Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: vPS4T0DaU51JntlOlEUWG9fq104dRaPnSw0hvqnfUuc=
Subject key identifier: 62:7B:6F:28:39:43:7F:84:2E:06:A2:57:89:83:EA:20:6C:16:56:A0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 27343D12031072D9456CE52D2249B6CF2313C07F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
Signing time: Wed 03 Sep 2025 02:57:12 +0000
ROA not before: Wed 03 Sep 2025 02:52:12 +0000
ROA not after: Wed 02 Sep 2026 02:57:12 +0000
asID: 13335
IP address blocks: 91.124.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:34:3d:12:03:10:72:d9:45:6c:e5:2d:22:49:b6:cf:23:13:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 02:52:12 2025 GMT
Not After : Sep 2 02:57:12 2026 GMT
Subject: CN=627B6F2839437F842E06A2578983EA206C1656A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:a6:03:d2:42:68:94:42:cc:d5:88:b8:68:
62:ed:06:62:e9:01:3b:04:f8:21:33:9a:ff:98:9a:
4b:4f:ec:e7:5d:f6:1b:c7:6d:a4:49:36:04:a9:45:
9e:83:89:40:d6:0d:ff:2b:32:78:db:19:cd:78:38:
22:b1:cf:ce:c9:c0:c7:60:9a:3f:f7:9f:a3:a2:35:
5f:37:28:aa:2d:cd:75:54:68:8f:c5:7c:74:9e:1c:
ac:4c:43:d2:79:65:64:2f:d0:42:ed:c3:b6:be:c0:
dd:71:6a:1f:2f:0f:d5:e6:f8:5b:9a:99:fa:ad:de:
a2:02:55:67:d7:ff:09:20:19:bb:0a:85:61:59:f8:
d7:eb:a3:3b:0d:e7:03:60:8a:7f:be:67:05:ad:2b:
e3:6e:95:fa:23:91:8b:01:8f:b8:53:2d:70:29:3d:
29:6b:11:89:fe:0f:ab:52:b9:38:03:a9:41:a4:5c:
e2:51:34:03:c6:1c:5a:3b:3d:64:31:14:c2:b9:07:
87:4a:ec:e4:2e:cc:0f:e5:9f:e2:41:99:b0:f9:c3:
e4:bb:19:0d:a2:77:39:e2:2d:2c:f6:11:0b:3f:7e:
f1:40:f1:ed:a7:2e:b4:4f:8d:9d:89:86:10:20:d7:
d5:29:28:47:25:04:b3:f1:34:e5:5a:44:c5:6c:6b:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:6F:28:39:43:7F:84:2E:06:A2:57:89:83:EA:20:6C:16:56:A0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.127.0/24
Signature Algorithm: sha256WithRSAEncryption
67:52:8c:c6:81:9e:dc:2a:d0:7c:fc:00:bc:9d:b4:83:4b:6b:
22:33:94:77:fc:67:00:17:96:ac:08:e1:0b:26:92:86:a3:da:
3b:9e:8e:9a:93:45:10:b3:87:29:e5:a5:f0:54:3b:fd:b2:90:
6a:8b:6d:46:df:a9:1c:bd:00:77:ee:b9:01:92:bb:7c:88:81:
09:8d:fc:3c:5e:3a:22:4f:38:bb:76:7e:0a:61:c8:eb:e3:1d:
fa:5f:e3:50:9b:dc:e6:c1:92:8a:1b:22:fa:42:58:20:71:97:
db:75:85:2c:b4:e5:f4:7d:48:75:79:ec:91:f8:e3:14:fa:2d:
c8:3b:c1:15:57:ee:87:94:a9:21:6e:f0:64:76:ae:03:c0:15:
55:99:3b:5d:8e:0b:fd:d1:15:d1:3e:d0:03:05:61:76:14:3e:
d8:40:a7:7a:80:a4:60:2c:05:9e:cf:c4:2d:11:50:3c:0d:bc:
8c:14:a0:a4:d3:14:d0:a8:37:68:36:37:bd:69:44:47:07:22:
56:45:56:fa:83:b4:da:5c:f2:e2:12:06:e2:ec:b7:a8:ad:92:
02:f5:15:49:8b:10:d1:3a:7f:f3:ae:6d:a0:de:89:d6:95:36:
f9:80:4d:a4:d1:22:46:c4:5e:72:f2:25:2e:6a:87:b9:3d:25:
b0:6e:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:31:21 2025 by rpki-client