Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13536.roa
File: AS13536.roa (raw, json)
Hash identifier: /VGnkG+wCg5UaEOAsKN/AA3OXh/E7vKlxBMH8w7+w6g=
Subject key identifier: 8F:1F:AA:81:81:3B:22:25:75:78:0C:21:4C:C8:CD:1F:3A:FE:19:F3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 745DA814E1B9A3E0F22E197C94AC4D2213213B86
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13536.roa
Signing time: Thu 24 Sep 2026 06:27:23 +0000
ROA not before: Thu 24 Sep 2026 06:22:23 +0000
ROA not after: Thu 23 Sep 2027 06:27:23 +0000
asID: 13536
IP address blocks: 94.116.40.0/22 maxlen: 24
94.116.44.0/22 maxlen: 24
94.116.52.0/22 maxlen: 24
94.116.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5d:a8:14:e1:b9:a3:e0:f2:2e:19:7c:94:ac:4d:22:13:21:3b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 24 06:22:23 2026 GMT
Not After : Sep 23 06:27:23 2027 GMT
Subject: CN=8F1FAA81813B222575780C214CC8CD1F3AFE19F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:cd:6c:f7:fc:2a:b1:2e:fe:bd:99:9f:20:
83:87:65:e1:83:13:43:98:23:65:a7:bc:57:7f:ab:
94:c6:db:89:88:7b:23:4c:43:1b:b9:49:8f:47:2f:
9c:92:37:c7:4a:72:6e:04:cf:b9:e8:d0:59:6f:87:
ff:d8:bf:11:d2:68:26:c3:81:86:43:0b:c6:95:73:
e0:14:1b:ea:1f:16:ab:f1:07:6d:58:33:e9:93:12:
48:e7:e6:c8:ca:18:2f:4c:7e:f7:9d:20:fa:4c:8c:
ff:6b:ca:80:07:53:55:b1:ac:08:22:2a:de:2c:40:
d7:c4:84:15:e9:ae:ec:5d:ce:27:27:ad:21:74:1d:
bb:36:86:ec:f3:77:e9:a3:71:bc:33:d1:7c:27:51:
e1:89:d2:9a:43:3d:11:7d:42:af:40:2e:db:03:e9:
35:d2:1e:37:15:04:97:45:67:9e:6a:28:ba:7d:9e:
0b:6b:34:6e:32:57:4f:ae:db:67:be:61:7f:5e:72:
e6:6f:da:ce:e9:70:b3:27:4c:83:07:97:4f:7a:4d:
41:ab:92:6b:e8:75:cc:5a:04:b6:76:65:71:58:b1:
a1:e2:91:3f:22:78:b5:f4:c9:fb:85:b2:75:53:40:
11:f4:17:15:f0:f4:8f:09:b5:a3:8e:96:13:f0:0d:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1F:AA:81:81:3B:22:25:75:78:0C:21:4C:C8:CD:1F:3A:FE:19:F3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.116.40.0/21
94.116.52.0-94.116.59.255
Signature Algorithm: sha256WithRSAEncryption
41:77:94:f0:7a:c1:ec:70:61:42:97:92:9c:0c:76:d9:a2:68:
87:b5:77:6f:93:0d:8d:b5:5a:c4:74:48:78:7d:81:87:c4:10:
d1:a2:aa:c2:c2:f5:ca:4f:ce:7e:27:29:be:ce:66:ee:c3:ca:
8a:b9:33:f6:bd:25:b5:f6:a9:71:d3:f3:39:ad:85:a1:fc:ad:
d4:82:bb:2f:4b:3c:a5:1e:bc:5f:80:24:ec:bd:3b:ad:bd:96:
d7:7e:6c:cf:34:0b:54:ac:9f:29:26:00:65:3b:29:6e:8b:3b:
dc:27:1d:68:b3:21:17:a6:d9:51:7d:34:7a:f8:8d:b1:b5:b0:
4f:71:98:e4:62:8a:cb:ac:84:97:79:bd:1d:10:fe:1a:67:20:
1f:d3:9a:d0:ed:f2:84:05:9a:96:56:eb:30:b6:72:40:7f:27:
f6:47:9b:f2:2f:7d:48:7e:63:8f:ad:2a:39:ba:7c:e3:b5:33:
d2:98:cf:b5:fe:dc:80:10:48:bc:69:10:68:f9:b9:3b:12:5c:
b4:40:34:3a:73:6e:97:27:d5:1f:99:f9:b8:73:da:4f:e3:37:
23:5d:74:0a:7d:7f:24:9a:59:8e:ed:a5:e2:1f:28:6f:63:e6:
3c:4c:b0:fc:01:5c:70:27:c2:09:1e:f0:75:2e:db:df:4e:7b:
fa:2d:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:24:33 2026 by rpki-client