Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: uXJ35v0SiuwEJu+NwHBO6y4uZTxB8yj0iXV2l3KZYMw=
Subject key identifier: 55:FC:4C:B9:1B:44:F1:6C:C5:C4:64:DC:E7:66:DB:AA:E3:B3:FF:6A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 68CF6A8B06F1F953A47BC6D61E0D1453EFE87E2B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
Signing time: Tue 03 Nov 2026 08:14:47 +0000
ROA not before: Tue 03 Nov 2026 08:09:47 +0000
ROA not after: Tue 02 Nov 2027 08:14:47 +0000
asID: 13335
IP address blocks: 5.252.81.0/24 maxlen: 24
92.242.186.0/24 maxlen: 24
185.158.133.0/24 maxlen: 24
191.96.81.0/24 maxlen: 24
191.101.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cf:6a:8b:06:f1:f9:53:a4:7b:c6:d6:1e:0d:14:53:ef:e8:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 3 08:09:47 2026 GMT
Not After : Nov 2 08:14:47 2027 GMT
Subject: CN=55FC4CB91B44F16CC5C464DCE766DBAAE3B3FF6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:5c:98:5b:f0:c3:60:76:91:ef:49:d9:01:
d6:71:36:90:a5:9a:33:47:bb:c8:2a:9b:3e:ea:81:
76:27:2d:19:43:15:fb:4b:49:59:e4:7d:e5:c4:86:
fb:a0:cc:ae:42:59:de:c4:92:e6:0f:6e:31:14:13:
94:12:1b:2f:ad:b5:d3:85:ed:10:2a:f9:57:62:b6:
f3:3b:56:cd:90:19:04:4e:ac:d0:ef:a7:36:0b:53:
39:05:58:4a:1a:3c:09:7a:46:5c:fe:67:33:45:ab:
da:81:df:86:7f:80:f1:ec:3f:47:33:a9:c7:20:57:
cb:bd:d6:53:32:be:a3:07:ba:8b:15:05:41:d8:53:
02:58:59:e2:59:8d:58:dc:35:ca:e0:75:6a:1f:7d:
13:9e:20:f6:12:97:90:75:cf:1a:73:01:00:bb:38:
71:26:00:46:d0:ed:f9:86:98:72:d4:d2:06:1c:6a:
1d:59:8a:13:30:76:6d:e4:f3:e6:71:24:00:16:35:
e9:42:82:6a:2b:b1:6f:ed:75:c2:06:4a:de:8b:ef:
c6:8e:2a:2a:c0:36:1d:bb:5c:ed:80:00:19:03:41:
65:d0:30:36:fd:77:24:0a:5c:2f:dc:e6:ee:81:d9:
2c:6e:2b:f7:1c:13:25:23:1b:90:27:3a:24:59:62:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:4C:B9:1B:44:F1:6C:C5:C4:64:DC:E7:66:DB:AA:E3:B3:FF:6A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.81.0/24
92.242.186.0/24
185.158.133.0/24
191.96.81.0/24
191.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
36:4b:95:3f:3d:91:ed:f3:ea:b7:2b:1b:64:56:0c:95:1c:13:
84:28:75:e6:1a:f5:b3:93:8e:33:33:aa:1f:68:94:92:99:df:
3c:fb:a8:55:8d:3d:70:ce:4a:9c:d5:10:1a:9c:3a:1a:00:d3:
c0:2e:ca:b4:95:a0:97:da:52:41:86:c2:bd:13:6b:84:da:d3:
57:b1:87:15:13:78:6c:d6:88:d3:eb:c1:1c:1c:19:2b:b3:dc:
44:aa:76:ae:90:0a:db:d8:73:7f:75:1c:ee:b2:ee:7c:9f:d8:
5a:7d:2f:fb:72:19:16:c3:3f:71:10:9c:9c:9b:aa:16:49:73:
0a:db:1d:ea:3b:6c:2c:01:c8:f8:13:db:06:63:41:f4:04:c3:
c7:13:8b:99:0d:44:b5:9b:5f:8a:e5:95:57:e9:e2:c7:eb:1c:
73:9c:6e:18:41:dc:e5:33:25:55:08:88:1d:df:53:43:3c:9e:
e0:a8:df:ff:ca:6e:23:d7:04:ea:b7:5d:8b:6a:44:cb:4b:7b:
d7:4a:7d:1b:f1:41:09:e8:71:e8:05:77:55:73:d4:27:a4:ca:
eb:c0:2c:82:0e:38:81:ab:3e:bf:78:74:94:9c:04:ca:d8:3e:
bb:b1:4c:57:c3:04:68:93:50:9d:49:56:c1:4e:02:32:2f:ef:
38:9b:0a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 18:23:15 2026 by rpki-client