Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: 6vibj4hyhlAP5YfUieavY497Kj0D8O+HRixjhOKb+/c=
Subject key identifier: 3A:0C:24:A9:12:8E:40:8C:B1:90:1F:9C:03:EB:2E:B2:0E:E1:A0:D6
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 59D06ECD858BB3E44D6EEEED3D2C958CC1B2CDA3
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
Signing time: Mon 24 Aug 2026 09:41:22 +0000
ROA not before: Mon 24 Aug 2026 09:36:22 +0000
ROA not after: Mon 23 Aug 2027 09:41:22 +0000
asID: 13537
IP address blocks: 168.222.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d0:6e:cd:85:8b:b3:e4:4d:6e:ee:ed:3d:2c:95:8c:c1:b2:cd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 24 09:36:22 2026 GMT
Not After : Aug 23 09:41:22 2027 GMT
Subject: CN=3A0C24A9128E408CB1901F9C03EB2EB20EE1A0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:2f:16:94:16:f2:98:bd:c7:8f:a4:63:47:
40:81:07:3d:7e:bb:5f:7e:38:b1:c3:86:b6:d6:83:
95:66:01:ae:51:a5:cc:ad:b1:97:25:f1:3c:43:8c:
6f:90:93:26:56:9e:35:9b:8b:6d:a9:2c:1f:8e:a4:
80:8e:3b:2b:b3:15:36:c0:d2:89:8f:81:f4:8d:b5:
69:5f:1c:ce:66:e7:db:b2:ca:22:27:a0:36:09:3a:
32:cf:a0:bb:44:53:56:a4:bc:85:89:fc:09:de:7d:
b3:0d:c7:95:58:85:04:10:2b:d5:94:ff:77:fd:c6:
8f:b5:b5:3e:17:87:31:e7:39:29:07:60:98:3f:ea:
0d:82:c8:a6:4e:c4:50:83:21:0d:06:44:d9:bc:3c:
f6:34:d8:b2:df:01:d7:c3:8c:cf:55:96:8e:36:b5:
db:50:10:e1:9c:ec:06:38:e8:ce:2b:9e:3f:a5:e2:
ed:e4:d9:3e:75:b5:07:53:a7:45:77:11:26:1e:37:
a3:a7:dc:d5:e7:b5:82:50:eb:47:02:46:af:76:df:
4e:f5:4a:bc:b3:f8:b3:26:fd:a6:a3:39:94:58:70:
28:f7:ac:07:e9:fb:c6:55:6d:c4:95:67:1b:2c:fe:
84:a6:0a:79:bb:df:4a:7f:9b:9b:88:1e:c0:cd:da:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:24:A9:12:8E:40:8C:B1:90:1F:9C:03:EB:2E:B2:0E:E1:A0:D6
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.80.0/24
Signature Algorithm: sha256WithRSAEncryption
87:52:e9:57:6c:58:c7:4f:32:1e:aa:f0:0b:e8:32:de:15:08:
6f:aa:c1:da:a3:13:46:65:9f:ec:c9:96:04:df:42:f8:5e:75:
ea:29:44:d0:4f:09:c5:f8:9f:d2:4d:02:fe:20:d0:c9:62:d0:
d9:5b:83:fc:54:e1:32:97:a7:fe:d6:89:ba:6f:90:e2:20:d6:
ed:a1:89:f8:8a:c7:00:37:a4:c9:1a:62:c4:69:c9:19:5b:ee:
31:ba:cf:9b:b4:00:45:6c:bf:c5:2b:e0:16:e8:96:2a:ac:b6:
35:22:71:be:68:53:e1:23:4f:b4:47:8b:5a:17:b3:bf:8a:d3:
66:35:71:53:11:7b:55:7e:82:dd:91:b9:e8:7c:48:ff:f1:56:
99:8e:0f:09:8e:8c:05:27:52:b7:52:c1:a8:ed:61:e3:13:56:
29:92:9a:0c:92:4e:a6:b2:33:84:73:4c:e5:16:f7:3b:00:db:
be:8a:f7:59:78:b0:f7:45:c0:03:08:4c:fe:71:fb:b9:1e:42:
e3:3d:03:e2:6f:2d:2f:7c:9e:bf:c1:bc:5a:c0:60:07:85:01:
70:ad:30:7b:79:43:29:b1:27:c3:82:a0:d4:0f:b6:6b:04:d3:
d8:5a:8c:e1:0d:5a:aa:4b:7e:d4:aa:89:f7:d5:67:19:cf:c6:
5a:43:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:36 2026 by rpki-client