Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: CZKdwfBEdkeezJkE3w6xMtpU+Ujs/7II8MEXGWufXrQ=
Subject key identifier: 42:74:63:3C:1A:83:BE:16:F9:59:33:43:AB:24:72:DB:D7:EA:A6:60
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0CBA06AB9185E711F87F0359B6AFB52E4220BE1F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13537.roa
Signing time: Thu 07 May 2026 08:17:34 +0000
ROA not before: Thu 07 May 2026 08:12:34 +0000
ROA not after: Thu 06 May 2027 08:17:34 +0000
asID: 13537
IP address blocks: 82.25.187.0/24 maxlen: 24
82.41.27.0/24 maxlen: 24
82.41.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ba:06:ab:91:85:e7:11:f8:7f:03:59:b6:af:b5:2e:42:20:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 7 08:12:34 2026 GMT
Not After : May 6 08:17:34 2027 GMT
Subject: CN=4274633C1A83BE16F9593343AB2472DBD7EAA660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:1d:ca:e5:2d:e7:f5:44:04:54:4f:e0:c8:
eb:fb:be:74:e6:69:d9:e6:b0:d1:c8:56:4c:d1:07:
50:93:b0:6b:53:58:5d:38:4f:a0:6b:51:4f:72:0e:
a8:3c:e4:14:ce:56:6e:18:9d:fe:fd:ed:79:33:9d:
d4:e3:2a:bf:07:55:6c:74:82:14:dd:85:e0:f5:2a:
b9:46:d1:8f:81:e0:6d:2f:99:20:9c:e1:e1:cc:21:
8d:84:92:ef:90:70:8d:c0:80:c3:43:9b:fc:ff:30:
8a:b4:c6:11:c3:2a:69:ce:92:ec:14:50:76:f6:ad:
c7:27:da:41:34:8b:10:9d:dd:98:0a:6f:e1:04:15:
87:26:1a:66:88:74:6e:43:d2:ab:89:67:54:e1:3f:
b9:7c:27:76:36:78:a8:4a:33:a1:cb:4d:97:0c:71:
25:da:5d:7b:98:f8:83:a8:2b:0e:3d:03:ea:d7:80:
67:6a:02:b9:4b:dd:6f:40:32:91:e9:f8:25:15:15:
13:fd:f5:fb:9b:d4:be:55:1b:01:a1:33:2a:92:44:
69:12:51:7d:37:1a:b4:26:e7:d6:48:32:cc:e4:95:
7a:0c:cf:15:d9:a4:e5:fd:b3:5c:24:27:c7:60:e1:
f3:72:27:8c:85:fc:04:7e:f0:5c:79:82:f1:23:c5:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:63:3C:1A:83:BE:16:F9:59:33:43:AB:24:72:DB:D7:EA:A6:60
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.187.0/24
82.41.27.0/24
82.41.135.0/24
Signature Algorithm: sha256WithRSAEncryption
30:72:26:35:4f:71:ec:36:c6:86:b7:2d:a0:1a:91:14:2f:8b:
c5:3a:27:32:71:bc:c6:88:34:23:76:e8:31:3d:96:5b:65:b6:
0c:f0:ab:ed:ab:6f:6c:a2:59:4a:c9:92:0f:b1:78:55:2c:7f:
09:bf:2d:37:67:83:d0:f1:e6:cc:d4:b1:0a:0d:00:92:dd:39:
ca:15:a3:6b:dc:48:d4:b6:14:9e:3c:3d:1c:45:0c:42:5d:1f:
df:e5:74:2c:ca:5a:5c:e4:18:6d:4a:42:9d:ee:02:1e:f7:1b:
21:cc:86:4b:43:74:91:4d:74:90:e3:dc:f1:d2:8f:3f:e1:19:
df:94:67:92:68:1e:98:25:bc:ee:71:c2:a9:e3:00:c8:6d:94:
0f:18:f4:04:c1:a7:af:20:45:b8:21:df:b8:17:ae:91:d8:6a:
33:8e:14:32:b7:f3:86:85:d2:9a:1d:21:80:2a:73:39:68:16:
22:3e:9c:7c:ab:2b:bc:48:f5:65:c9:0e:15:99:14:5f:e9:1b:
ad:c5:d6:e5:2e:11:e0:8d:17:e1:60:29:f4:74:57:df:be:c2:
7f:13:49:f2:a0:43:a8:d0:ff:68:78:82:0d:ab:ff:15:33:1c:
06:9a:9f:7c:6d:a7:c2:54:68:b3:8e:57:ca:4c:a8:79:8d:13:
7c:8e:73:1f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUDLoGq5GF5xH4fwNZtq+1LkIgvh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDcwODEyMzRaFw0yNzA1MDYwODE3MzRaMDMxMTAvBgNV
BAMTKDQyNzQ2MzNDMUE4M0JFMTZGOTU5MzM0M0FCMjQ3MkRCRDdFQUE2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVB3K5S3n9UQEVE/gyOv7vnTm
adnmsNHIVkzRB1CTsGtTWF04T6BrUU9yDqg85BTOVm4Ynf797XkzndTjKr8HVWx0
ghTdheD1KrlG0Y+B4G0vmSCc4eHMIY2Eku+QcI3AgMNDm/z/MIq0xhHDKmnOkuwU
UHb2rccn2kE0ixCd3ZgKb+EEFYcmGmaIdG5D0quJZ1ThP7l8J3Y2eKhKM6HLTZcM
cSXaXXuY+IOoKw49A+rXgGdqArlL3W9AMpHp+CUVFRP99fub1L5VGwGhMyqSRGkS
UX03GrQm59ZIMszklXoMzxXZpOX9s1wkJ8dg4fNyJ4yF/AR+8Fx5gvEjxfcfAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUQnRjPBqDvhb5WTNDqyRy29fqpmAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTM1Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABSGbsD
BABSKRsDBABSKYcwDQYJKoZIhvcNAQELBQADggEBADByJjVPcew2xoa3LaAakRQv
i8U6JzJxvMaINCN26DE9lltltgzwq+2rb2yiWUrJkg+xeFUsfwm/LTdng9Dx5szU
sQoNAJLdOcoVo2vcSNS2FJ48PRxFDEJdH9/ldCzKWlzkGG1KQp3uAh73GyHMhktD
dJFNdJDj3PHSjz/hGd+UZ5JoHpglvO5xwqnjAMhtlA8Y9ATBp68gRbgh37gXrpHY
ajOOFDK384aF0podIYAqczloFiI+nHyrK7xI9WXJDhWZFF/pG63F1uUuEeCNF+Fg
KfR0V9++wn8TSfKgQ6jQ/2h4gg2r/xUzHAaan3xtp8JUaLOOV8pMqHmNE3yOcx8=
-----END CERTIFICATE-----
Generated at Thu May 7 15:35:45 2026 by rpki-client