Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13347.roa
File: AS13347.roa (raw, json)
Hash identifier: VaTGEXBqD1NFLwMU7MA1D8tMQnu4OnS+SKD4aRRXOS4=
Subject key identifier: BD:ED:BA:32:9F:B5:7D:7C:79:DB:8A:3B:CE:1A:D0:CF:D6:37:77:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 385A7917EA289E5FF2CE0BDBA20700233C614497
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13347.roa
Signing time: Fri 10 Jul 2026 20:23:31 +0000
ROA not before: Fri 10 Jul 2026 20:18:31 +0000
ROA not after: Fri 09 Jul 2027 20:23:31 +0000
asID: 13347
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5a:79:17:ea:28:9e:5f:f2:ce:0b:db:a2:07:00:23:3c:61:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jul 10 20:18:31 2026 GMT
Not After : Jul 9 20:23:31 2027 GMT
Subject: CN=BDEDBA329FB57D7C79DB8A3BCE1AD0CFD6377749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:8d:28:78:3d:e0:a7:70:d9:08:ab:63:bd:
97:5a:0e:47:3a:2c:e1:96:ba:50:94:af:73:aa:ca:
d5:a9:39:4f:56:f0:dd:c8:fd:d7:6c:30:33:c9:e5:
1e:63:5d:bd:93:4d:db:8b:0e:fd:52:70:05:f9:8d:
06:8b:9c:16:8a:22:00:0d:7d:ca:40:f3:4b:21:69:
28:06:89:74:16:6d:08:39:33:9e:c1:a0:d1:f6:dd:
55:41:ac:53:0e:e3:ba:00:7d:12:6f:a1:cd:af:65:
ec:12:9d:65:17:56:ef:36:7c:67:ed:23:68:67:0d:
4a:40:af:21:9b:d0:14:a0:9b:b3:98:b0:68:a0:e7:
73:54:bf:05:16:02:de:7f:5a:db:5a:40:a5:89:07:
11:f5:54:f7:bd:e5:f7:bd:9c:27:76:b2:bc:49:6a:
ad:50:3e:1d:34:dd:47:0c:60:91:04:42:6c:7f:d1:
db:88:13:f4:f6:a5:47:05:c6:76:0c:e9:25:70:fb:
15:00:dd:f5:10:8d:7a:ee:da:36:35:a2:b1:75:07:
b3:cb:2c:7d:ba:7c:08:90:7f:2d:aa:d4:7d:e2:af:
73:c0:b3:c4:1a:dd:cf:2f:22:56:a4:60:0b:e5:0e:
ac:02:ce:03:b9:8d:d4:92:92:a5:a7:69:7e:bd:9d:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:ED:BA:32:9F:B5:7D:7C:79:DB:8A:3B:CE:1A:D0:CF:D6:37:77:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
Signature Algorithm: sha256WithRSAEncryption
16:4b:18:6c:eb:e0:d1:9b:ec:fd:5a:ae:bf:e6:66:30:91:83:
77:57:92:f1:e6:da:9f:a2:ac:7d:fb:2e:43:0c:06:05:aa:50:
a9:78:fe:67:19:18:b5:fc:ad:60:6a:24:11:0f:36:95:d3:4a:
ff:7f:f5:68:f5:32:7a:de:93:22:86:ad:61:8c:07:eb:b1:f0:
44:74:97:fe:8c:75:17:a0:ca:a5:a2:dc:f9:12:5c:26:72:de:
4a:62:10:86:cf:bd:75:0d:46:63:c6:20:b9:4c:7f:25:d2:1e:
b8:b6:a9:7d:1c:15:3f:58:2a:11:0f:68:8a:41:d8:c1:da:7e:
e1:d7:58:cb:f3:04:a6:6e:52:a4:92:46:1f:81:ce:59:e1:0d:
34:48:91:ff:de:4f:05:c6:e4:28:fa:09:ec:2a:14:c5:fb:8a:
a7:db:ef:de:a5:4a:02:76:35:ad:89:95:96:45:48:f5:1c:fa:
dd:e9:1f:c8:04:0b:93:80:04:e1:13:1b:94:b8:a1:1b:ff:8f:
48:c9:9b:bd:19:42:23:20:78:ea:8f:11:e4:27:1d:64:f2:1b:
c6:6a:7b:16:70:6a:3d:54:15:ba:83:a4:5f:85:90:27:d9:97:
80:2d:a5:4b:9d:83:4a:50:d4:8f:7e:70:76:d1:f7:46:b3:1b:
ff:7a:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 18:42:41 2026 by rpki-client