Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: IHAINtc/ahg/fIgM1Nf1cGRRtj3L2N2OSRe2jpsK39Y=
Subject key identifier: DF:60:DF:AF:3E:A0:ED:A2:1B:A9:E5:72:1B:C7:2B:0D:19:5E:85:E0
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0324821A712D70CA784C3D6E60C3AF012379CE8A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
Signing time: Sat 21 Mar 2026 03:01:27 +0000
ROA not before: Sat 21 Mar 2026 02:56:27 +0000
ROA not after: Sat 20 Mar 2027 03:01:27 +0000
asID: 13335
IP address blocks: 45.146.81.0/24 maxlen: 24
45.157.16.0/24 maxlen: 24
45.157.17.0/24 maxlen: 24
193.176.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:24:82:1a:71:2d:70:ca:78:4c:3d:6e:60:c3:af:01:23:79:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 21 02:56:27 2026 GMT
Not After : Mar 20 03:01:27 2027 GMT
Subject: CN=DF60DFAF3EA0EDA21BA9E5721BC72B0D195E85E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:ff:06:0f:a7:43:9c:d8:7d:38:cc:e4:18:
34:68:23:f1:ce:31:a9:ea:61:ec:65:f5:05:10:a2:
a3:f5:9a:35:ea:52:97:e5:b9:29:58:cb:03:e0:49:
2d:4e:a8:ac:23:43:85:0e:ce:07:d2:03:97:cd:09:
99:49:bd:d2:8c:4d:75:73:45:9f:b1:be:cc:7f:88:
02:85:1a:7c:16:bc:9f:9b:82:7d:1f:45:7a:06:f3:
2b:b2:d3:e7:52:b4:01:91:b2:6a:07:90:1b:12:ae:
33:00:df:84:f1:ec:bc:53:9c:5a:81:3c:02:d1:d6:
5c:4c:3e:f4:56:5f:69:ca:bb:43:a0:80:7a:79:15:
61:6f:53:41:61:6a:0c:ae:1a:81:23:9f:b1:b4:f4:
5c:30:77:31:d4:f2:a6:d0:ab:1e:2b:d5:5a:5e:a9:
62:44:c9:06:c0:84:a9:fe:b3:9a:c6:5f:07:ba:1f:
34:4b:31:79:d7:98:0b:d8:26:f2:9c:c8:7d:d9:c2:
af:91:d7:0e:46:5b:ff:b0:6f:49:78:16:5d:64:88:
8d:16:c1:0a:07:8d:ee:3d:0b:93:c1:6c:23:85:d8:
c6:ff:51:dd:70:9e:fa:dc:d0:9b:69:58:e8:84:95:
1e:63:9c:0c:66:fd:a8:43:6d:f3:30:55:64:cb:86:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:DF:AF:3E:A0:ED:A2:1B:A9:E5:72:1B:C7:2B:0D:19:5E:85:E0
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
45.157.16.0/23
193.176.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:11:bd:da:89:67:18:9a:c9:72:07:4e:33:ee:a5:6f:67:7b:
57:9f:e5:5a:75:4c:cf:01:60:4f:8f:f9:97:4e:61:87:76:4f:
22:17:31:ba:a4:aa:3f:01:4f:1e:4d:f9:9c:19:12:bb:be:c1:
ce:15:84:b7:8e:9c:34:1b:45:a3:33:b8:01:a4:82:8f:53:9b:
a6:64:05:11:ed:dc:c4:c0:20:cc:b5:93:ea:b6:27:49:db:86:
55:3b:27:4b:6a:2e:10:83:d4:27:ce:03:30:f9:be:6b:13:ff:
3f:67:86:4a:ef:ef:dd:8c:ec:7f:b8:bd:eb:a4:57:c4:68:05:
73:54:f4:45:15:26:04:33:9c:41:fd:b4:7a:7e:8d:9c:c6:b1:
3b:46:fe:68:32:27:6b:6a:bd:83:09:cf:51:2a:bc:9a:7d:a6:
46:9e:59:71:26:9d:59:a7:dd:59:3b:09:b0:a7:ce:6a:ed:37:
26:18:8a:25:d7:e7:8e:7a:fc:cc:7b:c5:70:1a:a6:d2:a9:12:
e7:7d:0b:37:c2:4e:53:29:4d:74:7c:77:75:3e:ae:c6:5b:28:
64:fa:39:9e:7d:16:88:c4:7c:a0:a6:ea:f6:72:96:29:94:65:
77:ec:43:ab:37:c5:a3:14:02:9e:b9:33:cc:e7:76:29:a6:e2:
45:bf:f1:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:13:50 2026 by rpki-client