Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: Ehknf9UMw07FQc0q1gjj6ajevlcr5l79DEL+xB16IpM=
Subject key identifier: 76:00:B2:04:2C:ED:AB:4B:DB:97:46:46:3D:03:F1:94:ED:0D:54:70
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7AD53FD54214EF88A8A0A116A7B61CA1C7D58783
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
Signing time: Mon 19 Oct 2026 00:02:03 +0000
ROA not before: Sun 18 Oct 2026 23:57:03 +0000
ROA not after: Mon 18 Oct 2027 00:02:03 +0000
asID: 13335
IP address blocks: 51.194.144.0/22 maxlen: 22
51.241.128.0/23 maxlen: 23
78.105.145.0/24 maxlen: 24
94.118.0.0/24 maxlen: 24
94.118.42.0/24 maxlen: 24
94.194.72.0/21 maxlen: 24
94.194.228.0/22 maxlen: 24
188.220.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d5:3f:d5:42:14:ef:88:a8:a0:a1:16:a7:b6:1c:a1:c7:d5:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 18 23:57:03 2026 GMT
Not After : Oct 18 00:02:03 2027 GMT
Subject: CN=7600B2042CEDAB4BDB9746463D03F194ED0D5470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:d0:ed:7b:ff:27:55:32:bc:32:e3:f0:4f:
e5:11:a5:a3:cd:41:ef:34:9a:6f:cc:d6:1d:90:bb:
07:df:6f:27:ca:6d:37:46:c2:74:aa:26:02:ed:4b:
70:c8:52:d4:dc:92:8b:f9:86:88:a3:c4:15:8a:1f:
60:20:01:8f:28:90:11:76:a4:d9:c6:e1:c4:57:ea:
16:cf:af:b6:e9:0e:20:bd:b4:f7:46:1f:0d:86:d6:
43:3e:10:24:71:26:cb:58:10:44:fe:49:36:32:20:
96:fa:e6:e7:08:90:66:07:e6:4b:d4:70:fb:bc:39:
92:26:05:59:8b:db:e2:c0:ab:d5:47:a6:fe:35:43:
89:24:4e:d4:8a:1d:7c:9e:a0:2d:61:df:af:0a:03:
f3:7e:28:32:28:72:4c:86:62:50:2a:2d:a5:bb:bb:
34:16:b9:d9:0e:72:0d:18:de:f4:e9:2a:5b:a5:a9:
ba:a6:a5:73:ff:44:ae:5e:2a:b5:e6:a6:65:0d:94:
e2:ca:c3:bc:1a:11:cf:bb:ef:7b:eb:f4:33:10:41:
18:d1:23:2a:75:9f:bd:15:e1:5d:9c:04:51:42:32:
71:69:2e:a4:ae:7a:df:66:c7:cb:d8:c1:b4:9f:10:
18:41:b5:f6:61:dd:9a:d3:9a:e0:94:3d:a8:fc:63:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:B2:04:2C:ED:AB:4B:DB:97:46:46:3D:03:F1:94:ED:0D:54:70
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.144.0/22
51.241.128.0/23
78.105.145.0/24
94.118.0.0/24
94.118.42.0/24
94.194.72.0/21
94.194.228.0/22
188.220.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:0a:a7:a9:76:65:b1:ad:53:44:90:41:9f:c3:25:6f:fb:08:
1e:8f:03:cb:60:51:2f:b0:a2:89:96:4b:a4:77:83:86:78:cd:
14:68:58:e5:93:8f:83:c9:5d:3d:ea:c0:aa:da:e8:69:e5:85:
c7:f4:d5:07:e3:53:3d:8b:9f:40:ff:12:84:29:ba:dc:d6:2d:
50:41:16:b8:1b:2d:23:c9:b2:f0:f2:07:11:39:47:5d:e9:42:
45:bb:5c:00:bf:86:7b:74:f7:e7:25:5c:85:09:7a:03:9d:e3:
c8:49:92:c6:90:16:a1:fe:5b:1f:66:61:a2:eb:6f:68:a5:33:
44:ab:6d:73:8d:9b:8f:90:85:9c:1e:f1:e8:39:e6:8d:26:88:
bf:dc:38:74:0b:e9:f2:82:db:33:18:8a:44:47:73:55:12:4b:
03:d4:e2:cc:b6:4d:9c:f0:8a:57:b8:d3:9c:51:eb:d5:53:f6:
61:92:bd:72:5b:c6:39:92:5e:95:cf:a9:0b:bb:ca:c6:c1:8d:
37:33:1e:48:ae:46:dd:ac:cf:34:b2:98:d6:81:b4:d7:28:de:
de:e2:56:da:8d:35:be:25:8a:e8:ca:fd:32:ba:43:08:10:64:
5a:55:b5:7a:b5:da:61:a5:24:0e:f9:9b:64:52:2a:e0:14:6e:
d9:49:20:60
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUetU/1UIU74iooKEWp7YcocfVh4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMTgyMzU3MDNaFw0yNzEwMTgwMDAyMDNaMDMxMTAvBgNV
BAMTKDc2MDBCMjA0MkNFREFCNEJEQjk3NDY0NjNEMDNGMTk0RUQwRDU0NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXdDte/8nVTK8MuPwT+URpaPN
Qe80mm/M1h2QuwffbyfKbTdGwnSqJgLtS3DIUtTckov5hoijxBWKH2AgAY8okBF2
pNnG4cRX6hbPr7bpDiC9tPdGHw2G1kM+ECRxJstYEET+STYyIJb65ucIkGYH5kvU
cPu8OZImBVmL2+LAq9VHpv41Q4kkTtSKHXyeoC1h368KA/N+KDIockyGYlAqLaW7
uzQWudkOcg0Y3vTpKlulqbqmpXP/RK5eKrXmpmUNlOLKw7waEc+773vr9DMQQRjR
Iyp1n70V4V2cBFFCMnFpLqSuet9mx8vYwbSfEBhBtfZh3ZrTmuCUPaj8Y0rjAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUdgCyBCztq0vbl0ZGPQPxlO0NVHAwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAIzwpAD
BAEz8YADBABOaZEDBABedgADBABedioDBANewkgDBAJewuQDBAO83KgwDQYJKoZI
hvcNAQELBQADggEBAKMKp6l2ZbGtU0SQQZ/DJW/7CB6PA8tgUS+woomWS6R3g4Z4
zRRoWOWTj4PJXT3qwKra6Gnlhcf01QfjUz2Ln0D/EoQputzWLVBBFrgbLSPJsvDy
BxE5R13pQkW7XAC/hnt09+clXIUJegOd48hJksaQFqH+Wx9mYaLrb2ilM0SrbXON
m4+QhZwe8eg55o0miL/cOHQL6fKC2zMYikRHc1USSwPU4sy2TZzwile405xR69VT
9mGSvXJbxjmSXpXPqQu7ysbBjTczHkiuRt2szzSymNaBtNco3t7iVtqNNb4liujK
/TK6QwgQZFpVtXq12mGlJA75m2RSKuAUbtlJIGA=
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:15 2026 by rpki-client