Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13489.roa
File: AS13489.roa (raw, json)
Hash identifier: 4cSZXVbNBskWX5yo/lrsSky6+gAveL6xBW2twzu7UXA=
Subject key identifier: 2B:93:40:C4:66:6D:94:73:DF:E7:35:B7:A9:02:4B:FA:12:0E:AC:F5
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1D55460E16F75FBBC5ED85862DBB375E84AE8C13
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13489.roa
Signing time: Tue 06 Oct 2026 02:38:56 +0000
ROA not before: Tue 06 Oct 2026 02:33:56 +0000
ROA not after: Tue 05 Oct 2027 02:38:56 +0000
asID: 13489
IP address blocks: 150.241.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:55:46:0e:16:f7:5f:bb:c5:ed:85:86:2d:bb:37:5e:84:ae:8c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 6 02:33:56 2026 GMT
Not After : Oct 5 02:38:56 2027 GMT
Subject: CN=2B9340C4666D9473DFE735B7A9024BFA120EACF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:a5:ca:26:ad:f6:ef:99:fa:36:bc:93:0a:
01:ee:08:e5:53:52:53:a5:b3:2d:7d:f9:2c:29:c1:
0f:ea:5a:44:04:24:7c:83:85:3b:cb:29:39:8f:c1:
45:e6:00:ab:ea:27:f0:4d:8b:de:7a:e4:8e:07:a5:
6b:28:c9:d4:0a:37:07:f1:31:63:95:81:86:82:aa:
1b:98:7a:9c:2f:f2:a4:ec:ac:8d:45:6b:8d:d2:79:
0e:8e:fd:9b:4a:4d:8c:e7:83:9f:fa:b1:43:e8:d0:
6c:f7:d1:2d:2f:71:03:f9:63:2c:86:9b:81:c7:2e:
18:26:42:3e:a1:a6:12:cf:1a:fe:c6:3a:62:f9:17:
5b:67:3e:df:f1:8b:44:b6:57:71:c4:ab:6c:0e:23:
63:d0:cb:ac:db:17:c4:e8:69:8e:07:3b:28:ec:e6:
fd:e8:6a:d6:20:ae:57:20:d2:3f:4e:f6:54:9f:1c:
17:54:ae:9d:39:ed:f7:76:2d:da:da:8b:05:70:91:
51:64:95:48:0f:9b:a5:1e:5c:ae:35:af:7e:57:12:
87:40:df:b4:c5:38:42:7b:de:89:90:4b:9a:49:ae:
36:67:16:1e:3e:e2:1c:1e:be:b6:40:67:03:bd:11:
a7:9e:ae:f3:90:c9:a0:ab:57:2b:4d:84:ad:61:1a:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:40:C4:66:6D:94:73:DF:E7:35:B7:A9:02:4B:FA:12:0E:AC:F5
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:14:ba:bb:82:90:d0:7b:ee:2f:65:07:3f:e5:a5:ec:7d:b2:
57:b5:ba:88:fd:5d:15:be:6b:2a:7a:1c:fa:3a:0c:80:29:d6:
e9:16:7c:f7:4e:4d:8a:24:bd:30:f8:fd:d4:6b:16:8e:73:f1:
11:48:3b:a8:36:ea:5a:0f:e0:99:87:97:eb:ab:18:fd:fb:06:
22:1e:b8:c1:84:d8:cf:80:32:ba:ac:d7:3f:58:b2:63:d9:25:
64:31:30:00:b7:bd:6f:44:39:9f:60:bc:93:6e:11:da:e0:fb:
ea:38:14:63:8e:82:17:37:9f:5a:a3:20:e9:18:9f:70:05:98:
bd:d7:a3:ce:06:2f:86:a1:dc:3d:da:66:e4:8b:0a:22:9b:e6:
8b:a3:77:83:15:ac:cf:96:19:60:43:76:a2:78:56:88:ca:5c:
6e:ba:04:41:a5:15:a3:31:fb:6a:6d:89:90:26:70:9c:81:11:
49:d9:07:f3:28:2a:62:42:b3:b1:23:b5:5d:9c:54:ca:35:ff:
90:82:7e:b9:10:76:39:dc:a9:ae:0e:e5:5d:fb:02:b2:ad:79:
fe:f8:52:49:a9:37:67:2c:fb:12:33:c6:0f:e5:4d:9c:a8:1b:
9c:b5:47:22:f3:f2:a9:9d:31:d6:f6:4e:26:35:2c:83:45:05:
28:9d:18:43
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUHVVGDhb3X7vF7YWGLbs3XoSujBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjEwMDYwMjMzNTZaFw0yNzEwMDUwMjM4NTZaMDMxMTAvBgNV
BAMTKDJCOTM0MEM0NjY2RDk0NzNERkU3MzVCN0E5MDI0QkZBMTIwRUFDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaqXKJq3275n6NryTCgHuCOVT
UlOlsy19+SwpwQ/qWkQEJHyDhTvLKTmPwUXmAKvqJ/BNi9565I4HpWsoydQKNwfx
MWOVgYaCqhuYepwv8qTsrI1Fa43SeQ6O/ZtKTYzng5/6sUPo0Gz30S0vcQP5YyyG
m4HHLhgmQj6hphLPGv7GOmL5F1tnPt/xi0S2V3HEq2wOI2PQy6zbF8ToaY4HOyjs
5v3oatYgrlcg0j9O9lSfHBdUrp057fd2LdraiwVwkVFklUgPm6UeXK41r35XEodA
37TFOEJ73omQS5pJrjZnFh4+4hwevrZAZwO9EaeervOQyaCrVytNhK1hGvtNAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUK5NAxGZtlHPf5zW3qQJL+hIOrPUwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM0ODkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACW8Ygw
DQYJKoZIhvcNAQELBQADggEBALQUuruCkNB77i9lBz/lpex9sle1uoj9XRW+ayp6
HPo6DIAp1ukWfPdOTYokvTD4/dRrFo5z8RFIO6g26loP4JmHl+urGP37BiIeuMGE
2M+AMrqs1z9YsmPZJWQxMAC3vW9EOZ9gvJNuEdrg++o4FGOOghc3n1qjIOkYn3AF
mL3Xo84GL4ah3D3aZuSLCiKb5oujd4MVrM+WGWBDdqJ4VojKXG66BEGlFaMx+2pt
iZAmcJyBEUnZB/MoKmJCs7EjtV2cVMo1/5CCfrkQdjncqa4O5V37ArKtef74Ukmp
N2cs+xIzxg/lTZyoG5y1RyLz8qmdMdb2TiY1LINFBSidGEM=
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:25:17 2026 by rpki-client