Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 9xtsMftkAi+IG5dnEKzSQ0noiNF8uVQuuKomfBzDThA=
Subject key identifier: 6A:B0:A4:C1:59:48:64:F6:29:20:E0:A7:CB:34:75:49:80:EF:F1:D4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 79D338B606E139EA7B98924C483044C8A898BD52
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
Signing time: Wed 30 Sep 2026 14:49:02 +0000
ROA not before: Wed 30 Sep 2026 14:44:02 +0000
ROA not after: Wed 29 Sep 2027 14:49:02 +0000
asID: 13335
IP address blocks: 140.233.163.0/24 maxlen: 24
140.233.180.0/24 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.142.0/24 maxlen: 24
143.14.163.0/24 maxlen: 24
143.14.165.0/24 maxlen: 24
143.14.167.0/24 maxlen: 24
143.14.168.0/24 maxlen: 24
143.14.176.0/22 maxlen: 24
143.14.224.0/24 maxlen: 24
143.14.251.0/24 maxlen: 24
148.135.194.0/24 maxlen: 24
155.117.208.0/23 maxlen: 23
162.141.1.0/24 maxlen: 24
167.148.69.0/24 maxlen: 24
167.148.84.0/23 maxlen: 24
167.148.120.0/23 maxlen: 24
168.222.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d3:38:b6:06:e1:39:ea:7b:98:92:4c:48:30:44:c8:a8:98:bd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 30 14:44:02 2026 GMT
Not After : Sep 29 14:49:02 2027 GMT
Subject: CN=6AB0A4C1594864F62920E0A7CB34754980EFF1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:fa:d2:d9:35:56:52:88:37:9b:2c:49:1d:
80:e8:c2:97:a7:eb:d3:a3:12:cc:f0:38:53:60:e7:
85:51:46:c7:35:f2:78:09:47:7c:52:c1:ab:dc:b7:
32:c9:eb:7a:11:d2:30:66:98:4c:ce:f6:f3:0d:98:
14:73:d4:09:91:44:3d:82:4a:29:a8:53:dd:de:c5:
f7:cd:8b:21:98:e4:7c:11:69:e3:7f:bd:18:29:2b:
89:63:19:72:9e:62:d2:49:18:c6:6f:ab:3d:5f:87:
d2:04:fc:06:86:a2:ac:d5:52:e0:e2:e3:97:0a:3c:
fa:26:5f:a4:81:fd:41:08:72:02:f1:97:12:28:84:
94:7d:67:b4:2c:a3:18:6d:c5:04:83:85:f1:33:41:
77:be:83:ce:90:33:26:9b:3f:51:50:29:34:fe:e4:
82:28:f4:e9:75:b9:e7:fa:5c:62:68:06:7a:13:6a:
5c:f1:67:0e:18:0d:21:5c:ca:06:bb:00:7b:16:a9:
01:b8:fa:ea:e7:9c:27:c9:eb:89:4e:e5:9a:d5:c0:
c4:c8:ab:51:96:f1:f5:5c:3b:9d:0d:3d:34:74:7e:
aa:2b:ca:b2:84:ef:f6:72:45:44:07:78:be:c2:6d:
23:c0:4e:3d:cf:7c:41:76:04:1e:b1:5e:7b:a7:82:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:A4:C1:59:48:64:F6:29:20:E0:A7:CB:34:75:49:80:EF:F1:D4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.163.0/24
140.233.180.0/24
143.14.91.0/24
143.14.142.0/24
143.14.163.0/24
143.14.165.0/24
143.14.167.0-143.14.168.255
143.14.176.0/22
143.14.224.0/24
143.14.251.0/24
148.135.194.0/24
155.117.208.0/23
162.141.1.0/24
167.148.69.0/24
167.148.84.0/23
167.148.120.0/23
168.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
37:49:7c:3a:8c:e3:a2:da:f5:81:e9:a4:a5:63:2c:06:bf:07:
95:d4:6e:a8:d2:ed:48:fe:93:db:f0:04:32:64:32:be:54:d6:
3f:78:3f:88:2e:2e:e6:03:86:aa:70:29:63:a1:27:e7:a5:72:
5c:e2:a8:bb:c4:fc:15:67:56:e9:14:38:16:68:b6:ae:5b:4a:
28:38:28:15:b8:12:39:ef:85:99:8f:e6:fb:e5:ea:6a:ca:a8:
83:b8:04:3c:29:56:c2:b2:c5:38:00:7b:9a:68:81:6f:ad:aa:
ca:00:ad:43:8b:50:7d:33:04:d6:f0:d7:1c:cd:b8:f1:e6:0e:
b6:6c:2d:a9:87:96:6e:43:4a:18:8a:d9:29:f9:a9:8b:23:0d:
f7:25:1a:8c:10:70:ba:2d:be:3f:c2:6a:99:f1:02:5f:91:f7:
dc:fb:ae:58:4b:98:a0:c5:5f:a8:a1:43:09:99:9a:dd:31:15:
1f:ff:d5:97:1d:6c:8b:4c:5b:97:f3:e8:41:ea:4a:8d:d8:46:
c7:ff:7b:51:55:cd:2a:fa:9c:73:88:11:c7:38:8b:ea:d9:83:
3d:be:2b:63:1f:a0:94:1e:7d:ce:ea:d3:91:d9:07:38:0d:ce:
9c:6e:2b:8b:d3:97:50:9d:a1:91:64:98:3a:e8:a7:a7:1e:ec:
5b:b4:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:40 2026 by rpki-client