Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 0evA/P1xucuSRRN7K4CiTDhFZhe/QktRbI0mPE/4HWk=
Subject key identifier: 49:07:7F:00:D3:60:BB:29:CE:5B:6C:C2:6F:A4:B1:85:05:B2:75:30
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 7B1890C7D4EBAC475027DE8F48D6281EA2452668
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
Signing time: Wed 28 Oct 2026 19:05:17 +0000
ROA not before: Wed 28 Oct 2026 19:00:17 +0000
ROA not after: Wed 27 Oct 2027 19:05:17 +0000
asID: 13335
IP address blocks: 45.146.81.0/24 maxlen: 24
45.157.16.0/24 maxlen: 24
45.157.17.0/24 maxlen: 24
147.78.123.0/24 maxlen: 24
193.176.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:18:90:c7:d4:eb:ac:47:50:27:de:8f:48:d6:28:1e:a2:45:26:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 28 19:00:17 2026 GMT
Not After : Oct 27 19:05:17 2027 GMT
Subject: CN=49077F00D360BB29CE5B6CC26FA4B18505B27530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:d3:58:59:66:0b:dc:c2:d4:ff:20:e4:f5:
14:30:e3:f3:2a:81:da:a2:90:ea:aa:cd:59:b6:5a:
97:7d:86:41:16:7e:ce:2f:6c:86:97:11:d3:ab:13:
37:f9:0f:2e:b1:59:84:6e:a7:2b:a3:35:36:f6:e7:
98:ab:f6:43:1d:14:a7:7a:36:cb:76:bc:b5:7a:c8:
de:a5:8c:bc:f4:56:83:99:43:b9:51:7d:12:72:1d:
69:06:6e:df:e4:d1:0d:52:42:a4:dc:7e:20:51:2a:
2e:99:9d:b7:2c:61:90:b4:da:44:57:21:a8:51:aa:
15:6c:92:89:2e:2d:08:e5:d8:72:92:e3:7a:36:3d:
80:f8:4a:15:9d:29:59:9d:e9:25:59:aa:d5:b3:a6:
99:23:11:74:af:18:ef:cf:09:cd:76:42:69:99:4e:
b3:62:a5:8b:35:2e:4a:35:e9:66:2d:33:65:b6:13:
f4:50:01:ce:c0:c1:c4:ec:6d:90:a3:ab:c7:cf:e7:
d7:cf:97:be:ab:6f:33:01:58:ab:c4:58:14:96:59:
61:35:15:a0:b3:70:77:45:07:0c:4b:03:b0:df:6a:
de:f9:7d:21:b5:2e:6a:ee:ae:94:8e:b1:70:94:3c:
21:8e:eb:e1:84:ef:2c:c6:d1:b5:2b:6c:34:8c:6a:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:7F:00:D3:60:BB:29:CE:5B:6C:C2:6F:A4:B1:85:05:B2:75:30
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
45.157.16.0/23
147.78.123.0/24
193.176.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:fd:62:e2:53:9f:a1:41:a9:c5:b7:6e:d6:69:4e:44:a1:48:
b4:d2:d7:be:0a:73:6f:5e:a0:b4:bf:10:16:aa:b6:93:52:a5:
f7:b0:e6:6a:c3:12:84:6f:26:dd:67:fa:5a:4a:2e:f0:9d:af:
48:3d:48:b8:7d:89:c8:21:45:28:ed:0c:89:cf:25:86:36:3a:
d8:8c:da:bb:8c:1e:45:4c:90:b3:a8:20:ba:62:0e:f3:12:c5:
45:a0:db:66:68:b6:94:ba:8c:1c:f3:8a:eb:00:fe:90:ca:48:
cc:f2:b6:81:dd:36:67:7f:ab:a9:f1:13:d2:59:80:e7:eb:2b:
7b:17:f3:d4:2a:2d:b7:8d:37:75:4a:4a:c8:b8:29:66:60:49:
ce:55:72:8c:cb:e6:56:0d:4f:51:9c:7a:5d:67:9f:83:54:b1:
29:03:da:1b:f1:dd:36:e5:dd:cf:43:44:0f:06:82:74:91:df:
86:cb:33:0c:e1:d7:e8:3c:63:39:23:35:20:c5:95:d2:11:32:
20:6c:c8:23:89:25:d5:08:b3:5b:e7:12:35:dc:98:da:60:a8:
67:06:1b:1e:54:9e:e1:7b:b7:c1:a2:f7:5d:5c:03:08:7a:96:
60:87:07:92:82:3c:7b:7c:d3:65:21:68:f3:21:f8:39:0c:60:
bb:21:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 05:28:59 2026 by rpki-client