Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13287.roa
File: AS13287.roa (raw, json)
Hash identifier: w07CCILi8ctE0etEpAsbnHSYnMZmEbtn+2d2TxyZMmE=
Subject key identifier: 00:93:A6:1E:FB:91:06:FA:B7:5B:16:36:D9:48:DF:4F:8C:0C:C1:6D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E2E9624CDEA3D69A5CFC66C55B39107C48FB0AF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13287.roa
Signing time: Tue 12 Aug 2025 12:42:23 +0000
ROA not before: Tue 12 Aug 2025 12:37:23 +0000
ROA not after: Tue 11 Aug 2026 12:42:23 +0000
asID: 13287
IP address blocks: 2a13:9500:c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2e:96:24:cd:ea:3d:69:a5:cf:c6:6c:55:b3:91:07:c4:8f:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Aug 12 12:37:23 2025 GMT
Not After : Aug 11 12:42:23 2026 GMT
Subject: CN=0093A61EFB9106FAB75B1636D948DF4F8C0CC16D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:b3:58:bd:5c:da:4f:12:14:c0:c5:b4:6a:
13:41:d2:f4:67:c3:6b:27:0e:48:76:57:6e:ea:82:
cb:ce:19:66:3b:a3:52:41:61:ce:f4:44:66:d9:2f:
06:29:62:5b:1a:91:c6:d4:42:9b:78:3f:c1:45:11:
ff:bc:29:74:2b:43:57:3d:fd:d5:ac:3a:86:89:e7:
c7:03:98:ec:08:da:6b:64:27:10:89:10:23:80:a5:
8d:c0:be:33:19:77:7d:54:3b:d6:b3:6e:92:e1:5c:
28:89:1b:46:22:20:d9:3b:dd:65:8d:15:21:9b:09:
2e:fe:52:d7:fd:a2:4f:04:3c:49:ef:61:6f:57:68:
c4:23:84:e2:1b:a7:3f:e8:f7:d7:b4:ec:88:c5:17:
2d:e8:cd:41:34:69:51:d7:61:fe:7f:94:80:14:5c:
b8:59:14:4c:ef:41:79:e9:6d:89:7c:26:e4:57:8b:
55:b9:21:7a:88:3b:ac:ec:b1:32:b9:45:9f:1c:b0:
6b:21:0f:84:de:c7:cd:04:b5:b0:33:40:a4:1b:27:
51:23:3f:5d:11:04:f1:13:11:4b:f6:da:1b:52:ef:
e9:1d:ca:1e:9a:f3:eb:81:ea:0a:dd:93:73:4e:40:
3a:18:0d:1f:42:c7:53:62:95:70:6f:b6:58:70:6a:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:A6:1E:FB:91:06:FA:B7:5B:16:36:D9:48:DF:4F:8C:0C:C1:6D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:c5::/48
Signature Algorithm: sha256WithRSAEncryption
4a:6c:52:25:32:b8:6a:7e:a0:50:b5:4a:e1:a9:8e:bf:65:cb:
0e:f0:61:6e:63:72:9d:fd:ab:d5:21:e0:42:8c:96:5a:3a:64:
f4:b8:11:34:01:be:0f:9c:80:39:88:03:8f:0e:ba:7c:54:3a:
25:ed:05:c9:c2:9a:7f:ec:6f:e1:65:63:a0:14:3a:7e:9b:2d:
a5:cf:e5:26:25:78:65:56:ef:6f:bf:8b:a2:f8:a5:16:1c:eb:
c4:30:b2:4a:8d:7b:84:3a:9f:86:3e:26:5f:8f:de:b5:c3:8d:
b5:58:17:80:b8:92:e7:6b:05:d0:80:f6:e2:20:85:0b:e0:6d:
c4:19:74:f1:30:3c:5b:0e:25:42:2c:8c:d8:48:cf:fe:fa:42:
08:a9:2f:b7:15:ca:64:93:71:91:91:64:80:08:2b:f0:68:66:
9b:5f:6c:7d:02:05:64:22:b4:9d:7f:20:c6:ce:cb:44:86:50:
8a:cc:7c:ec:fd:a4:fb:90:d7:d7:8a:e8:77:59:9e:b0:e4:d0:
6f:a6:ad:30:be:9e:4d:5c:2c:33:bc:2f:d6:a3:b9:e6:10:ec:
3b:6f:31:31:a3:95:15:48:b3:85:26:da:55:21:7e:73:e5:9d:
86:ab:c0:d6:58:4a:41:7d:ac:24:61:99:9d:f3:06:9d:dd:fa:
38:08:13:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:10 2025 by rpki-client