Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: rDYq33tYzPY+YWaVwGDdQzsKkcL0IzCddDbAbwevlfA=
Subject key identifier: 33:1E:32:0E:F8:4F:39:97:D1:05:7A:B2:6B:36:D8:A1:ED:9C:34:ED
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 31CBB5A1CE59522A9CF7C034416900DA57959301
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
Signing time: Thu 03 Sep 2026 00:06:37 +0000
ROA not before: Thu 03 Sep 2026 00:01:37 +0000
ROA not after: Thu 02 Sep 2027 00:06:37 +0000
asID: 13335
IP address blocks: 143.20.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:cb:b5:a1:ce:59:52:2a:9c:f7:c0:34:41:69:00:da:57:95:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 3 00:01:37 2026 GMT
Not After : Sep 2 00:06:37 2027 GMT
Subject: CN=331E320EF84F3997D1057AB26B36D8A1ED9C34ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:9b:09:bf:f3:54:47:d4:03:05:2a:7c:4c:
ad:2d:78:65:80:34:1a:57:7f:e8:d3:85:6a:65:b8:
7c:31:3a:cc:6e:c1:d7:61:27:6e:ba:72:6a:7d:75:
dd:b5:0c:0a:ad:c6:f4:24:6e:97:00:0d:f2:20:d3:
f9:5f:31:f0:fe:f7:22:80:4a:a8:c3:de:17:ec:0d:
d2:db:cd:b9:43:62:bf:ed:53:64:c7:b2:b6:20:1c:
4c:e9:aa:b4:c6:9a:b4:43:3b:36:b5:a6:4a:e7:ad:
66:3e:93:30:8e:a1:17:98:42:54:67:df:78:49:72:
60:83:59:67:d7:20:4a:14:fd:0b:62:3c:e6:a5:30:
09:06:5e:81:7e:f8:bf:6f:43:6e:3b:0d:29:11:e2:
eb:60:b9:7a:e7:97:6b:e9:5f:37:07:ca:ca:81:9d:
98:9b:aa:a1:33:45:30:f3:d5:4c:81:49:82:80:37:
4f:2c:fe:84:de:a3:5d:65:d9:86:30:f1:5e:a4:98:
3a:09:c9:b3:fb:59:80:91:af:2d:b5:9d:bd:5f:51:
59:94:ef:bc:b3:ae:9d:a6:4b:84:55:e7:ef:ed:81:
62:91:9f:2f:d6:28:03:0b:70:1e:5a:20:01:f2:73:
b5:fe:80:58:a5:ad:ef:6e:aa:7a:2e:94:74:88:95:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:32:0E:F8:4F:39:97:D1:05:7A:B2:6B:36:D8:A1:ED:9C:34:ED
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e7:c3:4a:12:ec:40:9e:b3:30:d9:32:e8:c6:0a:44:a3:16:
32:26:69:98:b8:b8:10:7f:8c:f4:c8:dd:ef:5e:5f:31:65:bc:
f8:f8:e5:67:fd:88:a4:c5:f3:23:6f:87:28:1f:7b:b3:7f:ef:
97:ec:5d:b7:e5:cd:45:b6:cc:85:6b:96:95:07:66:74:91:77:
28:56:04:14:0a:0d:c6:28:1b:f3:ce:02:04:08:b6:f9:5c:77:
95:1e:6d:f8:23:4b:04:d2:fd:ba:c6:1d:b1:61:b9:3b:ab:13:
48:99:61:40:76:d7:fb:db:cc:2e:c8:d5:5e:54:8a:df:b0:fd:
a2:8a:b0:a3:ae:24:5d:c9:c3:8f:86:ab:5b:72:3b:5e:f4:1c:
cd:9b:e3:48:2c:07:0c:d8:65:b7:b8:da:6a:3e:77:e6:2d:7c:
8c:28:b0:4a:03:4d:45:ce:1e:12:d9:81:d1:24:79:ab:4e:36:
32:14:d7:7c:a6:af:f1:9c:44:92:31:1e:f6:df:68:89:1b:85:
e3:bd:8a:d1:51:08:07:31:60:c7:39:71:9a:92:c3:3b:0a:82:
5b:5f:dc:a4:ec:df:bb:be:47:e7:0d:6d:41:eb:bf:e7:ef:00:
6d:a2:29:7e:cf:fc:35:3a:46:b6:92:72:5f:34:5d:8b:49:c9:
ce:7b:c7:b6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUMcu1oc5ZUiqc98A0QWkA2leVkwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA5MDMwMDAxMzdaFw0yNzA5MDIwMDA2MzdaMDMxMTAvBgNV
BAMTKDMzMUUzMjBFRjg0RjM5OTdEMTA1N0FCMjZCMzZEOEExRUQ5QzM0RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSJsJv/NUR9QDBSp8TK0teGWA
NBpXf+jThWpluHwxOsxuwddhJ266cmp9dd21DAqtxvQkbpcADfIg0/lfMfD+9yKA
SqjD3hfsDdLbzblDYr/tU2THsrYgHEzpqrTGmrRDOza1pkrnrWY+kzCOoReYQlRn
33hJcmCDWWfXIEoU/QtiPOalMAkGXoF++L9vQ247DSkR4utguXrnl2vpXzcHysqB
nZibqqEzRTDz1UyBSYKAN08s/oTeo11l2YYw8V6kmDoJybP7WYCRry21nb1fUVmU
77yzrp2mS4RV5+/tgWKRny/WKAMLcB5aIAHyc7X+gFilre9uqnoulHSIlWgRAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUMx4yDvhPOZfRBXqyazbYoe2cNO0wHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFAAw
DQYJKoZIhvcNAQELBQADggEBAGznw0oS7ECeszDZMujGCkSjFjImaZi4uBB/jPTI
3e9eXzFlvPj45Wf9iKTF8yNvhygfe7N/75fsXbflzUW2zIVrlpUHZnSRdyhWBBQK
DcYoG/POAgQItvlcd5UebfgjSwTS/brGHbFhuTurE0iZYUB21/vbzC7I1V5Uit+w
/aKKsKOuJF3Jw4+Gq1tyO170HM2b40gsBwzYZbe42mo+d+YtfIwosEoDTUXOHhLZ
gdEkeatONjIU13ymr/GcRJIxHvbfaIkbheO9itFRCAcxYMc5cZqSwzsKgltf3KTs
37u+R+cNbUHrv+fvAG2iKX7P/DU6RraScl80XYtJyc57x7Y=
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:34:46 2026 by rpki-client