Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 5tobVrZxez2pxHXf2StPTBqI2oQylymVB5saZwT3+aY=
Subject key identifier: 67:D4:82:B4:63:C6:1F:34:8A:06:9D:86:22:AF:08:43:26:2B:D9:8C
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1E35571F39B0B0352D8AFD9E681F368AF02AA52F
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
Signing time: Tue 02 Jun 2026 11:55:43 +0000
ROA not before: Tue 02 Jun 2026 11:50:43 +0000
ROA not after: Tue 01 Jun 2027 11:55:43 +0000
asID: 13335
IP address blocks: 51.194.144.0/22 maxlen: 22
51.241.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:35:57:1f:39:b0:b0:35:2d:8a:fd:9e:68:1f:36:8a:f0:2a:a5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 2 11:50:43 2026 GMT
Not After : Jun 1 11:55:43 2027 GMT
Subject: CN=67D482B463C61F348A069D8622AF0843262BD98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:7f:4b:c1:1a:d2:d6:22:cd:3b:13:a5:80:
dc:4e:73:64:3a:cd:7a:dd:2a:35:24:90:55:6b:25:
30:c4:c1:fb:e0:31:0d:97:df:58:1e:fe:43:df:3d:
d1:a5:1c:d1:61:93:3e:0b:e9:c3:5f:4d:e2:6f:a3:
2b:77:4a:c4:94:87:51:9f:18:6d:ad:40:32:00:d5:
56:89:ad:50:ab:88:90:6d:b3:86:0b:3d:17:7d:1a:
21:3c:7e:88:38:42:28:d4:ea:ea:72:58:06:b4:e3:
30:70:3a:f3:7a:ba:7c:50:5c:93:92:13:4f:b8:f8:
00:08:08:61:d6:63:44:29:6b:1d:b8:e2:16:b5:09:
a0:4e:14:f9:23:ba:6d:32:6e:96:ce:81:a4:77:46:
c6:80:91:b0:41:a7:b6:24:6c:50:a2:bf:9d:62:b0:
28:ae:0d:ea:28:62:a4:64:47:8f:62:65:af:ca:a9:
08:88:0c:d6:2a:21:85:1f:c3:30:1b:0b:d9:8f:30:
96:45:53:02:d7:b2:41:e0:8e:42:91:1d:ce:f8:df:
2f:f0:a3:ae:b6:10:f6:f0:0d:7d:5a:a4:aa:ae:ec:
ad:62:dd:f8:cd:27:de:fb:78:05:c7:33:18:de:dc:
80:6c:b9:f3:9a:f7:e3:4b:ff:97:9e:64:20:da:88:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:82:B4:63:C6:1F:34:8A:06:9D:86:22:AF:08:43:26:2B:D9:8C
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.144.0/22
51.241.128.0/23
Signature Algorithm: sha256WithRSAEncryption
87:69:db:db:88:b9:29:01:09:93:74:4e:d8:14:3a:93:d7:f1:
d2:9c:16:07:33:22:b1:0e:5d:28:ad:42:11:66:98:0d:ed:9c:
04:21:a5:fc:5f:b3:bb:dd:a6:a9:50:0a:8a:6d:bd:f5:8d:ef:
41:2b:43:10:9c:a9:b7:e6:30:68:02:b6:6e:c0:f9:e1:9e:7f:
0d:93:65:29:0a:ba:cc:e1:23:56:24:ad:93:cb:0f:a4:d7:30:
30:74:9d:57:4c:18:69:28:77:98:f9:cf:4f:7d:e3:91:b6:29:
ef:92:89:03:d9:0c:3f:96:be:01:5a:89:b1:9e:cc:1c:c2:2c:
d8:81:4d:3f:a8:20:9b:b6:9c:3e:16:95:36:45:2c:2f:4b:14:
44:30:56:d3:92:7d:ee:17:a2:85:87:3b:b2:9e:aa:ac:4b:97:
61:73:f0:20:d1:c2:66:a9:fe:b9:ce:b0:a1:e9:2d:b1:30:30:
21:06:1f:e0:35:fc:be:da:27:b2:f9:ba:e5:92:f8:1b:86:e7:
95:ea:e2:d9:60:27:ae:f0:15:3f:e5:ed:f2:48:ea:c9:54:c5:
c4:4b:58:ce:2c:9d:60:d4:15:94:12:9a:59:9d:40:49:45:43:
f0:13:96:1a:65:af:3d:8e:4d:87:22:91:36:99:25:3f:36:50:
0a:df:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:14 2026 by rpki-client