Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: xbB3YM9Xh2MI/9qtMBblR6sKbVyH73q7TkJKE4ZU8F8=
Subject key identifier: 74:06:BF:97:B9:4F:5E:A0:EB:B2:57:5F:5B:9B:69:23:B5:EE:B0:F0
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 2E3092380F6250552DEA3AEC9282276AD1E78264
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS13335.roa
Signing time: Tue 07 Oct 2025 19:07:45 +0000
ROA not before: Tue 07 Oct 2025 19:02:45 +0000
ROA not after: Tue 06 Oct 2026 19:07:45 +0000
asID: 13335
IP address blocks: 85.235.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:30:92:38:0f:62:50:55:2d:ea:3a:ec:92:82:27:6a:d1:e7:82:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Oct 7 19:02:45 2025 GMT
Not After : Oct 6 19:07:45 2026 GMT
Subject: CN=7406BF97B94F5EA0EBB2575F5B9B6923B5EEB0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:d7:2c:49:13:c4:e0:92:3f:01:80:2f:8f:
ab:30:85:19:a9:d5:0c:dd:12:70:02:67:3f:c8:f4:
ec:22:7d:cc:0e:d7:b2:d7:f2:7f:de:0d:0a:0f:94:
f9:5b:72:ff:24:c5:b0:75:e8:9e:2f:60:93:76:77:
70:60:6c:ae:bf:67:0c:31:45:9b:c9:9a:3b:9f:fb:
13:e7:2c:3c:90:47:fb:72:37:4d:2a:77:7b:8e:e1:
d3:44:cc:2f:c9:ee:c5:5e:fc:a0:5b:f4:52:8b:1e:
2f:99:3e:f7:ab:1c:6e:9a:0d:5c:b3:37:06:eb:3d:
d0:25:05:dc:53:7e:5e:5b:9f:58:9c:26:00:14:ea:
89:a3:e6:f1:b3:4c:7b:1e:51:b1:54:94:b7:27:98:
fd:b4:19:35:1d:84:91:1e:f5:df:75:1d:6d:79:da:
23:22:35:62:eb:37:17:9a:e1:fd:13:f8:a3:ea:4b:
6b:18:fd:4f:b6:c0:08:a7:88:77:3a:ca:f9:52:94:
80:65:02:8c:92:e6:21:44:6a:b0:61:22:c0:6a:c0:
84:13:1b:77:e9:89:3d:89:4b:68:79:40:2d:52:c8:
83:1e:09:ab:40:08:f5:11:5a:7d:3f:50:83:44:1d:
69:53:7b:eb:8d:aa:09:29:14:a1:ba:d9:2c:f1:9b:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:BF:97:B9:4F:5E:A0:EB:B2:57:5F:5B:9B:69:23:B5:EE:B0:F0
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fd:56:0f:44:81:1a:aa:ea:30:1a:5e:4a:09:e3:b2:b8:99:
fb:a3:c0:ae:2a:ab:be:cf:f1:6f:90:83:5f:64:4e:50:86:69:
c2:31:53:01:d0:d8:68:20:f1:c9:d2:bb:67:6c:ec:0a:46:3c:
19:21:c5:f9:9c:73:2d:ba:3e:6b:0f:fc:db:26:18:c8:d2:d3:
76:12:45:30:ef:f4:f3:46:07:9e:a9:7b:e7:b4:ec:86:1c:86:
9f:28:72:e4:62:00:c9:b5:f4:dc:82:c7:ef:d3:68:de:79:0e:
22:be:a1:12:8b:e0:e8:1c:f4:5b:42:b5:b0:24:d0:e4:41:f4:
35:40:7b:25:21:dd:cf:bb:55:de:ec:7b:7d:84:75:82:f3:1e:
63:83:2b:38:db:e9:97:f5:b1:17:f9:db:6d:6d:79:b6:5e:0b:
47:8d:2b:2c:d5:64:2a:ea:3b:e7:69:22:cb:61:09:a5:33:38:
c8:5b:19:0c:77:e4:51:99:43:24:05:b2:51:5d:79:98:73:07:
e0:d0:5d:52:8c:28:75:25:84:31:d2:fc:88:2c:b3:99:25:e3:
54:23:f2:2d:32:6a:f4:6a:b0:69:ac:91:83:67:3a:98:62:30:
58:1f:47:f5:ca:3e:d5:00:6c:a5:05:b1:78:41:cf:ae:ef:23:
74:d8:c0:cb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULjCSOA9iUFUt6jrskoInatHngmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTEwMDcxOTAyNDVaFw0yNjEwMDYxOTA3NDVaMDMxMTAvBgNV
BAMTKDc0MDZCRjk3Qjk0RjVFQTBFQkIyNTc1RjVCOUI2OTIzQjVFRUIwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgudcsSRPE4JI/AYAvj6swhRmp
1QzdEnACZz/I9OwifcwO17LX8n/eDQoPlPlbcv8kxbB16J4vYJN2d3BgbK6/Zwwx
RZvJmjuf+xPnLDyQR/tyN00qd3uO4dNEzC/J7sVe/KBb9FKLHi+ZPverHG6aDVyz
NwbrPdAlBdxTfl5bn1icJgAU6omj5vGzTHseUbFUlLcnmP20GTUdhJEe9d91HW15
2iMiNWLrNxea4f0T+KPqS2sY/U+2wAiniHc6yvlSlIBlAoyS5iFEarBhIsBqwIQT
G3fpiT2JS2h5QC1SyIMeCatACPURWn0/UINEHWlTe+uNqgkpFKG62Szxm9Y1AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUdAa/l7lPXqDrsldfW5tpI7XusPAwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABV60kw
DQYJKoZIhvcNAQELBQADggEBAFz9Vg9EgRqq6jAaXkoJ47K4mfujwK4qq77P8W+Q
g19kTlCGacIxUwHQ2Ggg8cnSu2ds7ApGPBkhxfmccy26PmsP/NsmGMjS03YSRTDv
9PNGB56pe+e07IYchp8ocuRiAMm19NyCx+/TaN55DiK+oRKL4Ogc9FtCtbAk0ORB
9DVAeyUh3c+7Vd7se32EdYLzHmODKzjb6Zf1sRf5221tebZeC0eNKyzVZCrqO+dp
IsthCaUzOMhbGQx35FGZQyQFslFdeZhzB+DQXVKMKHUlhDHS/Igss5kl41Qj8i0y
avRqsGmskYNnOphiMFgfR/XKPtUAbKUFsXhBz67vI3TYwMs=
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:03:01 2025 by rpki-client