Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: /wdfik/V0s5u5M9R8XbKzO/x2I8nJsiJlhIW2DEyv4I=
Subject key identifier: 1F:77:6E:FC:05:A0:98:8D:57:2F:CE:8F:D4:FB:B3:A2:40:11:83:75
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 68E318CDE0FD42D21D637C4833CB6DD382E34906
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
Signing time: Wed 23 Sep 2026 21:09:28 +0000
ROA not before: Wed 23 Sep 2026 21:04:28 +0000
ROA not after: Wed 22 Sep 2027 21:09:28 +0000
asID: 13335
IP address blocks: 90.96.176.0/20 maxlen: 20
143.20.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e3:18:cd:e0:fd:42:d2:1d:63:7c:48:33:cb:6d:d3:82:e3:49:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 23 21:04:28 2026 GMT
Not After : Sep 22 21:09:28 2027 GMT
Subject: CN=1F776EFC05A0988D572FCE8FD4FBB3A240118375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:bd:7a:6e:4f:01:5c:7d:62:62:5e:b8:65:
7b:8b:10:e8:a5:c1:d8:9a:a4:f3:33:8e:c2:e9:9a:
1b:60:6e:27:4e:fc:9b:78:9e:e8:93:55:b3:27:72:
35:8a:30:1f:e6:aa:e2:7c:2b:9c:5c:5c:92:c3:37:
e6:a4:83:a5:c7:fa:34:c4:13:cf:8c:53:c8:6c:8c:
3b:39:30:c4:65:71:fe:42:94:16:7b:77:f6:6d:c2:
b1:27:14:70:29:55:7f:bf:95:fc:c4:3b:1e:17:8a:
ce:58:cf:2e:bd:50:0c:14:fd:d9:6e:0e:24:51:30:
e6:cf:00:37:39:86:e1:7b:7d:78:37:8c:42:7a:6b:
fa:46:a9:20:34:30:ab:16:24:2b:5c:75:3e:4d:e1:
e1:b9:f0:d3:d2:36:b3:a9:1f:42:6f:88:03:b1:84:
a3:c7:8d:c3:14:e3:23:79:b8:cd:a4:f7:ae:d7:95:
c3:80:9b:3d:df:53:64:e7:b5:60:5f:32:55:75:f4:
55:86:5d:e8:7e:0a:1b:de:89:a8:4d:2c:e5:f0:cf:
64:e4:07:d7:08:2a:34:0c:86:0d:63:73:0e:39:ae:
8b:11:f9:72:86:f1:c7:a0:7e:5b:dd:05:98:ba:b8:
b0:86:fc:aa:46:79:ec:4e:ba:60:36:a4:cd:dc:ea:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:77:6E:FC:05:A0:98:8D:57:2F:CE:8F:D4:FB:B3:A2:40:11:83:75
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.96.176.0/20
143.20.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bb:cd:3a:bc:7f:b1:62:29:e5:3f:47:6b:ea:af:bc:be:50:
cb:0c:67:e0:a5:79:f3:8d:67:f5:34:53:30:88:7e:78:00:f8:
e2:c1:0a:88:1f:9a:fa:ab:c8:38:58:3f:21:e9:18:11:81:ee:
e0:ff:fe:aa:e9:5d:5e:4e:71:4a:d8:26:13:5a:d3:b9:7c:87:
d7:6e:6e:cf:81:01:a0:d2:d4:75:35:11:98:cf:27:04:fc:6b:
32:06:b8:8a:b7:74:27:20:5f:d8:19:5b:54:a8:99:af:24:e1:
ed:98:70:b8:59:d9:99:63:a5:af:f2:fd:ff:77:5a:f1:ec:8f:
4f:c8:57:d0:30:f9:57:1e:d6:93:3c:63:9b:96:84:69:0b:6a:
18:83:ee:0f:ae:0c:68:c4:4f:b7:49:4b:a0:a3:33:89:c9:88:
f4:0f:94:97:cf:a5:87:e9:ec:ce:49:e1:bc:47:45:2e:a1:c8:
6c:56:b8:5f:14:8c:fd:b1:da:cd:41:8b:e6:df:a1:99:fb:4a:
f0:ee:68:1a:3c:6f:13:7d:a9:48:a7:51:fb:bd:7a:b9:5d:c4:
3a:07:c1:fd:f7:2b:08:30:d8:c5:df:05:30:99:bd:41:96:e2:
2b:6b:1a:80:19:dd:33:b8:20:b0:ba:42:f6:00:e9:01:c0:71:
e1:2b:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:31:27 2026 by rpki-client