Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: xZbZYlqwkMqU+i+t5T28cS+dLMROyP0oTp0n7u4OiCg=
Subject key identifier: 53:0E:C8:BE:99:6A:EE:0E:6B:E5:30:F8:55:D0:4C:B6:F2:3D:4C:7D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 245B80A0A67C778F49C21942238765FC7C37A47B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS13335.roa
Signing time: Tue 01 Sep 2026 16:49:31 +0000
ROA not before: Tue 01 Sep 2026 16:44:31 +0000
ROA not after: Tue 31 Aug 2027 16:49:31 +0000
asID: 13335
IP address blocks: 141.11.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5b:80:a0:a6:7c:77:8f:49:c2:19:42:23:87:65:fc:7c:37:a4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 1 16:44:31 2026 GMT
Not After : Aug 31 16:49:31 2027 GMT
Subject: CN=530EC8BE996AEE0E6BE530F855D04CB6F23D4C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:b7:e8:f8:1f:0e:3a:4e:2b:ae:7b:40:a7:
08:05:fe:f9:6b:97:b0:57:5e:07:cb:70:78:79:61:
72:78:75:a6:9b:a0:e6:3e:c9:91:8b:c1:52:c8:34:
80:ae:d3:56:b5:c4:99:32:c0:1a:9e:75:63:d4:fc:
30:dd:fb:79:45:6f:b2:17:3a:9d:5b:94:78:48:00:
4a:e5:4e:f5:01:4c:4c:15:52:7b:bc:11:6e:a7:7c:
db:cc:df:1e:49:4a:9c:a2:bd:f2:23:36:ee:c0:5f:
34:97:69:71:21:71:ae:9c:d9:7e:b2:30:2b:74:d0:
79:9e:5b:bc:af:34:07:36:e6:82:0c:26:85:bf:11:
3f:e4:76:7d:89:9e:09:19:4e:7d:73:06:d0:ea:15:
e6:7c:45:75:58:c9:c5:58:42:8f:63:e2:36:fa:c1:
72:01:2d:9b:ac:db:35:91:23:56:4d:b8:f6:cf:de:
3b:b9:7e:92:45:91:36:ed:7b:76:1f:aa:b0:85:be:
4f:f1:70:01:08:88:4d:c7:32:9a:15:d2:47:63:94:
bc:c9:e9:c8:5c:ea:f0:5b:8f:de:92:7b:fc:56:fc:
56:6b:65:b5:7c:e7:b9:81:5f:84:13:11:38:bb:d1:
4c:fc:78:69:41:bc:af:4b:42:b5:aa:13:18:d8:de:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:C8:BE:99:6A:EE:0E:6B:E5:30:F8:55:D0:4C:B6:F2:3D:4C:7D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9c:a2:53:dd:b5:41:c1:76:c3:4f:7d:35:59:f2:75:09:10:
64:dc:63:dd:58:55:6b:9c:4d:ad:da:7d:8f:da:d2:12:16:59:
9c:a3:9f:e5:ec:2d:99:87:6f:73:30:d4:bf:0e:14:65:26:24:
96:10:f2:70:f3:10:4b:b8:3f:31:d5:9f:24:d4:e8:01:5c:58:
3f:1c:a6:8b:6f:c2:f8:8a:94:1d:5b:09:88:a5:2f:42:57:4d:
05:99:1b:f8:7d:ac:38:7e:00:6a:7b:9d:03:dd:fa:dc:26:a5:
d9:ef:71:4e:d5:46:22:05:e9:2b:43:fe:5f:ed:e4:06:dc:7e:
75:4b:17:a2:84:da:7c:22:05:e4:1e:fd:ea:0b:e4:88:7b:0e:
4f:41:11:de:98:8c:8f:b8:ea:ca:5c:83:ad:98:7c:05:58:3b:
a9:0d:ed:e3:81:60:84:e1:1a:32:f0:4e:ab:6a:c8:99:0d:8a:
a2:93:94:a6:f4:69:1c:59:77:e5:f8:97:66:09:bb:a1:df:8e:
cd:07:8f:ab:b4:4b:df:ad:f4:06:49:09:af:ca:62:56:35:be:
69:d7:d1:b2:31:c2:5b:45:4d:dd:c3:91:02:64:91:f8:b7:48:
e8:e9:9b:3c:6a:6b:88:f4:48:95:8f:2c:37:0e:e1:43:fd:84:
ae:f3:96:cd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUJFuAoKZ8d49JwhlCI4dl/Hw3pHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA5MDExNjQ0MzFaFw0yNzA4MzExNjQ5MzFaMDMxMTAvBgNV
BAMTKDUzMEVDOEJFOTk2QUVFMEU2QkU1MzBGODU1RDA0Q0I2RjIzRDRDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbFbfo+B8OOk4rrntApwgF/vlr
l7BXXgfLcHh5YXJ4daaboOY+yZGLwVLINICu01a1xJkywBqedWPU/DDd+3lFb7IX
Op1blHhIAErlTvUBTEwVUnu8EW6nfNvM3x5JSpyivfIjNu7AXzSXaXEhca6c2X6y
MCt00HmeW7yvNAc25oIMJoW/ET/kdn2JngkZTn1zBtDqFeZ8RXVYycVYQo9j4jb6
wXIBLZus2zWRI1ZNuPbP3ju5fpJFkTbte3YfqrCFvk/xcAEIiE3HMpoV0kdjlLzJ
6chc6vBbj96Se/xW/FZrZbV857mBX4QTETi70Uz8eGlBvK9LQrWqExjY3qJFAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUUw7Ivplq7g5r5TD4VdBMtvI9TH0wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC0cw
DQYJKoZIhvcNAQELBQADggEBAC6colPdtUHBdsNPfTVZ8nUJEGTcY91YVWucTa3a
fY/a0hIWWZyjn+XsLZmHb3Mw1L8OFGUmJJYQ8nDzEEu4PzHVnyTU6AFcWD8cpotv
wviKlB1bCYilL0JXTQWZG/h9rDh+AGp7nQPd+twmpdnvcU7VRiIF6StD/l/t5Abc
fnVLF6KE2nwiBeQe/eoL5Ih7Dk9BEd6YjI+46spcg62YfAVYO6kN7eOBYIThGjLw
TqtqyJkNiqKTlKb0aRxZd+X4l2YJu6Hfjs0Hj6u0S9+t9AZJCa/KYlY1vmnX0bIx
wltFTd3DkQJkkfi3SOjpmzxqa4j0SJWPLDcO4UP9hK7zls0=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:56:08 2026 by rpki-client