Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS13537.roa
File:                     AS13537.roa (raw, json)
Hash identifier:          tHlu+kznWRUl22o8nIZPvWIYvexI1xUVOKG+3EmIteA=
Subject key identifier:   93:69:74:23:AA:D7:7F:A1:4A:E2:87:CE:32:08:7A:16:36:56:BF:73
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       4837AF128297064F19FD1877C4BBB3D6DD9B78E6
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS13537.roa
Signing time:             Mon 05 Oct 2026 06:13:18 +0000
ROA not before:           Mon 05 Oct 2026 06:08:18 +0000
ROA not after:            Mon 04 Oct 2027 06:13:18 +0000
asID:                     13537
IP address blocks:        109.66.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:37:af:12:82:97:06:4f:19:fd:18:77:c4:bb:b3:d6:dd:9b:78:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Oct  5 06:08:18 2026 GMT
            Not After : Oct  4 06:13:18 2027 GMT
        Subject: CN=93697423AAD77FA14AE287CE32087A163656BF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:fc:34:c4:48:91:74:e9:cd:b8:f5:38:00:
                    01:1b:b9:34:e6:b0:a1:e2:19:b7:5f:37:04:7a:a9:
                    a5:9c:45:cd:4a:b3:fd:b0:c9:1e:14:5f:61:2f:04:
                    d7:54:24:2c:ce:8a:8e:ba:3c:9b:d5:d9:a4:77:b9:
                    a9:b2:04:cb:3a:51:cc:69:cb:b9:f0:6a:49:c3:e3:
                    64:d3:6f:6c:4d:6b:a9:b4:e6:2f:7c:da:a6:c1:e4:
                    96:c1:73:a3:47:0a:ac:b6:f6:74:0d:19:7e:89:b6:
                    7a:fb:d3:c6:c1:2e:a4:5c:1c:a9:94:a7:a8:6a:f7:
                    f5:b1:73:09:61:93:4f:9f:50:64:2b:d4:68:26:3f:
                    c1:51:62:a6:23:58:f8:63:d1:66:c9:d5:de:3c:a4:
                    2c:be:62:ec:7f:b2:ad:19:08:d8:47:19:66:a9:43:
                    d3:25:fd:7b:1b:57:a1:df:41:f5:2f:69:85:2d:d5:
                    2b:f7:d7:ff:73:13:04:ca:6b:7e:c0:83:ec:e5:67:
                    1e:11:db:d6:de:4f:3e:d9:2e:6a:b9:ba:9f:3e:41:
                    e3:0d:64:3a:82:dc:73:46:31:7c:ec:da:25:bd:30:
                    dc:05:f1:51:11:47:97:f1:10:6e:59:60:8c:c2:df:
                    89:52:f8:e7:cb:e6:a8:ef:65:f5:f4:e6:43:85:a6:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:69:74:23:AA:D7:7F:A1:4A:E2:87:CE:32:08:7A:16:36:56:BF:73
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS13537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.66.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:70:59:68:f9:9d:3f:3e:88:ef:03:75:cb:79:99:3c:d7:
         b7:3d:4d:29:ad:6f:30:20:a5:3d:bf:cf:b8:ac:b0:c7:f7:26:
         20:58:c3:69:54:21:e2:74:4d:f9:ce:8e:9c:0a:98:f3:88:b2:
         91:65:ea:6b:6c:4e:4e:10:49:eb:09:a1:7f:cc:8d:e1:f7:b6:
         99:93:16:99:6f:c8:7f:dd:03:db:43:c4:48:57:a7:50:bc:55:
         01:c7:db:7f:2a:88:cc:fc:50:ad:c4:0e:59:29:26:c1:2b:50:
         6e:62:b0:26:4a:91:b2:e5:4f:12:79:14:38:06:1c:d9:2a:bd:
         72:35:49:ad:a9:a6:46:6b:7e:37:63:e1:37:e0:66:5c:11:43:
         98:6b:61:21:cf:21:30:49:4b:01:76:9e:d4:31:85:93:92:c0:
         5e:26:21:83:6f:c1:10:a3:84:25:f4:7a:de:13:17:e9:98:f2:
         6a:97:d8:ee:0d:1f:82:63:c7:97:c2:85:c1:0e:a3:52:74:85:
         7d:8d:89:7b:b1:b0:30:71:62:24:5c:97:d5:d6:50:7d:62:78:
         fb:8e:a9:31:d0:ef:43:45:1a:ff:52:76:2e:d3:2a:05:36:2c:
         ec:2c:95:e8:ed:1f:50:9b:78:55:ae:5c:87:03:22:32:d9:2b:
         53:5f:2e:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:46:28 2026 by rpki-client