:dc:
                    4e:ec:f8:c5:96:d8:8c:44:fc:44:4f:a9:fb:d5:e2:
                    cf:11:bd:10:b3:67:e9:dd:26:e5:f9:7f:98:39:7c:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:12:80:5E:D9:67:F0:AC:D1:79:8F:3F:4C:7C:EA:AE:69:A2:C8:CE
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/2BKAXtln8KzReY8_THzqrmmiyM4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47583

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:56:b8:86:50:a8:77:4c:7a:8b:be:4d:cc:c3:41:d2:1a:
         76:59:18:cf:9e:05:2e:2b:4a:6a:0a:80:d4:69:f1:3c:05:52:
         d1:7a:40:9f:33:bc:c1:1c:9b:e4:15:cf:b5:c3:cf:d4:bf:4f:
         0e:7a:fd:16:b2:e0:dd:a0:f4:63:28:c4:18:73:2b:93:cc:f9:
         7f:63:81:67:e5:19:ec:4c:f7:b1:a9:ea:73:db:af:cb:82:86:
         84:67:a8:c9:b6:d7:1f:cd:eb:61:b5:cc:6b:f5:03:23:5e:68:
         b5:13:97:b8:8c:2f:59:ea:68:ff:6f:b6:3d:d7:fa:04:b9:be:
         61:88:b6:20:6b:22:56:fa:2e:72:65:92:35:5a:c9:2d:93:91:
         22:34:94:da:d2:e6:bd:30:82:9b:d1:b9:20:d9:60:51:6f:b7:
         d9:f3:60:79:ec:22:e5:d8:7c:ec:13:48:fb:20:58:a8:1b:f0:
         79:f2:62:b8:3f:76:8d:1e:44:76:34:28:8d:f3:73:f8:03:62:
         7f:20:a1:d2:07:6e:49:63:f8:b8:81:0c:0d:e0:25:31:d9:ce:
         07:7e:ab:20:7c:1b:e4:fe:11:79:b0:eb:57:34:66:3b:56:6f:
         3d:a8:1f:32:33:30:a6:89:2f:a6:0f:df:5f:38:87:18:0a:50:
         cf:34:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:25:52 2026 by rpki-client