Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: 5mjdHuLfUAEx5zXVH8hlHAWYTlhzWXUHUpO+rQ+GOAE=
Subject key identifier: CE:D2:9F:13:5F:60:B0:2C:57:30:CD:8F:40:2C:B5:C5:F0:33:F7:F2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 348D8AFBDAB456F79AAF525B13F6D5E4AC44BE8D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
Signing time: Tue 13 Oct 2026 00:02:04 +0000
ROA not before: Mon 12 Oct 2026 23:57:04 +0000
ROA not after: Tue 12 Oct 2027 00:02:04 +0000
asID: 13537
IP address blocks: 92.112.229.0/24 maxlen: 24
95.134.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8d:8a:fb:da:b4:56:f7:9a:af:52:5b:13:f6:d5:e4:ac:44:be:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 12 23:57:04 2026 GMT
Not After : Oct 12 00:02:04 2027 GMT
Subject: CN=CED29F135F60B02C5730CD8F402CB5C5F033F7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:82:28:b4:7d:1c:74:e1:1c:d2:1f:4d:3b:
b6:18:be:43:15:f3:69:ba:26:f0:2a:d6:07:48:f3:
3e:f1:40:da:8f:e7:73:7e:09:51:27:6b:f5:4e:ec:
d9:10:4b:a4:db:46:bf:07:02:85:21:ca:b9:b0:9e:
1f:e5:f0:8e:ab:f2:81:57:4f:1b:e8:06:ae:93:ca:
30:49:c0:fc:d1:d7:7e:ae:6a:96:ea:c2:68:cc:f3:
32:69:6c:f7:30:d8:d5:5c:9c:2d:ed:93:35:db:4e:
50:78:62:26:a0:0b:ef:e1:37:60:d2:54:3d:61:0f:
db:d0:1a:67:ec:98:e1:f2:be:db:a0:3f:e5:8c:6d:
46:93:8f:ee:c4:37:4f:46:81:0a:b1:24:ee:30:b3:
74:17:e3:6a:36:61:2f:b2:48:c7:87:4a:a5:b1:57:
d0:07:91:0d:9e:af:a2:ee:f1:a4:21:c3:a2:0d:d4:
d8:90:84:9a:c9:a3:2e:a2:e3:ba:cc:b9:52:af:06:
56:0a:40:b8:c7:bd:19:83:f9:31:16:09:26:b8:89:
d7:1e:6c:48:32:e2:71:16:19:ae:18:6c:f1:d1:96:
94:34:00:05:d6:2e:90:e2:6d:5a:6c:02:51:97:c6:
1d:d2:78:f8:48:3f:ab:1f:a0:1f:6b:c2:62:43:4e:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:9F:13:5F:60:B0:2C:57:30:CD:8F:40:2C:B5:C5:F0:33:F7:F2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.229.0/24
95.134.5.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3c:c0:89:01:34:b7:0d:d5:92:af:f9:c3:af:49:bc:cd:c4:
ff:44:11:34:2a:a2:26:5d:4e:39:e0:24:3b:db:06:8c:96:b6:
b0:5b:96:e9:ab:8c:17:47:4a:e3:99:aa:83:11:dd:5d:cd:5a:
da:ed:85:7d:0a:72:41:8a:f9:a0:a4:5c:33:54:c5:2d:23:af:
af:3b:4d:6f:8d:1b:d5:fc:96:97:79:2d:b1:5b:bc:cf:e7:c2:
8d:87:e7:74:c9:39:b4:8d:35:3b:df:78:c1:26:31:7c:fb:ff:
47:d4:9e:d7:9a:2c:5f:2d:c4:c3:47:fd:7e:33:d2:99:b8:63:
08:cb:e3:e7:25:b6:23:be:3a:8b:fd:d8:10:b3:6a:1d:48:fa:
1d:ce:f6:3e:30:8f:93:be:9d:67:6c:51:68:6d:e4:da:39:88:
f9:18:ea:ba:ec:2a:ec:85:64:82:11:5e:ef:a9:6d:2b:13:62:
8d:9d:56:b3:ba:1b:67:33:e0:ae:8d:e2:b5:7e:e5:88:a0:e9:
28:9b:54:47:04:70:ba:e9:13:47:ca:cf:58:f4:5e:7e:d6:d2:
0b:af:85:b0:20:8a:a7:03:82:46:92:dc:b0:c7:34:24:bc:7d:
04:e7:90:45:23:d1:61:fd:2b:13:7e:bc:58:ee:fd:3e:f9:df:
fa:34:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:44:47 2026 by rpki-client