Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 5D0Z9tznFH2yHSfKSjwkmt8VdAgoh02oItW9a0Rde1Y=
Subject key identifier: CA:7A:5B:2D:58:3F:95:EB:49:39:09:0C:92:D9:5E:71:C1:DF:26:61
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2F2319E165DF38D800078A48E68F5465F91CEC14
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
Signing time: Wed 08 Jul 2026 22:50:34 +0000
ROA not before: Wed 08 Jul 2026 22:45:34 +0000
ROA not after: Wed 07 Jul 2027 22:50:34 +0000
asID: 13335
IP address blocks: 143.20.0.0/24 maxlen: 24
143.20.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:23:19:e1:65:df:38:d8:00:07:8a:48:e6:8f:54:65:f9:1c:ec:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jul 8 22:45:34 2026 GMT
Not After : Jul 7 22:50:34 2027 GMT
Subject: CN=CA7A5B2D583F95EB4939090C92D95E71C1DF2661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:67:d2:cf:66:23:92:78:6f:7e:ff:91:19:
80:12:89:35:89:97:37:13:26:05:2d:a1:12:be:62:
08:5e:1b:7f:5a:cf:e9:4d:c5:c4:15:97:4c:43:1f:
e3:56:07:c2:f6:48:81:01:e5:92:cb:23:32:06:1a:
41:00:06:fc:d4:c6:50:c2:5a:fa:28:2f:99:a5:07:
12:eb:fb:a0:7b:46:a5:e2:ac:a6:a4:3d:09:d3:64:
5e:8f:8f:42:22:7d:b4:f6:be:af:c2:c2:38:cf:f7:
17:83:23:3e:12:5f:57:65:8d:2c:d6:8f:05:0d:cd:
0f:d4:9c:df:d4:e1:15:16:92:05:b4:e2:1c:a6:e3:
6f:78:a9:e9:b8:0a:7e:f9:c1:87:16:19:a3:89:2d:
ee:76:f2:e0:7b:93:7b:19:aa:ad:62:c3:63:b3:5b:
91:c0:d1:4a:0d:76:fe:10:30:be:e5:e8:23:b3:0a:
99:25:e1:51:b3:78:7f:d0:7b:31:83:f3:e6:cd:3b:
3a:f8:83:58:3e:35:f8:bf:d5:b3:d4:b4:53:c2:ec:
d2:1e:16:28:de:6b:ce:f1:f3:3b:52:3f:40:12:0c:
c0:f1:31:ed:4d:bf:b6:1f:ab:c8:b8:1f:82:ec:54:
41:b0:3b:da:af:33:09:25:55:56:f1:15:2a:dc:ea:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:5B:2D:58:3F:95:EB:49:39:09:0C:92:D9:5E:71:C1:DF:26:61
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.0.0/24
143.20.78.0/24
Signature Algorithm: sha256WithRSAEncryption
59:62:4f:84:56:c0:78:6b:ea:d0:6c:17:72:dc:d7:89:49:74:
77:33:00:9e:23:48:79:db:d0:06:37:c6:b2:ac:be:34:f6:eb:
05:ba:68:c9:b4:75:6d:04:b4:48:50:a2:a5:de:27:fc:a4:a4:
32:90:39:25:26:bd:d4:af:b6:6b:c2:55:9f:df:c0:8a:bb:e2:
7c:43:6c:c9:28:5e:88:02:76:8f:5b:ce:d2:26:8f:24:a2:e9:
30:c8:4e:c3:86:51:84:69:c4:25:54:80:dd:53:f3:3d:c0:a8:
82:17:49:5b:e2:f2:2d:f1:09:f9:8b:24:0f:f2:68:1a:fb:4b:
af:b8:6d:5c:dd:a9:ed:87:16:32:87:60:81:c5:33:80:b2:f6:
05:73:74:7a:e7:3d:7e:d3:52:07:e0:f7:0d:07:ce:60:53:28:
82:91:c4:d8:30:54:65:fa:6a:4b:21:96:5c:df:0c:fb:7f:4e:
6b:94:0f:c1:ff:33:b3:0d:36:07:c6:4b:84:1c:e8:ff:bc:a2:
4c:25:94:a1:dd:eb:1d:ed:1a:9f:6f:1c:be:41:95:ca:a9:23:
51:9d:d0:51:1f:ce:fd:fa:18:a2:5b:09:cb:97:2c:49:d0:6c:
62:21:fa:25:af:d1:60:ff:60:74:9c:61:fb:3c:73:e4:10:75:
ec:7d:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:45 2026 by rpki-client