Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS13852.roa
File: AS13852.roa (raw, json)
Hash identifier: RG0ZsaFFbjLKnBZfIFMh134Um9E1bbzK1lcWa7jzx0Q=
Subject key identifier: BC:86:0E:57:43:8B:B0:65:CF:76:56:11:E4:F4:40:B7:03:3A:E2:C2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 62795CFC4A5FB8510C9821018C58D2244C64E4AC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS13852.roa
Signing time: Tue 06 Oct 2026 01:09:16 +0000
ROA not before: Tue 06 Oct 2026 01:04:16 +0000
ROA not after: Tue 05 Oct 2027 01:09:16 +0000
asID: 13852
IP address blocks: 2a0f:85c1:b10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:79:5c:fc:4a:5f:b8:51:0c:98:21:01:8c:58:d2:24:4c:64:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 6 01:04:16 2026 GMT
Not After : Oct 5 01:09:16 2027 GMT
Subject: CN=BC860E57438BB065CF765611E4F440B7033AE2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:5a:2e:9e:da:b7:42:6e:47:bd:e0:76:31:
05:7a:7d:1c:26:54:12:d0:45:3a:f5:37:e1:f2:0f:
f9:39:bb:5f:a8:c9:fb:39:52:93:4c:1a:7f:0f:4f:
07:d5:e3:f1:ce:b8:15:d3:4f:42:e3:eb:b7:d4:b9:
45:c1:e7:82:60:e8:be:50:16:fb:93:82:be:17:6f:
2e:8a:6a:44:fc:50:bd:20:aa:61:0b:75:06:20:76:
f3:72:03:e7:bb:df:4a:42:46:42:4a:06:5a:f2:8e:
e5:77:2d:46:9e:17:96:1f:5e:09:a6:35:b1:7e:82:
0f:00:db:a9:11:7d:08:6c:fa:af:7f:c0:2c:a9:cd:
61:ad:06:da:3c:01:c4:cd:6f:50:44:5a:51:8a:91:
fa:8e:a7:28:2e:b9:5e:5a:ef:3c:d0:64:9f:bc:be:
a6:68:d6:59:9e:05:d5:13:76:df:55:7a:28:da:0d:
3c:5e:c8:49:24:81:08:88:3f:11:9f:de:f8:cd:75:
29:1d:55:b1:1e:98:96:d6:a2:0f:ac:a6:73:11:df:
77:36:04:36:03:b3:2e:fd:68:19:3a:24:a2:7a:98:
a3:7d:4a:2a:69:3d:ed:06:3f:ea:34:c4:30:d7:90:
3d:ad:c8:8c:50:34:9d:fa:f7:01:0d:2e:1c:1d:cc:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:86:0E:57:43:8B:B0:65:CF:76:56:11:E4:F4:40:B7:03:3A:E2:C2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS13852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b10::/44
Signature Algorithm: sha256WithRSAEncryption
9c:33:ca:46:0e:e6:0b:61:4f:ef:29:30:73:80:2a:30:53:c1:
c2:04:d6:d7:4d:e0:60:2b:12:27:4f:11:38:7c:08:ad:f3:1c:
87:b8:29:e2:a1:20:63:b9:46:4b:51:2a:46:00:32:f7:38:46:
66:8c:c0:36:3d:38:f7:b5:45:cb:07:8f:5e:03:9d:1d:67:d4:
fa:14:4f:90:15:2f:bf:a4:b2:71:8a:08:87:51:80:fb:cb:0c:
34:68:d2:e5:4d:7c:24:08:7f:05:54:43:59:41:dc:f5:7e:ee:
17:f2:a4:16:44:46:44:7d:36:d7:32:45:76:0d:da:de:62:8d:
ef:81:9a:00:22:bc:00:3f:e9:c8:fc:42:c6:7e:d4:71:06:58:
24:dc:6d:d9:da:1a:31:10:d6:7f:23:c5:8e:5a:69:b9:1a:a3:
2d:2d:dc:fe:2f:03:51:7a:f7:47:66:e8:97:e5:b5:3d:43:f3:
2d:a5:82:66:8c:2c:fd:3d:c7:ff:3f:ba:2b:bf:5a:94:27:9e:
3d:5f:f9:c9:aa:71:ef:14:65:9d:38:89:59:76:fc:f4:82:fe:
c8:25:fd:7c:ba:06:1c:5c:01:c1:19:f9:92:6b:77:61:f1:01:
dc:99:a9:99:42:b0:bd:8e:55:19:1b:59:8b:03:67:a0:9f:38:
f4:f6:13:12
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUYnlc/EpfuFEMmCEBjFjSJExk5KwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNjEwMDYwMTA0MTZaFw0yNzEwMDUwMTA5MTZaMDMxMTAvBgNV
BAMTKEJDODYwRTU3NDM4QkIwNjVDRjc2NTYxMUU0RjQ0MEI3MDMzQUUyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo1ountq3Qm5HveB2MQV6fRwm
VBLQRTr1N+HyD/k5u1+oyfs5UpNMGn8PTwfV4/HOuBXTT0Lj67fUuUXB54Jg6L5Q
FvuTgr4Xby6KakT8UL0gqmELdQYgdvNyA+e730pCRkJKBlryjuV3LUaeF5YfXgmm
NbF+gg8A26kRfQhs+q9/wCypzWGtBto8AcTNb1BEWlGKkfqOpyguuV5a7zzQZJ+8
vqZo1lmeBdUTdt9VeijaDTxeyEkkgQiIPxGf3vjNdSkdVbEemJbWog+spnMR33c2
BDYDsy79aBk6JKJ6mKN9SippPe0GP+o0xDDXkD2tyIxQNJ369wENLhwdzMnXAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUvIYOV0OLsGXPdlYR5PRAtwM64sIwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMTM4NTIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqD4XB
CxAwDQYJKoZIhvcNAQELBQADggEBAJwzykYO5gthT+8pMHOAKjBTwcIE1tdN4GAr
EidPETh8CK3zHIe4KeKhIGO5RktRKkYAMvc4RmaMwDY9OPe1RcsHj14DnR1n1PoU
T5AVL7+ksnGKCIdRgPvLDDRo0uVNfCQIfwVUQ1lB3PV+7hfypBZERkR9NtcyRXYN
2t5ije+BmgAivAA/6cj8QsZ+1HEGWCTcbdnaGjEQ1n8jxY5aabkaoy0t3P4vA1F6
90dm6JfltT1D8y2lgmaMLP09x/8/uiu/WpQnnj1f+cmqce8UZZ04iVl2/PSC/sgl
/Xy6BhxcAcEZ+ZJrd2HxAdyZqZlCsL2OVRkbWYsDZ6CfOPT2ExI=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:42:59 2026 by rpki-client