Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: YDslZ7oke18viDbx+Ygyopq6MWnYQD9W6tgXdPs8HXk=
Subject key identifier: 26:FF:69:2D:13:24:EC:F3:CC:1D:82:46:C3:21:9E:88:D3:1E:67:58
Certificate issuer: /CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Certificate serial: 5BD79381CF649B46FA4B438B0323DE821EDD3F29
Authority key identifier: 39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS13335.roa
Signing time: Sun 30 Aug 2026 16:42:43 +0000
ROA not before: Sun 30 Aug 2026 16:37:43 +0000
ROA not after: Sun 29 Aug 2027 16:42:43 +0000
asID: 13335
IP address blocks: 177.28.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:d7:93:81:cf:64:9b:46:fa:4b:43:8b:03:23:de:82:1e:dd:3f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399a7bf2b90ab8cbfd24cc4f8badea7877f8e495
Validity
Not Before: Aug 30 16:37:43 2026 GMT
Not After : Aug 29 16:42:43 2027 GMT
Subject: CN=26FF692D1324ECF3CC1D8246C3219E88D31E6758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:ef:cf:a3:06:5b:92:af:8c:cc:7f:e8:53:
0f:c8:c7:f6:3e:4c:99:98:0c:29:22:2a:16:e7:ca:
80:b6:66:07:64:a8:d0:75:da:94:3e:f0:a5:48:02:
d1:11:88:6e:89:c2:0f:26:cb:e4:11:f0:5f:c3:85:
c0:73:af:44:5c:aa:4c:8f:a8:d1:00:18:be:22:bf:
cc:9c:64:ca:64:9d:fd:9b:a6:23:e9:d1:ea:05:00:
a3:da:11:bc:6c:f4:ab:26:bc:f1:77:c0:3f:cf:4d:
17:2a:45:21:98:fc:50:c3:0e:f6:cf:b2:e1:9f:80:
75:13:f2:d7:80:73:66:10:e9:1c:c1:1d:6d:3f:e2:
91:48:ed:1f:26:4f:37:9b:e5:60:7f:5c:2f:af:ff:
ad:42:a2:13:9a:dd:87:02:d5:c2:57:01:83:bd:2e:
08:6f:7b:42:a8:ec:96:ce:1d:98:be:c2:23:eb:69:
6d:92:cc:31:97:e8:0d:5b:e9:e2:f1:cb:b5:89:bb:
cf:fa:d2:5a:6c:50:65:0b:0a:cd:96:6b:23:df:15:
40:c4:0f:5e:72:e4:92:a1:ec:de:94:ba:f7:6b:50:
09:a0:2f:ec:17:59:d8:dc:77:d0:7f:70:0f:83:2e:
74:39:55:78:02:6f:d7:37:84:79:02:de:4b:ce:25:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:69:2D:13:24:EC:F3:CC:1D:82:46:C3:21:9E:88:D3:1E:67:58
X509v3 Authority Key Identifier:
keyid:39:9A:7B:F2:B9:0A:B8:CB:FD:24:CC:4F:8B:AD:EA:78:77:F8:E4:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/399A7BF2B90AB8CBFD24CC4F8BADEA7877F8E495.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZp78rkKuMv9JMxPi63qeHf45JU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/4/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.28.6.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2d:ee:15:6d:b1:ee:dd:06:88:0d:6d:29:7f:ad:69:75:0b:
b0:ed:02:3c:b6:7f:6f:cc:24:3d:10:73:bc:79:af:2e:05:80:
37:45:b8:f9:54:39:a1:6d:a4:b9:d2:57:e2:26:b7:8b:0e:f5:
32:38:3c:6f:2f:4a:7c:88:0b:c7:ae:22:0f:a7:6c:c0:a9:e7:
8c:3c:40:53:ed:03:68:d1:54:4d:b0:22:6a:19:65:f9:6f:c9:
b8:d7:c1:bb:ba:58:29:72:db:a4:94:87:0e:3b:3b:06:18:1f:
78:4a:ca:3c:37:a0:c9:ac:50:64:69:d2:f7:89:9a:c4:4c:c6:
af:c7:5b:32:a5:48:0b:da:d4:e5:00:c5:9b:49:7d:31:b7:13:
c5:3d:9f:35:30:23:9f:7b:67:3f:9c:b3:4f:e4:40:13:39:47:
d9:e4:41:2f:84:23:54:77:32:4f:ca:ae:3a:86:97:eb:76:cd:
c8:22:b9:a5:aa:47:03:9c:36:51:ed:03:ad:dd:b3:f2:db:06:
74:34:5b:9f:ce:28:f0:4f:90:41:29:55:35:d6:8a:cd:3b:17:
e3:73:dc:ca:6b:a2:61:66:d9:b7:40:a0:8f:9f:09:49:22:b2:
66:2a:8b:db:e7:e4:35:a3:96:6d:ac:cf:03:af:a9:e2:cc:49:
34:0e:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:31 2026 by rpki-client