Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13287.roa
File: AS13287.roa (raw, json)
Hash identifier: HYZ3CRBWfLEDe+9Atus2yTKztcUP/vatcYkwIyHKDMs=
Subject key identifier: 61:98:A6:66:8E:D2:9E:06:9C:13:2D:5E:8D:14:EF:40:00:1D:7E:21
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7A8DFA4B07A2F459C28EF4893803DA5DAEC1BCFE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13287.roa
Signing time: Tue 14 Jul 2026 12:49:11 +0000
ROA not before: Tue 14 Jul 2026 12:44:11 +0000
ROA not after: Tue 13 Jul 2027 12:49:11 +0000
asID: 13287
IP address blocks: 2a13:9500:c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8d:fa:4b:07:a2:f4:59:c2:8e:f4:89:38:03:da:5d:ae:c1:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 14 12:44:11 2026 GMT
Not After : Jul 13 12:49:11 2027 GMT
Subject: CN=6198A6668ED29E069C132D5E8D14EF40001D7E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:d9:7e:33:91:8a:68:30:51:b4:d9:ea:62:
de:64:b9:4b:3d:83:76:56:1b:69:6c:81:b5:9e:e1:
9c:04:b0:cd:ef:33:51:e8:56:c1:48:de:4c:d7:b9:
3d:e6:6e:a5:2f:42:e9:31:74:e6:a2:10:1c:f1:79:
2f:8c:62:53:9b:c7:c4:8a:6e:f1:15:a4:ec:42:c2:
fb:81:92:5c:a0:01:cc:94:8e:61:70:c9:49:09:4e:
48:55:e5:73:38:05:2a:d9:74:fe:50:27:3b:12:43:
e8:17:82:a3:2c:1a:32:58:91:8d:ef:1c:77:b1:77:
e2:ce:01:8c:d6:0e:53:24:8e:71:4e:79:1d:7a:83:
a4:d2:f9:8f:00:17:f9:89:b4:9a:c6:4c:69:19:06:
1f:bc:aa:ce:36:7e:93:08:01:e7:91:02:2b:16:d2:
e4:26:7f:db:3e:89:ba:d7:63:65:ef:e9:31:32:91:
47:53:36:1e:3d:6f:3b:cd:20:7b:a6:4f:b9:6b:64:
d9:e2:a3:f2:cd:b5:42:11:42:15:0d:5a:00:2f:b2:
59:4a:9a:59:d6:37:4c:8a:de:6a:c0:3f:a7:15:14:
8a:f9:5b:56:a7:61:96:16:65:48:bd:dc:08:18:79:
c2:10:bd:fb:22:a3:47:23:40:2c:fd:f5:aa:da:80:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:A6:66:8E:D2:9E:06:9C:13:2D:5E:8D:14:EF:40:00:1D:7E:21
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c5::/48
Signature Algorithm: sha256WithRSAEncryption
57:cc:c1:b2:45:47:35:a7:ee:cd:58:91:e1:c2:6d:7a:f8:5d:
58:c9:93:14:fa:9d:ca:89:c9:f7:0e:5d:2a:e8:88:80:02:b1:
09:5a:59:6d:83:c8:7f:92:5e:db:5b:64:69:51:32:d6:c3:b0:
3d:0e:6f:0d:39:94:0e:68:62:33:32:a9:9f:7f:fb:4b:19:42:
fb:9f:d9:d9:20:16:73:d5:be:03:5c:a6:cd:ba:67:f4:6e:f9:
b7:7c:a1:bb:9f:33:fb:2f:dd:02:6c:c5:69:24:77:6f:2c:5b:
30:bc:0d:2e:0f:91:10:32:33:a8:53:73:f1:65:8d:88:06:89:
7c:36:61:48:33:76:71:4c:3d:c3:fe:59:f8:b1:e6:af:e3:15:
f8:91:17:2d:8f:5a:3f:ef:19:85:2a:d5:66:e7:27:95:55:88:
fe:6f:02:b5:ac:c8:1b:42:ca:d4:03:72:e0:0e:d1:da:af:a7:
d4:4b:f5:e5:b8:94:45:90:b2:84:98:c4:36:07:ee:0a:14:ef:
ef:f5:6f:e8:a9:e1:a6:31:b8:4a:5e:16:c1:3b:2e:79:67:51:
90:a8:1d:e0:e9:5f:bc:b0:c6:40:2b:2e:a8:3e:17:00:85:60:
ad:ff:ac:1d:8b:03:e7:19:63:8e:a9:96:35:7e:c5:2a:1e:f5:
38:e2:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:21:55 2026 by rpki-client