Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13347.roa
File: AS13347.roa (raw, json)
Hash identifier: OOauivfd7WI5CQ0YSuGXVsdGBD7nUadYmUZ6yXUpczw=
Subject key identifier: 7C:13:89:5D:32:5F:80:EF:91:A2:91:3F:C7:89:24:8F:7F:34:F7:7D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6348761DC3BB50798F93FC488992D765934CF58F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13347.roa
Signing time: Fri 10 Jul 2026 20:23:33 +0000
ROA not before: Fri 10 Jul 2026 20:18:33 +0000
ROA not after: Fri 09 Jul 2027 20:23:33 +0000
asID: 13347
IP address blocks: 84.75.4.0/22 maxlen: 24
84.75.28.0/22 maxlen: 24
84.75.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:48:76:1d:c3:bb:50:79:8f:93:fc:48:89:92:d7:65:93:4c:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 10 20:18:33 2026 GMT
Not After : Jul 9 20:23:33 2027 GMT
Subject: CN=7C13895D325F80EF91A2913FC789248F7F34F77D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:68:2a:71:c1:b4:5b:4b:fe:19:89:f7:57:
8b:1d:70:16:aa:ea:f5:c6:a0:0c:ab:cc:51:f3:34:
8c:8e:f9:de:5f:c6:de:22:33:d7:e1:8f:e5:12:55:
e4:c6:30:7c:3b:79:2f:07:04:a0:41:94:a2:37:03:
75:e6:98:a0:42:cf:b6:f6:62:cb:75:69:c1:7e:eb:
f5:57:47:e1:6b:dc:5a:a4:2f:82:d4:8d:30:cf:a9:
6d:4b:3a:70:09:96:df:3e:74:26:93:97:04:da:a1:
c0:9f:74:31:99:83:16:3a:3b:54:02:1b:10:48:cc:
d6:99:f8:dc:f4:37:ca:48:f5:33:36:a7:53:8f:1d:
e5:05:2f:1f:28:7c:9a:60:77:04:ac:31:f4:12:45:
eb:74:25:ef:fe:ed:ea:e0:f9:97:5d:02:ac:cf:3d:
95:05:6b:9d:3a:05:5b:9a:d5:f5:fc:f7:6e:6d:39:
96:14:76:8f:ad:c4:2f:91:3c:94:ff:fb:b8:0e:93:
15:26:6d:a6:51:41:66:87:22:52:4d:d2:91:2f:44:
19:45:1a:40:0d:b9:22:ad:1e:9e:ad:6d:a0:10:ac:
05:6f:d6:e1:5b:a9:87:32:36:2a:01:0b:96:34:1d:
38:0d:b4:38:40:26:a2:ad:c2:aa:9c:52:60:70:87:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:89:5D:32:5F:80:EF:91:A2:91:3F:C7:89:24:8F:7F:34:F7:7D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.75.4.0/22
84.75.28.0/22
84.75.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:9d:a4:6d:b0:33:34:f4:69:42:ba:bd:74:df:25:7c:74:84:
36:f8:db:d3:20:2e:98:36:e3:78:e5:85:a1:6e:1b:ea:05:e5:
c0:75:a2:ba:ae:16:4d:2a:8e:38:42:6c:ae:eb:f3:74:ce:d2:
28:26:4c:80:65:57:ae:77:6a:19:9b:bf:97:92:4a:2f:c6:c3:
ab:e8:ec:11:7d:d7:52:55:06:d8:71:c2:52:45:65:19:fe:04:
e9:ed:50:5d:bc:b0:61:bc:2d:86:36:cb:06:db:ee:80:56:e8:
b6:f9:bd:5b:dd:4c:5d:2b:da:b1:67:bd:57:c3:25:a2:82:c0:
c5:ce:bd:63:df:ac:2a:8c:69:91:18:21:75:48:80:59:31:cc:
7a:fd:bc:28:23:75:a8:60:1f:de:c3:06:52:c6:07:97:c1:cc:
5f:0e:ff:97:8e:87:e2:5a:22:64:a7:fd:72:11:8f:12:d6:9b:
3c:da:8f:8e:5a:be:b4:12:f8:36:eb:b0:5e:72:2a:3c:f8:01:
96:59:84:c3:40:e9:8d:df:65:97:9b:ee:c4:35:d4:19:d8:a3:
49:e1:35:3a:42:91:76:fa:78:29:f1:d7:66:07:d5:b7:3b:66:
68:2b:4d:73:81:f9:de:b3:c5:54:ac:d0:26:eb:d6:49:92:73:
e6:de:73:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:04:56 2026 by rpki-client