Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: csTpKmR2iQESMOSX2xcwPKGpWJc7o4xKHuU0Zb4N9Pg=
Subject key identifier: BE:BA:DD:16:A0:C2:18:D4:9F:E0:F2:D6:84:E6:EE:96:5B:B4:FC:C6
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5F99EC07749C5EBD7EF206FE65CAAA03775AF217
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS13537.roa
Signing time: Fri 15 May 2026 01:42:57 +0000
ROA not before: Fri 15 May 2026 01:37:57 +0000
ROA not after: Fri 14 May 2027 01:42:57 +0000
asID: 13537
IP address blocks: 141.11.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:99:ec:07:74:9c:5e:bd:7e:f2:06:fe:65:ca:aa:03:77:5a:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 15 01:37:57 2026 GMT
Not After : May 14 01:42:57 2027 GMT
Subject: CN=BEBADD16A0C218D49FE0F2D684E6EE965BB4FCC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:9e:d9:83:cd:92:93:b3:d1:f9:19:28:76:
82:66:c5:c8:d6:5f:12:f4:8b:c3:21:57:f5:19:c6:
72:d7:f1:82:34:d1:d8:ee:11:ef:d7:1a:33:7b:a1:
44:73:d5:e9:1f:c7:bc:c0:c4:9d:58:43:e0:ff:29:
8a:7c:c1:89:c3:d7:10:bb:11:12:f1:f8:f9:fe:65:
37:74:64:eb:1d:88:13:88:01:d7:c9:22:95:c2:d2:
68:cf:52:55:8f:d8:27:35:60:9c:41:7b:87:e7:c8:
34:16:47:4c:10:f9:28:04:61:75:8b:f3:85:53:6d:
9d:61:89:7c:da:30:a1:03:20:3e:13:3a:6c:f4:c2:
b2:aa:40:7a:58:00:b2:55:31:32:04:f5:7b:8c:59:
da:2a:0c:c2:6c:35:74:4c:ab:8c:e2:79:c0:15:cb:
d2:12:23:bd:7a:57:bc:a5:d4:17:ab:4a:9a:00:61:
dc:1c:95:b5:7f:d4:cb:ce:f8:85:b1:be:d5:cd:04:
41:00:ab:87:ac:96:1a:24:e4:08:ad:ba:5d:00:30:
c8:62:d0:af:ee:4c:6a:ec:12:1a:40:01:43:cb:1b:
69:ed:a3:d2:94:cb:ee:da:24:cf:f7:d2:f0:09:66:
df:c1:27:8c:2e:03:a1:d8:c6:a8:9f:af:df:d2:5f:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:DD:16:A0:C2:18:D4:9F:E0:F2:D6:84:E6:EE:96:5B:B4:FC:C6
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.57.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:60:f0:29:b9:ac:57:0e:64:56:ec:8c:8c:04:fe:97:4b:6d:
b2:b6:9c:c5:4e:50:77:ca:b8:7f:26:82:24:da:67:6e:bc:db:
96:e3:50:41:8f:30:67:6f:49:67:61:2a:e1:14:6f:03:17:2c:
08:b5:83:e9:51:18:94:19:1d:36:4e:6f:d7:64:11:d9:a9:a3:
97:8a:85:e7:5c:58:54:f9:87:d4:48:4a:6d:3b:8a:a1:95:85:
9b:e1:e0:34:07:c4:c5:d4:2c:1e:9b:9e:ef:94:62:b1:e5:b4:
a7:bc:c4:03:05:7a:80:e5:ef:cf:4a:e0:43:71:fb:ef:00:20:
9f:1e:dc:8f:50:14:63:c2:f4:e2:80:be:72:a8:b3:2f:d0:7b:
69:42:54:13:07:0f:a2:a7:d1:35:67:26:66:51:9a:08:bf:96:
ab:8a:14:a6:32:8a:3f:d6:c5:db:ee:25:a4:37:5f:cf:c2:d5:
aa:83:ca:f2:2e:d1:7b:6b:70:f7:c9:c7:3b:41:ff:3b:90:0c:
35:74:de:34:85:49:f0:af:e9:21:09:d9:44:05:10:ca:6c:4d:
3f:7a:4a:0b:96:53:b8:e5:ec:15:56:0c:23:f2:37:49:5b:fa:
96:a0:64:8b:16:0e:9a:a9:7d:4b:02:ea:23:0d:d6:26:9e:e8:
13:2c:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:31 2026 by rpki-client