Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: Cs0UA7nGscW3fZUaxi4bYjkCU96LrqRwQc+2iD9kgII=
Subject key identifier: 2F:26:9B:9F:DD:A4:D5:77:BA:ED:12:74:9E:4E:8D:77:F5:F3:8D:20
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 2235E6F15F97243011BD11AF0DD38763B2F77B84
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
Signing time: Wed 24 Sep 2025 00:55:07 +0000
ROA not before: Wed 24 Sep 2025 00:50:07 +0000
ROA not after: Wed 23 Sep 2026 00:55:07 +0000
asID: 13335
IP address blocks: 45.146.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:35:e6:f1:5f:97:24:30:11:bd:11:af:0d:d3:87:63:b2:f7:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Sep 24 00:50:07 2025 GMT
Not After : Sep 23 00:55:07 2026 GMT
Subject: CN=2F269B9FDDA4D577BAED12749E4E8D77F5F38D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:73:5e:b1:61:ac:98:4f:f5:66:05:ae:75:b3:
f9:5e:5b:0a:a8:05:f2:85:bf:38:53:1a:34:1a:ee:
5b:0d:e0:d6:6b:7c:9f:19:22:9b:50:0f:13:8e:09:
86:21:53:1b:eb:76:f5:87:cf:5d:73:23:95:8f:20:
df:73:32:34:c5:be:df:7e:8d:73:45:b2:bb:9b:b1:
b6:ce:81:b3:0c:bd:80:8c:3b:d3:88:91:e4:09:a5:
d9:01:f3:85:47:2c:5f:65:f2:5a:be:dd:22:f3:2c:
61:23:aa:97:4a:ae:1a:ff:d7:ad:0d:2f:d8:4c:aa:
b5:55:4c:eb:2a:d0:a1:5c:dd:7b:04:87:6c:77:f1:
2d:7a:e2:51:7c:83:09:28:c8:bd:2c:c3:57:f9:1b:
dd:1c:8d:30:f7:f4:f7:17:df:24:de:15:ec:4f:1f:
b3:40:65:57:aa:a3:99:58:ce:3e:14:34:de:68:2c:
ad:b9:4b:2e:e7:95:81:b5:36:60:0e:6c:ed:9b:a0:
1e:57:52:77:3d:34:91:23:f4:95:14:e5:80:4b:f8:
25:bc:a5:23:92:ff:9f:81:88:88:08:24:56:f1:ff:
5d:2c:e5:93:e7:2a:e9:9f:34:a6:8f:ac:53:2f:df:
82:b5:d8:f9:9d:bd:97:70:1d:46:51:bf:19:57:38:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:26:9B:9F:DD:A4:D5:77:BA:ED:12:74:9E:4E:8D:77:F5:F3:8D:20
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3d:c9:3c:79:78:1e:59:f8:13:42:3e:8b:48:52:91:0a:7c:
99:95:27:b3:ca:d8:c4:da:c0:2a:2a:43:9d:fc:d4:d0:96:d3:
ba:6c:4f:80:15:d2:2e:ce:cb:a5:db:d6:15:09:2a:da:89:38:
28:dd:37:ca:5f:b9:85:98:86:c3:92:fe:76:69:15:fa:51:2b:
8b:30:64:6e:a2:e8:95:01:e9:3c:16:e2:ff:6b:72:14:1e:ec:
e2:00:16:f4:0a:fd:6f:c2:4d:a4:88:4d:a1:7b:85:67:c9:5c:
31:04:7f:18:f9:c6:e6:67:03:d5:83:2a:5d:45:bd:0f:a4:15:
f7:65:8a:75:53:2c:d2:fc:c8:bc:84:e9:1e:2b:c6:5b:c8:19:
5f:ec:de:df:09:c9:b2:2e:e1:b5:78:91:2e:67:7f:4f:35:e7:
13:df:7d:15:36:d0:36:69:cd:b7:6c:4b:73:a1:17:37:4f:3e:
95:f7:06:8a:68:2d:27:38:d8:b2:4b:fe:17:f5:37:43:ad:b1:
60:6d:f9:3c:21:52:fc:5f:40:1b:37:28:86:53:b7:73:34:bf:
c5:75:77:63:ed:2b:d2:e2:a3:5c:fa:6c:ce:cf:20:a3:9e:37:
82:6d:b5:2e:a3:39:e3:d1:99:9a:95:1e:a7:7b:12:42:9a:07:
09:80:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:05 2025 by rpki-client