Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          16ZqCnz1sI3OsFVpP/gq6Gxgh0TBqxqqYhkSAIJ1lpc=
Subject key identifier:   45:DE:A2:D0:92:E9:50:94:B7:85:4D:29:AD:75:44:BF:11:F5:82:A1
Certificate issuer:       /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial:       46773239E91E68C71542DAB898F166DBEDF54C3D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
Signing time:             Wed 15 Jul 2026 14:57:35 +0000
ROA not before:           Wed 15 Jul 2026 14:52:35 +0000
ROA not after:            Wed 14 Jul 2027 14:57:35 +0000
asID:                     13335
IP address blocks:        51.194.144.0/22 maxlen: 22
                          51.241.128.0/23 maxlen: 23
                          188.220.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 13:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:77:32:39:e9:1e:68:c7:15:42:da:b8:98:f1:66:db:ed:f5:4c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
        Validity
            Not Before: Jul 15 14:52:35 2026 GMT
            Not After : Jul 14 14:57:35 2027 GMT
        Subject: CN=45DEA2D092E95094B7854D29AD7544BF11F582A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:2c:7b:e1:fb:54:fc:f8:da:5c:6d:1f:25:
                    99:bd:e4:91:60:52:ca:0e:e0:b3:18:19:53:b8:6a:
                    17:4d:fb:d2:12:cb:99:2d:0b:90:a0:58:f6:11:3a:
                    c6:0d:53:85:86:f9:3d:8f:4f:51:a7:f8:d7:a1:71:
                    26:27:e7:3a:07:f3:69:2c:67:dc:34:7f:a8:2c:d3:
                    c6:a0:25:d0:32:96:e9:d7:18:c3:0c:5d:6f:dd:86:
                    63:c4:e5:38:fa:97:9b:13:b0:03:3e:07:2d:90:09:
                    b5:c1:57:14:9f:df:2b:f4:10:33:a4:73:06:1f:00:
                    27:c0:30:1d:4f:cf:6d:4f:b9:b2:cd:83:ad:01:e3:
                    18:82:f8:9f:30:a0:eb:f9:7b:b5:ff:8a:80:65:9d:
                    2c:be:1d:59:92:b2:49:30:13:df:c2:10:31:00:13:
                    0b:9f:00:76:26:06:c6:42:fb:2b:60:df:e4:9b:01:
                    87:49:a7:1a:24:36:17:b2:ca:b3:49:28:ea:f0:11:
                    bb:ae:26:ea:44:1e:77:6d:31:71:aa:bb:0c:f3:12:
                    d5:85:4e:59:0c:d8:f0:46:44:15:1f:2b:e9:dd:a2:
                    87:2a:6a:cb:e9:d2:aa:1a:5c:e3:0b:63:a3:0c:5e:
                    ba:26:df:55:04:7c:12:6c:ed:15:48:32:bd:60:74:
                    1f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DE:A2:D0:92:E9:50:94:B7:85:4D:29:AD:75:44:BF:11:F5:82:A1
            X509v3 Authority Key Identifier:
                keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.194.144.0/22
                  51.241.128.0/23
                  188.220.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:3a:38:2b:96:b9:b0:2b:fd:bd:0b:77:d7:11:ce:13:0e:
         ff:87:31:01:59:70:e1:df:ea:39:39:c7:be:4a:8c:37:74:81:
         f1:13:47:d9:06:a4:e5:a7:32:e3:19:40:b8:5b:5c:35:b5:b1:
         c6:72:c4:bb:a3:78:6b:c9:e3:df:83:e4:39:2c:6b:5a:a3:23:
         f3:14:ce:72:da:2a:83:4b:90:56:36:0c:4e:f6:c1:89:08:6b:
         1c:00:75:59:51:10:10:ee:89:b8:be:d5:fc:53:7a:e8:1f:76:
         42:a2:3f:2b:b8:f7:58:cd:33:40:79:32:7a:02:f1:50:a5:0c:
         b5:a1:b3:d3:4a:b0:c7:c4:8e:81:06:da:b6:75:a6:36:df:bf:
         da:99:27:04:3a:74:a6:d1:84:00:88:b1:a0:eb:e5:c2:bd:b6:
         6b:1f:75:09:2f:08:35:1c:0d:eb:26:51:60:44:35:44:04:ef:
         e2:a6:51:75:c2:3e:88:df:f7:82:a9:dc:c1:1c:4c:df:e1:37:
         fb:0d:f0:dc:05:c2:8a:0c:df:fb:70:27:af:ce:21:ca:a7:72:
         26:81:02:19:5f:d9:7f:1b:bd:c0:76:cb:18:8c:b0:94:cc:ec:
         de:bf:6f:77:4c:d5:6f:78:12:81:2c:56:ff:15:4a:c3:be:ec:
         8e:34:53:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:43 2026 by rpki-client