Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS13347.roa
File: AS13347.roa (raw, json)
Hash identifier: ePmHeORHlOZbB5pF6OuvLKOgbTni3yT91/Kj8L1N+XE=
Subject key identifier: 65:58:8E:AF:58:D4:01:97:7D:A6:FE:B9:25:BD:BD:6E:42:9E:7C:97
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 037FAE054BD5D18513397FA64BB169B51AC6F7F5
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS13347.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 13347
IP address blocks: 46.236.244.0/22 maxlen: 24
46.236.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7f:ae:05:4b:d5:d1:85:13:39:7f:a6:4b:b1:69:b5:1a:c6:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=65588EAF58D401977DA6FEB925BDBD6E429E7C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:05:bf:9f:ab:6a:62:df:7d:9b:00:e6:fb:
24:0d:53:42:2a:31:57:16:02:77:73:8a:7c:3f:f5:
84:cb:4a:30:88:2c:97:ad:42:17:79:c4:8f:0c:08:
78:47:7c:ae:33:d1:ca:52:3e:de:44:a1:0d:44:68:
18:43:d1:b3:4c:a4:60:8e:93:c5:41:f1:ac:61:81:
24:c8:9f:7c:e5:44:8c:87:e7:3f:f8:e0:68:87:9f:
27:d1:d5:8b:a2:8e:83:ec:7d:fa:a4:65:0c:84:4f:
83:82:08:71:d6:2e:1d:87:9f:a2:bd:c0:02:e7:a2:
a8:d4:2d:d3:44:81:d2:e4:16:5e:ee:53:1b:44:7b:
79:f8:07:74:fa:a8:0f:5b:2c:10:57:71:cc:b1:63:
00:fb:a0:72:90:21:5f:10:06:22:3f:a2:22:07:2b:
e5:36:8d:6b:19:b4:3d:41:81:5d:30:cf:dd:e9:a4:
8a:da:f6:fa:b8:87:54:fc:76:69:9b:26:ce:3d:fb:
d3:58:dd:23:6f:3f:e1:6e:0f:c4:00:80:41:19:85:
97:41:b0:04:0b:ca:7b:12:49:40:b0:d4:9e:a9:0d:
a7:4a:13:2b:61:a9:78:45:24:58:c5:dd:9d:d6:3e:
d6:5d:40:35:c8:6c:30:7e:fc:f1:83:93:a0:71:46:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:8E:AF:58:D4:01:97:7D:A6:FE:B9:25:BD:BD:6E:42:9E:7C:97
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS13347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.244.0-46.236.251.255
Signature Algorithm: sha256WithRSAEncryption
2d:78:20:a2:40:84:ef:49:7b:24:c1:78:c8:d4:83:81:9f:dc:
f4:ff:e5:77:a5:25:64:8d:ee:d8:13:59:a3:75:7a:fe:9a:e7:
9e:31:b9:eb:da:6b:8a:2d:c5:34:ae:7b:a0:20:4c:66:70:ab:
ed:4e:2f:86:e1:49:21:26:8e:08:83:00:b2:d3:41:a7:dc:55:
fd:ac:25:6a:a8:2c:16:6b:c4:49:f5:17:2b:77:54:ba:f8:df:
32:1c:0f:6c:1c:f7:5b:b8:ee:c9:9e:8d:0c:a9:ae:54:0f:df:
3e:89:9f:e7:e8:a7:a6:e4:1c:86:00:7c:06:9c:35:8b:f8:e2:
c6:7a:80:47:cf:f3:05:bb:76:7b:67:04:26:59:4a:ee:44:f9:
3e:fa:86:dc:4d:53:89:88:e6:3b:83:df:dd:0a:74:9e:0f:a2:
42:e5:f7:37:09:9c:c7:d0:78:3d:5b:76:6c:3d:53:c3:71:68:
e5:b7:40:57:c8:7d:e5:75:30:d9:92:df:44:ff:43:78:88:4e:
96:5e:47:f8:35:98:8f:b6:0f:a4:36:ad:ff:86:e4:bb:75:62:
ed:1e:bc:43:3c:44:72:f9:61:bd:08:9a:67:02:da:b2:27:69:
74:de:24:13:66:fe:b8:e6:ee:10:18:09:d5:cd:ad:fc:e6:e6:
a4:ca:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:56 2026 by rpki-client