Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: IAHsIl9AJuD2wXOEAOSROgQulEZhhAaDTb9SE5CJ1Gk=
Subject key identifier: B2:23:8F:61:55:04:63:31:00:B5:2E:4B:08:81:BA:6B:4C:D1:A2:96
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 21CED41EB9A1BAC6715B2953C42D7E04268995A6
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
Signing time: Mon 01 Sep 2025 07:27:36 +0000
ROA not before: Mon 01 Sep 2025 07:22:36 +0000
ROA not after: Mon 31 Aug 2026 07:27:36 +0000
asID: 13335
IP address blocks: 143.14.163.0/24 maxlen: 24
143.14.165.0/24 maxlen: 24
143.14.167.0/24 maxlen: 24
143.14.168.0/24 maxlen: 24
143.14.176.0/22 maxlen: 24
143.14.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ce:d4:1e:b9:a1:ba:c6:71:5b:29:53:c4:2d:7e:04:26:89:95:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 1 07:22:36 2025 GMT
Not After : Aug 31 07:27:36 2026 GMT
Subject: CN=B2238F615504633100B52E4B0881BA6B4CD1A296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:7d:70:3f:2b:b7:85:2c:87:1d:38:1e:f6:
58:39:6d:f1:0a:b9:84:1e:a9:11:24:b0:e7:02:45:
ee:4f:6b:a9:05:a9:c4:e3:77:4e:12:d5:8f:6c:93:
b2:00:89:b2:f5:a3:ee:71:60:84:26:db:2c:b6:95:
9e:f0:18:27:32:08:69:bd:e5:68:c1:b3:36:d1:36:
a5:9c:87:15:97:65:c6:ea:6a:6c:6c:00:46:48:63:
f9:b5:20:4a:14:48:7d:61:9c:c0:8f:f4:b8:d1:31:
d5:03:b9:73:c1:8b:be:c4:95:29:85:27:ab:fb:fc:
f7:bb:95:9a:f9:de:e2:16:e9:42:8a:6a:0b:a6:48:
17:eb:ea:13:6d:d9:79:20:cf:b8:d7:0b:52:ab:c4:
d9:83:2f:4c:85:63:f0:d0:a7:28:b9:49:a9:5a:42:
f2:1c:2c:3f:8e:07:18:aa:01:a8:9c:90:4a:bf:b8:
b6:9a:e2:59:de:8f:f9:21:8c:9a:88:ae:d2:90:a3:
3f:13:1e:32:70:5b:ac:80:d8:bb:97:4e:a1:04:56:
a3:a9:38:0d:ab:a7:d7:af:1b:bd:b2:ba:61:04:a1:
36:0f:49:22:74:1f:a8:a6:1f:d8:86:b5:90:9c:7c:
e1:7d:1d:e3:cc:70:13:e9:e6:6d:f2:d7:83:68:71:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:8F:61:55:04:63:31:00:B5:2E:4B:08:81:BA:6B:4C:D1:A2:96
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.163.0/24
143.14.165.0/24
143.14.167.0-143.14.168.255
143.14.176.0/22
143.14.251.0/24
Signature Algorithm: sha256WithRSAEncryption
65:31:e8:f7:1a:f8:e6:1b:17:18:38:02:8c:77:15:96:f6:c3:
0e:ea:66:59:28:60:5d:79:35:8d:bc:18:af:0e:f8:bd:4b:49:
07:32:a3:22:e8:89:8e:01:30:e1:42:e8:82:10:d7:17:5e:e9:
db:4f:c3:5e:02:3e:f6:dd:e5:d2:05:ad:e7:1f:b7:6f:56:44:
ee:1f:ee:30:42:65:95:99:c2:21:4c:54:46:ba:ff:a6:86:cd:
f5:c6:54:99:a3:f5:2e:e3:f7:0a:0f:9c:1c:58:da:b0:a7:bb:
2e:81:67:9a:06:30:89:54:59:dc:e3:18:0e:16:ae:fc:8c:14:
4e:9b:2a:cc:78:3b:32:5d:b0:cb:c8:26:3d:88:7e:3e:df:20:
d5:be:fb:eb:13:75:4a:61:b9:84:ac:79:ae:89:7c:93:c4:90:
94:6b:fd:2b:ee:e3:c4:aa:72:73:eb:7e:5e:0e:f9:3d:11:c5:
47:b7:0d:15:48:fa:d3:cf:d7:9a:0f:92:ce:33:19:90:23:30:
31:44:28:5a:53:1c:7c:df:c2:5a:d4:24:32:e4:61:ef:c5:e6:
c5:20:a0:09:29:fc:80:cf:4c:3d:27:6b:a1:28:b1:71:f9:3b:
0b:8a:1c:c0:9b:b9:25:9d:e5:ec:fa:95:06:bb:4d:74:16:08:
3e:6b:f3:20
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUIc7UHrmhusZxWylTxC1+BCaJlaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA5MDEwNzIyMzZaFw0yNjA4MzEwNzI3MzZaMDMxMTAvBgNV
BAMTKEIyMjM4RjYxNTUwNDYzMzEwMEI1MkU0QjA4ODFCQTZCNENEMUEyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOX1wPyu3hSyHHTge9lg5bfEK
uYQeqREksOcCRe5Pa6kFqcTjd04S1Y9sk7IAibL1o+5xYIQm2yy2lZ7wGCcyCGm9
5WjBszbRNqWchxWXZcbqamxsAEZIY/m1IEoUSH1hnMCP9LjRMdUDuXPBi77ElSmF
J6v7/Pe7lZr53uIW6UKKagumSBfr6hNt2Xkgz7jXC1KrxNmDL0yFY/DQpyi5Sala
QvIcLD+OBxiqAaickEq/uLaa4lnej/khjJqIrtKQoz8THjJwW6yA2LuXTqEEVqOp
OA2rp9evG72yumEEoTYPSSJ0H6imH9iGtZCcfOF9HePMcBPp5m3y14NocbiVAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUsiOPYVUEYzEAtS5LCIG6a0zRopYwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcBAf8EMDAuMCwEAgABMCYDBACPDqMD
BACPDqUwDAMEAI8OpwMEAI8OqAMEAo8OsAMEAI8O+zANBgkqhkiG9w0BAQsFAAOC
AQEAZTHo9xr45hsXGDgCjHcVlvbDDupmWShgXXk1jbwYrw74vUtJBzKjIuiJjgEw
4ULoghDXF17p20/DXgI+9t3l0gWt5x+3b1ZE7h/uMEJllZnCIUxURrr/pobN9cZU
maP1LuP3Cg+cHFjasKe7LoFnmgYwiVRZ3OMYDhau/IwUTpsqzHg7Ml2wy8gmPYh+
Pt8g1b776xN1SmG5hKx5rol8k8SQlGv9K+7jxKpyc+t+Xg75PRHFR7cNFUj608/X
mg+SzjMZkCMwMUQoWlMcfN/CWtQkMuRh78XmxSCgCSn8gM9MPSdroSixcfk7C4oc
wJu5JZ3l7PqVBrtNdBYIPmvzIA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:44:29 2025 by rpki-client