Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: z3AkHt3O/FmgS5WO5WVJ4YVnAd3rl7ifaDQZqyewWG0=
Subject key identifier: F0:73:6C:F2:21:DA:17:13:C8:C7:D8:1D:55:9E:DD:40:48:54:BE:AB
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 405D180E89A9D59A5F9F7977644B99F4C366605B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13335.roa
Signing time: Fri 02 Oct 2026 08:19:07 +0000
ROA not before: Fri 02 Oct 2026 08:14:07 +0000
ROA not after: Fri 01 Oct 2027 08:19:07 +0000
asID: 13335
IP address blocks: 82.21.82.0/24 maxlen: 24
82.21.188.0/24 maxlen: 24
82.22.16.0/24 maxlen: 24
82.22.21.0/24 maxlen: 24
82.22.49.0/24 maxlen: 24
82.24.40.0/24 maxlen: 24
82.25.20.0/24 maxlen: 24
82.26.156.0/24 maxlen: 24
82.39.142.0/24 maxlen: 24
82.39.253.0/24 maxlen: 24
82.40.22.0/24 maxlen: 24
82.47.124.0/23 maxlen: 23
178.83.28.0/24 maxlen: 24
178.83.176.0/24 maxlen: 24
2a13:9500:3e::/48 maxlen: 48
2a13:9500:b7::/48 maxlen: 48
2a13:9500:1e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5d:18:0e:89:a9:d5:9a:5f:9f:79:77:64:4b:99:f4:c3:66:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 2 08:14:07 2026 GMT
Not After : Oct 1 08:19:07 2027 GMT
Subject: CN=F0736CF221DA1713C8C7D81D559EDD404854BEAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:87:1a:a0:e6:e3:f8:1d:2d:34:08:cd:74:
33:be:70:1d:a5:de:22:a2:0d:24:eb:52:9d:4e:d7:
5b:2c:d2:06:4b:e0:b6:38:2b:3a:44:94:a6:81:99:
d1:fb:7d:95:96:84:39:47:23:43:c7:8f:e4:e9:16:
8f:ae:84:9d:48:83:8b:3c:40:da:31:bc:21:5e:c2:
4b:f6:2c:38:0e:78:83:49:81:80:6f:5a:c9:a9:82:
09:c4:c9:4f:ac:9e:fd:b1:0f:a3:a7:e4:b7:96:37:
bf:d7:36:e4:73:00:7a:60:ca:47:c6:af:4c:66:52:
07:b4:ec:ca:d1:43:6b:ab:cd:74:67:75:6a:87:ee:
d7:df:e9:6a:df:81:9b:72:21:8d:43:ff:0d:81:5d:
b2:f7:08:bc:f2:35:05:e8:7b:bb:ca:37:fd:3f:b9:
7c:60:dd:06:5d:88:e8:c5:58:50:a8:9d:bd:7f:44:
b7:cf:b0:13:ae:01:df:3f:8b:46:cd:a1:90:78:87:
ce:84:69:da:0c:09:3b:1e:61:ed:a7:c6:3d:96:bf:
0e:6b:c1:6a:50:70:de:a2:5f:f6:7f:cb:a0:a8:db:
14:54:bf:12:17:3e:3b:e6:5d:8c:73:b6:91:73:53:
9f:dd:ca:00:f4:d5:c3:cd:d0:39:4f:4c:53:0c:b2:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:73:6C:F2:21:DA:17:13:C8:C7:D8:1D:55:9E:DD:40:48:54:BE:AB
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.82.0/24
82.21.188.0/24
82.22.16.0/24
82.22.21.0/24
82.22.49.0/24
82.24.40.0/24
82.25.20.0/24
82.26.156.0/24
82.39.142.0/24
82.39.253.0/24
82.40.22.0/24
82.47.124.0/23
178.83.28.0/24
178.83.176.0/24
IPv6:
2a13:9500:3e::/48
2a13:9500:b7::/48
2a13:9500:1e4::/48
Signature Algorithm: sha256WithRSAEncryption
82:99:54:b7:96:d6:22:ea:7b:13:6c:7b:26:c9:f7:c8:f4:1b:
fd:d5:ec:54:de:38:62:24:9a:24:4a:60:2f:c3:8b:d9:d2:55:
bd:33:0f:9d:88:aa:26:9c:07:b5:b9:0e:86:9b:14:2a:98:9c:
8a:0b:81:04:f8:1b:d1:48:7c:22:38:89:d3:e3:a4:65:69:7c:
f2:33:8a:5e:d9:46:b8:25:75:4f:28:17:0c:7c:87:5e:d6:e9:
46:9c:5a:af:9d:98:31:90:03:a6:c6:82:03:d9:3e:4e:e5:42:
bc:f0:b9:91:9a:dc:2e:5b:aa:36:05:39:23:b0:18:4d:32:d1:
cb:a6:b4:b7:07:c3:c5:8a:8c:41:44:07:21:2c:fa:ee:b3:51:
f5:f2:ef:42:8f:50:9e:00:e1:96:3f:6d:ec:83:c4:76:03:6e:
3c:db:59:ab:67:97:7a:1d:d0:77:28:15:19:37:b9:03:ef:05:
8c:83:68:fd:b8:04:9c:d1:fe:8e:02:45:96:a0:c0:12:09:53:
c4:07:d4:c7:8f:c1:6b:f5:04:32:2e:ed:a8:7d:8a:18:6a:75:
19:13:be:7f:82:69:37:71:98:23:92:df:54:7f:7a:79:20:be:
df:35:84:74:ad:55:fb:35:ad:43:60:5a:40:c0:dd:83:36:29:
23:8e:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:13:03 2026 by rpki-client