Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: nULmIVDo5+6F9XWcNBwPn0OwCGmf2T5WrgRFC66WW/8=
Subject key identifier: B9:62:3D:4D:17:E3:F3:24:F8:76:BA:D4:24:F6:0B:E5:50:22:40:2C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7DE085B2BE35FCA03630DF669B6280D1624EC117
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
Signing time: Thu 17 Sep 2026 11:06:38 +0000
ROA not before: Thu 17 Sep 2026 11:01:38 +0000
ROA not after: Thu 16 Sep 2027 11:06:38 +0000
asID: 13335
IP address blocks: 5.252.81.0/24 maxlen: 24
92.242.186.0/24 maxlen: 24
181.215.196.0/24 maxlen: 24
185.158.133.0/24 maxlen: 24
191.96.81.0/24 maxlen: 24
191.101.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e0:85:b2:be:35:fc:a0:36:30:df:66:9b:62:80:d1:62:4e:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 17 11:01:38 2026 GMT
Not After : Sep 16 11:06:38 2027 GMT
Subject: CN=B9623D4D17E3F324F876BAD424F60BE55022402C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:5f:6a:8a:6b:31:32:98:05:00:e9:54:1a:
a0:3c:af:8e:7c:c8:f0:f1:e8:8a:ef:41:fe:31:bc:
f8:f0:69:be:ed:b3:d0:6d:7b:2d:b2:07:0f:b7:c8:
c2:c1:04:65:13:cf:c0:7f:65:4e:72:16:4e:d7:6d:
a1:13:b1:db:88:10:44:df:f8:32:45:2d:0f:e4:fa:
1b:44:8f:50:d4:79:45:87:ee:45:79:54:4a:da:69:
33:c8:dc:30:59:dc:ae:2d:de:14:32:b0:6e:30:d4:
8e:5d:7b:6c:5c:95:c3:99:51:8f:1a:3a:61:c8:40:
05:ad:51:a0:0b:df:2e:c6:80:18:e4:43:ed:35:cc:
76:24:58:d8:9d:36:6a:72:8f:76:f8:17:a6:23:5f:
1f:4d:44:b8:84:28:92:76:3f:61:2b:73:1c:47:20:
75:5a:11:f3:2e:53:99:c6:2f:48:5a:36:4f:5a:c3:
a7:6f:4a:68:e2:4b:53:d9:a6:b3:5a:67:35:68:d0:
23:0a:dd:cd:4e:84:b7:f8:3f:f0:d3:74:eb:2c:40:
a0:09:e0:e5:d5:3f:e2:03:04:d7:5d:f0:5d:24:9f:
dd:20:db:ac:6d:2f:53:cf:ce:76:9a:61:d9:42:6b:
3b:d3:52:00:44:95:bf:cf:02:f8:75:28:73:94:d3:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:3D:4D:17:E3:F3:24:F8:76:BA:D4:24:F6:0B:E5:50:22:40:2C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.81.0/24
92.242.186.0/24
181.215.196.0/24
185.158.133.0/24
191.96.81.0/24
191.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:8a:eb:d2:18:44:b6:3f:c0:be:d5:7b:24:c2:c2:f8:48:f2:
20:83:5b:c2:e1:2b:a9:c6:f7:ed:b8:d0:17:1c:05:e2:c4:bf:
15:02:7a:14:87:a9:8b:df:a0:c9:51:2c:1c:3a:57:85:c8:ea:
17:ef:aa:0e:5f:a2:2d:93:3e:a8:b2:7e:78:f8:37:07:7a:f9:
36:0f:2e:84:b2:93:4c:ea:1b:fe:53:0e:bf:38:5c:80:52:24:
fd:60:14:77:9e:e8:50:e1:29:d7:ae:7d:25:d9:68:22:66:5e:
12:54:e3:95:bb:da:ae:b8:e6:68:12:7f:64:ac:27:ad:f9:04:
26:d3:5a:59:ff:7b:e4:4c:28:df:11:4f:49:39:73:49:c1:96:
c9:fb:fe:06:04:e1:f4:11:95:f2:80:68:00:7e:30:ce:1b:66:
7d:97:22:b1:49:07:3c:49:e6:77:af:56:40:34:39:93:bd:08:
5e:12:25:00:75:df:2a:74:92:41:8d:15:96:44:00:90:f3:ee:
fb:2e:32:a9:f9:a8:d0:fd:1f:d3:a4:af:bb:93:c6:41:e4:81:
2d:c9:d3:66:c6:4b:4d:24:2f:69:fe:6c:14:40:f5:25:fc:e7:
ad:84:da:30:9b:25:d3:9d:ce:bf:f6:26:1c:40:f8:b3:b3:50:
36:de:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:53:54 2026 by rpki-client