Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: QdU+6ZFvN5ZBxZT2mBoUOO3R8rEpjgEwwNnmlsNPNeI=
Subject key identifier: F4:D4:18:A0:82:EB:6A:A5:AA:43:C3:16:88:7F:9F:EF:A4:F6:19:15
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3BA07F2B1F4D0BF8660E3B674D39EB6E8B7EE0C2
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13537.roa
Signing time: Mon 24 Aug 2026 09:43:34 +0000
ROA not before: Mon 24 Aug 2026 09:38:34 +0000
ROA not after: Mon 23 Aug 2027 09:43:34 +0000
asID: 13537
IP address blocks: 143.20.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 06:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a0:7f:2b:1f:4d:0b:f8:66:0e:3b:67:4d:39:eb:6e:8b:7e:e0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Aug 24 09:38:34 2026 GMT
Not After : Aug 23 09:43:34 2027 GMT
Subject: CN=F4D418A082EB6AA5AA43C316887F9FEFA4F61915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:63:66:0f:65:79:3a:3d:13:30:b6:1e:a5:
16:d9:bb:7d:32:9b:dd:b3:ef:3e:49:13:cc:1c:37:
45:90:6b:5c:47:22:f7:33:6b:b9:ec:40:e9:9e:82:
4c:b8:5f:28:87:98:ed:ab:8f:86:8e:4b:d4:85:c2:
d4:9e:6d:76:4d:82:5a:6a:0b:2a:23:10:b5:d9:ce:
17:59:04:d8:25:14:ec:6f:e8:bb:cb:c7:0a:3d:f6:
62:a5:af:12:22:99:ea:07:da:8a:6d:4b:b6:91:f2:
59:56:b3:fa:5a:9e:ce:45:0f:95:79:69:1e:50:8d:
69:97:77:12:cb:26:be:34:c3:1c:4a:23:56:bd:2f:
13:d8:27:dc:44:58:89:8c:e6:d4:5e:fb:4f:a5:e3:
9e:e0:6c:86:7d:d4:f9:0f:1c:15:b5:9b:f6:b3:26:
e4:98:91:a4:7f:d8:3f:e9:fb:65:28:23:98:97:26:
3a:4b:e9:e6:d4:f2:da:74:44:41:12:41:4c:07:f6:
5c:c6:a8:dd:8b:12:fc:70:cb:97:34:b6:c3:28:eb:
14:a1:70:74:86:2d:e3:ee:9b:0f:2b:bb:a9:b0:95:
76:a3:8b:a0:4b:88:e2:f2:27:1d:eb:a5:60:72:7a:
ea:12:af:c0:39:60:4b:52:73:9b:82:8d:ab:cd:9c:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:18:A0:82:EB:6A:A5:AA:43:C3:16:88:7F:9F:EF:A4:F6:19:15
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.136.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d6:1f:01:8f:90:02:c8:5b:f5:de:cc:37:33:1d:b3:52:fd:
b3:76:40:2a:70:20:10:9f:1e:ce:45:38:55:5f:7e:27:81:f2:
40:eb:3a:dd:83:6d:56:94:35:a6:7e:bc:0e:86:a3:25:43:a5:
e7:ec:3f:c8:04:40:8a:51:5d:5a:56:a5:f5:e9:2c:93:2f:cc:
7b:ff:7d:07:8a:10:d1:40:27:cd:e1:0e:9b:c2:82:26:49:69:
ab:3a:6c:aa:63:f3:f3:80:cb:d9:0b:07:14:99:90:04:c9:41:
15:c1:2f:f8:47:fc:07:4e:c3:df:e6:04:98:da:2a:0c:89:a0:
db:f6:6c:16:91:cf:f3:b4:3a:5d:3b:b1:9a:71:12:2e:a8:91:
71:b6:3c:18:db:f0:a1:c2:62:40:e7:1d:71:66:5a:ad:07:76:
7b:bf:83:55:de:37:f1:76:22:66:94:9c:ea:4c:a0:44:14:f0:
f4:27:14:9b:40:40:54:56:da:67:55:4b:71:73:7c:a4:ec:b5:
76:e9:5f:d0:91:f6:27:0b:d9:b9:d8:58:1b:01:fc:a9:b9:df:
33:ee:68:fd:fc:97:b3:3b:85:81:70:c2:e2:f6:08:40:cc:80:
cc:ef:86:cd:97:93:52:3f:49:46:93:5d:5e:c2:a9:f5:20:1c:
5c:4f:6a:8b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUO6B/Kx9NC/hmDjtnTTnrbot+4MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA4MjQwOTM4MzRaFw0yNzA4MjMwOTQzMzRaMDMxMTAvBgNV
BAMTKEY0RDQxOEEwODJFQjZBQTVBQTQzQzMxNjg4N0Y5RkVGQTRGNjE5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FmNmD2V5Oj0TMLYepRbZu30y
m92z7z5JE8wcN0WQa1xHIvcza7nsQOmegky4XyiHmO2rj4aOS9SFwtSebXZNglpq
CyojELXZzhdZBNglFOxv6LvLxwo99mKlrxIimeoH2optS7aR8llWs/pans5FD5V5
aR5QjWmXdxLLJr40wxxKI1a9LxPYJ9xEWImM5tRe+0+l457gbIZ91PkPHBW1m/az
JuSYkaR/2D/p+2UoI5iXJjpL6ebU8tp0REESQUwH9lzGqN2LEvxwy5c0tsMo6xSh
cHSGLePumw8ru6mwlXaji6BLiOLyJx3rpWByeuoSr8A5YEtSc5uCjavNnBDDAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU9NQYoILraqWqQ8MWiH+f76T2GRUwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMTM1Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPFIgw
DQYJKoZIhvcNAQELBQADggEBAAbWHwGPkALIW/XezDczHbNS/bN2QCpwIBCfHs5F
OFVffieB8kDrOt2DbVaUNaZ+vA6GoyVDpefsP8gEQIpRXVpWpfXpLJMvzHv/fQeK
ENFAJ83hDpvCgiZJaas6bKpj8/OAy9kLBxSZkATJQRXBL/hH/AdOw9/mBJjaKgyJ
oNv2bBaRz/O0Ol07sZpxEi6okXG2PBjb8KHCYkDnHXFmWq0Hdnu/g1XeN/F2ImaU
nOpMoEQU8PQnFJtAQFRW2mdVS3FzfKTstXbpX9CR9icL2bnYWBsB/Km53zPuaP38
l7M7hYFwwuL2CEDMgMzvhs2Xk1I/SUaTXV7CqfUgHFxPaos=
-----END CERTIFICATE-----
Generated at Fri Sep 4 10:05:04 2026 by rpki-client