Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13847.roa
File: AS13847.roa (raw, json)
Hash identifier: 0LB8ZHHVMvUoNDFXonOI6AUfIavAhJ51QT9kFPrn4Mg=
Subject key identifier: D3:4C:4E:D2:48:01:65:B8:1E:F8:CC:3D:1D:8F:02:B7:C4:32:5F:66
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7B3FBFABB5084050A3F67A6B95777207F2ABC22B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13847.roa
Signing time: Sun 02 Aug 2026 12:49:16 +0000
ROA not before: Sun 02 Aug 2026 12:44:16 +0000
ROA not after: Sun 01 Aug 2027 12:49:16 +0000
asID: 13847
IP address blocks: 2a13:9500:d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3f:bf:ab:b5:08:40:50:a3:f6:7a:6b:95:77:72:07:f2:ab:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 2 12:44:16 2026 GMT
Not After : Aug 1 12:49:16 2027 GMT
Subject: CN=D34C4ED2480165B81EF8CC3D1D8F02B7C4325F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:28:e4:de:02:a5:2b:30:19:b4:ab:9c:90:
d3:d6:d3:48:c5:34:a7:02:6b:c6:8a:86:08:f6:93:
cf:5c:4e:96:89:c0:bb:c6:17:ff:fe:dc:82:06:23:
0f:ee:ff:09:09:48:ec:b9:91:b7:00:af:c1:34:71:
d1:90:ba:7d:85:19:66:c9:91:fa:3c:ac:c4:e0:05:
6e:75:77:9a:de:54:82:4b:ad:b6:11:f9:29:b5:23:
34:8e:40:7b:4e:36:21:b9:ab:f8:d0:d3:ff:78:14:
91:56:c5:0d:f7:53:c3:30:68:94:36:4a:b9:4c:09:
37:a2:71:68:69:a3:7f:1d:da:0d:18:32:82:f8:03:
e7:3a:c3:9f:96:21:4c:2f:c7:34:df:5c:17:09:fe:
e9:da:f3:67:33:4f:7b:f5:65:8a:38:18:0d:3a:ad:
2c:72:ce:b4:ad:d0:af:c8:b7:1e:ac:17:41:6f:c6:
c7:b0:0e:e8:9a:a6:be:b9:94:73:8f:e6:0e:d4:31:
5c:9c:f3:15:7b:43:8c:2e:be:ed:14:6c:7d:8b:ac:
f4:1c:aa:26:16:66:58:c5:56:98:4e:60:d3:67:a7:
cf:20:68:d1:24:6e:93:d4:47:24:64:93:2d:55:a3:
6e:a9:76:f2:e2:99:0d:1f:93:06:fd:83:0c:6c:a7:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:4E:D2:48:01:65:B8:1E:F8:CC:3D:1D:8F:02:B7:C4:32:5F:66
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13847.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d2::/48
Signature Algorithm: sha256WithRSAEncryption
1b:fa:01:0d:19:d0:ba:f4:57:53:51:81:fb:e7:04:26:fb:25:
3e:b8:e3:01:6b:ff:36:cd:71:b9:04:eb:f3:1f:49:38:47:e6:
81:4a:39:64:d2:38:ff:57:32:98:5a:9e:41:f8:10:68:9c:fa:
d4:95:60:33:91:9d:c9:c2:78:c2:2b:91:3f:37:5b:88:58:6e:
60:a1:61:2a:c8:4c:1a:55:9d:c5:99:fc:0b:b8:7b:ba:47:a9:
41:43:f6:d9:5f:de:b4:54:dc:de:8c:13:93:ef:f0:43:b8:7a:
b3:4c:c1:e9:a5:69:81:d6:91:8a:b2:7a:49:8c:2f:0c:60:c0:
fc:a3:6b:93:3f:04:57:f8:1e:d9:ce:ea:bf:e0:36:8e:1f:9f:
5f:dc:74:22:a8:1a:67:b7:d8:35:27:d2:d6:8b:71:85:df:f5:
0a:c3:08:3f:04:be:ff:e7:ea:94:60:f6:6d:2a:2c:52:3b:6c:
89:ba:3d:fe:6f:5b:c9:1c:bc:56:e1:a0:26:76:7f:2f:18:ba:
e9:78:70:e8:2f:fe:a3:5c:5b:57:c2:9a:75:c7:2f:d4:86:c1:
85:92:e0:ad:33:bb:6f:dc:42:d1:99:39:6e:cb:be:9b:f8:cb:
19:73:0f:ec:d6:d1:0f:03:63:ad:84:1a:17:00:d0:04:81:b3:
4c:3f:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:17:12 2026 by rpki-client