Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 5YFG+vlOw/YPabR3DJO9RkDom70EqiI5p0ga2myYSN0=
Subject key identifier: 78:7E:3F:5F:66:EA:8A:5F:14:EC:B8:78:7C:AB:5D:3B:5A:B4:21:D2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1D0A3832EB899367FBBF2A26546AE4299E26BA8A
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
Signing time: Fri 28 Aug 2026 08:12:58 +0000
ROA not before: Fri 28 Aug 2026 08:07:58 +0000
ROA not after: Fri 27 Aug 2027 08:12:58 +0000
asID: 13335
IP address blocks: 5.252.81.0/24 maxlen: 24
92.242.186.0/24 maxlen: 24
109.106.3.0/24 maxlen: 24
181.215.196.0/24 maxlen: 24
185.158.133.0/24 maxlen: 24
191.96.81.0/24 maxlen: 24
191.101.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0a:38:32:eb:89:93:67:fb:bf:2a:26:54:6a:e4:29:9e:26:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 28 08:07:58 2026 GMT
Not After : Aug 27 08:12:58 2027 GMT
Subject: CN=787E3F5F66EA8A5F14ECB8787CAB5D3B5AB421D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:aa:f0:43:8e:dc:35:b9:1e:09:b3:95:44:
05:09:85:b3:3e:d6:1f:8a:59:7b:ed:0a:e8:f0:b2:
ff:b0:e9:80:1d:37:b1:c8:96:ca:77:29:41:09:bf:
08:64:e7:91:a2:4d:72:3b:dc:51:71:f7:ec:6d:aa:
47:9a:c7:62:cb:df:6c:6c:6b:8e:73:be:d0:57:f4:
fa:72:00:a7:28:c4:c7:aa:ec:55:af:a9:35:d5:d3:
4e:57:e6:10:4f:88:2a:d3:54:a5:ad:44:a1:c7:52:
5e:39:17:30:9f:08:30:da:9e:29:9a:d4:6d:d0:9d:
f9:cc:e0:27:7a:12:00:c5:b4:f5:a2:13:f8:d1:4d:
a9:8a:52:81:67:2e:91:28:cb:7d:0e:50:13:d6:8c:
85:b6:cd:d1:21:ed:09:7f:c0:e4:d3:18:97:b8:4f:
9d:82:fb:2e:36:00:81:35:62:ab:86:b9:55:d8:7c:
30:54:60:3a:d0:19:f6:61:3a:49:92:01:23:c9:e0:
ba:02:d9:db:0d:fa:43:6d:2f:68:9e:3b:a0:c0:24:
51:bb:70:52:ac:30:ac:01:59:8a:d0:2d:09:ce:30:
ae:c1:1c:10:51:be:e1:e5:c3:43:da:3a:86:4e:fc:
a7:ee:ec:01:33:f0:85:14:b7:39:4b:fc:87:4b:9b:
7f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7E:3F:5F:66:EA:8A:5F:14:EC:B8:78:7C:AB:5D:3B:5A:B4:21:D2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.81.0/24
92.242.186.0/24
109.106.3.0/24
181.215.196.0/24
185.158.133.0/24
191.96.81.0/24
191.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
94:f7:22:cd:03:c4:5b:50:72:d1:7b:85:b8:cd:d8:f8:09:a9:
68:0a:02:86:5d:8e:ad:1c:65:8e:0f:14:45:83:aa:7d:92:97:
7f:1e:37:b6:44:db:a2:59:09:95:a3:e4:2b:25:b6:64:67:8f:
0d:00:43:90:b7:cc:f5:a5:8e:41:ab:54:54:bc:72:7c:1a:5f:
bc:ba:74:37:01:bf:84:60:32:4e:3d:52:6f:62:9e:11:a0:ed:
1c:4f:f5:8b:72:80:41:05:0f:22:d3:88:dc:0f:71:c7:83:28:
d0:c2:e3:83:38:a4:13:c3:6a:d3:66:91:11:c2:f4:b9:b7:83:
85:ad:4b:30:92:37:b3:ff:a5:7e:df:bd:d6:95:12:9b:0a:5d:
bd:02:33:94:67:d7:d7:e7:a9:a5:44:ee:6e:cf:cc:88:f4:cb:
9a:42:e6:d3:4d:d1:a2:84:71:c1:f1:9e:45:34:eb:f0:6d:7d:
99:08:5b:0c:7b:9a:ab:9f:d3:60:7b:c1:cb:b9:3f:12:f0:61:
a5:d7:25:28:fd:da:7f:d0:2c:0c:35:a7:e3:e1:80:49:84:f5:
39:7d:dc:0b:1f:43:b1:5d:27:e7:51:46:1f:2e:72:1f:4d:d4:
20:9d:6f:15:59:b1:57:56:ef:a1:97:1c:71:03:e3:ce:ab:46:
db:5e:ca:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:35:57 2026 by rpki-client