Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: ARO1FGSz7MgXYp93oVKNDLsKJNEsrRm0vViLy2rnRsY=
Subject key identifier: 30:09:3C:F3:83:CE:73:50:7A:61:9B:91:55:83:EF:95:E8:6E:71:26
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 571B8934564E5564610E68FBAD3A6A8F6D2943BB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
Signing time: Thu 15 Oct 2026 08:08:20 +0000
ROA not before: Thu 15 Oct 2026 08:03:20 +0000
ROA not after: Thu 14 Oct 2027 08:08:20 +0000
asID: 13335
IP address blocks: 5.252.81.0/24 maxlen: 24
92.242.186.0/24 maxlen: 24
181.215.196.0/24 maxlen: 24
185.158.133.0/24 maxlen: 24
191.96.81.0/24 maxlen: 24
191.101.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1b:89:34:56:4e:55:64:61:0e:68:fb:ad:3a:6a:8f:6d:29:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 15 08:03:20 2026 GMT
Not After : Oct 14 08:08:20 2027 GMT
Subject: CN=30093CF383CE73507A619B915583EF95E86E7126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:ae:c3:f0:27:22:03:48:ac:50:cf:02:17:
8c:f7:96:c6:7d:7c:19:56:f4:bb:b8:a7:dd:6c:ed:
d0:6d:6a:ff:49:fa:f1:a0:c6:3f:c9:81:9e:87:a9:
17:a6:d5:23:72:bd:94:c4:6e:a0:bd:eb:59:b7:e4:
7a:17:75:05:ec:04:a0:1c:9c:b9:ce:95:0d:41:94:
9e:57:a1:57:a1:f8:91:cc:df:64:ce:e4:5e:74:9f:
72:4e:34:87:0e:d5:43:ce:c1:77:99:4a:1c:7d:fd:
ae:8e:02:e0:d1:2e:10:b6:94:c7:2d:d5:7a:e8:38:
eb:da:d9:33:66:bd:ee:3d:72:99:43:dc:30:13:9d:
24:6d:13:77:f0:78:8b:5a:d5:ae:8d:3b:97:d4:7c:
68:cf:a0:b6:da:90:77:86:d4:5d:d7:80:1b:1c:70:
a6:0c:0e:1a:a6:fe:f9:4c:53:96:3f:e8:4e:9e:9a:
fe:ca:4c:17:e9:20:44:91:77:0c:a7:5f:5b:85:90:
64:37:b2:1d:c0:e3:a1:c3:d7:56:eb:cd:e6:04:ca:
0c:5c:23:71:bb:80:b8:c0:d0:bc:f1:f5:e7:7f:94:
38:bb:6e:9a:2b:02:4e:74:17:68:7c:95:ca:80:27:
11:f7:65:5d:56:62:84:cf:ec:40:08:0c:87:c4:0e:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:3C:F3:83:CE:73:50:7A:61:9B:91:55:83:EF:95:E8:6E:71:26
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.81.0/24
92.242.186.0/24
181.215.196.0/24
185.158.133.0/24
191.96.81.0/24
191.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b1:6f:92:30:0d:6e:bb:d9:3f:f6:e6:15:4c:87:6b:fd:0e:
2e:5e:2b:32:3d:7f:e2:33:de:4f:cd:a0:68:d2:74:87:6d:29:
8b:0f:8f:6d:c0:33:e3:52:fb:df:c8:eb:fe:1a:7a:08:99:5a:
b9:5f:cb:7f:bb:80:48:99:cb:27:51:d2:9f:6f:f4:f6:b8:43:
56:a8:5b:2a:85:04:dc:3e:50:89:49:34:6e:9d:79:3b:85:f4:
28:70:52:cc:4c:78:d3:4c:76:ad:51:7e:29:63:1f:5f:cc:4b:
84:ad:02:fc:a9:63:9e:e4:b7:bb:5f:b1:da:b6:05:a4:48:87:
0f:2f:08:fc:a7:38:82:f5:4d:36:e4:1e:22:50:e2:5f:ad:8f:
43:0d:74:a8:a8:a5:7d:e2:73:54:b6:fb:94:4d:17:a4:b9:65:
ca:b2:b2:99:68:97:d5:5a:60:5c:06:a9:7a:8e:3b:66:3e:87:
4a:d4:e0:0b:cc:9f:49:95:a5:97:25:4b:ae:fd:e4:be:cf:67:
f6:d8:9f:05:16:7c:0f:a4:2b:25:34:79:89:90:5f:31:fd:58:
ef:90:36:10:77:af:cd:c3:9d:86:aa:fd:47:ee:23:6c:b2:2a:
42:6d:b1:28:eb:ca:09:f5:12:1b:cc:e6:67:82:6c:7f:20:c9:
70:e6:49:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:10:05 2026 by rpki-client