Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: mByE1HGo6rG+5hav4XxODBpMqDxT8hXA05GkVLnKK8M=
Subject key identifier: C9:C3:50:80:1C:89:F6:3E:61:48:78:21:F6:F3:1F:96:21:95:16:3D
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 4BFB0469B18541CDE8B946F7155BA255FBFE7DE9
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
Signing time: Mon 20 Oct 2025 14:09:37 +0000
ROA not before: Mon 20 Oct 2025 14:04:37 +0000
ROA not after: Mon 19 Oct 2026 14:09:37 +0000
asID: 13335
IP address blocks: 143.14.163.0/24 maxlen: 24
143.14.165.0/24 maxlen: 24
143.14.167.0/24 maxlen: 24
143.14.168.0/24 maxlen: 24
143.14.176.0/22 maxlen: 24
143.14.224.0/24 maxlen: 24
143.14.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:fb:04:69:b1:85:41:cd:e8:b9:46:f7:15:5b:a2:55:fb:fe:7d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 20 14:04:37 2025 GMT
Not After : Oct 19 14:09:37 2026 GMT
Subject: CN=C9C350801C89F63E61487821F6F31F962195163D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:b9:e0:95:78:51:69:d2:11:2b:a0:fc:20:
f0:c8:f3:0c:a2:38:17:bf:a8:75:7e:41:79:f3:75:
a4:f5:f2:6c:35:11:e2:e9:c2:98:28:8e:92:6a:9f:
ae:73:fa:2e:46:f0:a8:31:65:39:9a:95:a5:24:23:
af:cd:c0:da:36:e6:ce:e8:d4:fa:19:ef:ea:a3:fb:
36:c9:52:ed:41:b8:3a:e8:8d:83:23:4a:2a:bb:05:
dd:23:a3:0f:51:de:60:e4:29:c3:7c:8b:54:05:03:
0c:52:13:43:00:5f:06:b8:3d:85:ee:82:01:8e:f9:
14:93:24:b9:42:f7:66:27:88:ec:41:91:a0:ff:25:
28:60:84:2c:2f:e6:69:61:6f:78:1b:5f:f8:8d:d5:
28:bd:81:d1:72:65:15:3f:50:af:0c:4d:29:12:7d:
63:95:f2:ca:20:1d:da:a1:8f:96:fe:31:76:b1:08:
23:60:fa:b0:ff:2f:50:1c:99:f6:e1:9c:84:2b:d5:
f2:5b:00:df:fa:b8:fa:19:2b:49:6a:c1:7e:ff:4d:
c2:42:6a:96:e9:75:95:6d:ee:01:08:d0:e4:44:69:
0e:18:11:13:1e:64:14:ef:9c:a1:93:0c:5b:2a:bf:
4f:ba:d0:fe:c2:4e:a0:d0:3e:ff:3c:e0:86:68:07:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:50:80:1C:89:F6:3E:61:48:78:21:F6:F3:1F:96:21:95:16:3D
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.163.0/24
143.14.165.0/24
143.14.167.0-143.14.168.255
143.14.176.0/22
143.14.224.0/24
143.14.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4b:7e:42:c3:37:31:30:ff:ae:61:57:45:5b:e2:c0:4c:39:
1e:69:03:43:5e:a2:1f:08:a3:54:e9:c6:c4:f7:04:85:01:e9:
9d:2c:bf:b6:8c:f5:a8:3d:03:cc:41:b3:b4:e8:c0:12:71:90:
f8:33:10:9d:26:2a:46:fc:59:2d:d7:56:f8:11:b5:25:be:6c:
df:e4:ce:8b:d7:0e:e2:4d:d4:fa:f8:7b:fe:27:1a:39:d3:8d:
b6:0b:ee:48:25:14:22:b0:1e:05:cf:aa:c0:26:83:79:ed:40:
82:d6:5e:94:90:f8:de:f7:f0:ca:af:f3:bd:98:cd:25:27:77:
93:2f:18:ea:1e:d8:cc:c1:be:fa:8f:34:1d:37:e6:14:22:4d:
f9:55:77:98:60:b3:cd:ca:c4:68:75:3b:08:66:a0:f3:b5:80:
ac:11:e0:91:44:43:c4:cc:b0:7c:f9:f0:8f:3a:02:ea:e6:e1:
5a:9d:5b:8c:73:cc:bc:32:0c:7c:54:7f:d2:ec:69:0c:8e:62:
c4:6b:ed:45:f2:55:28:41:47:6e:6a:9d:08:f1:9b:d9:5e:9d:
21:5e:e6:ad:54:0d:b3:e8:04:c5:35:71:ae:ba:7a:0a:fd:6b:
82:71:fe:43:94:95:a5:27:79:d6:48:9e:be:05:f2:1b:e0:80:
3a:85:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:58:47 2025 by rpki-client