Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: cwotCpLPrnB0kQ0hGbhzFNMD/QyzOxVaCKOhKN9PHWU=
Subject key identifier: 64:F2:71:89:69:E7:BB:08:45:11:AC:23:C9:68:AE:41:5B:5D:98:01
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3233BF563B9FD8F49C55ABC031ABCDF292E66640
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
Signing time: Tue 30 Jun 2026 19:00:45 +0000
ROA not before: Tue 30 Jun 2026 18:55:45 +0000
ROA not after: Tue 29 Jun 2027 19:00:45 +0000
asID: 13335
IP address blocks: 91.124.127.0/24 maxlen: 24
178.92.188.0/23 maxlen: 24
178.94.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:33:bf:56:3b:9f:d8:f4:9c:55:ab:c0:31:ab:cd:f2:92:e6:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jun 30 18:55:45 2026 GMT
Not After : Jun 29 19:00:45 2027 GMT
Subject: CN=64F2718969E7BB084511AC23C968AE415B5D9801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:a8:45:af:88:6f:30:16:1e:aa:66:e6:25:
ef:6f:2c:75:90:5c:eb:ec:83:65:c0:0b:3b:55:45:
7f:c9:df:e9:75:6c:93:30:76:23:a7:94:be:df:9b:
09:2e:c8:9c:04:6a:57:28:90:8b:08:cd:28:94:4c:
8f:e9:bd:47:23:50:ea:2a:c8:1f:03:62:6e:17:5c:
28:d2:17:37:02:c3:20:93:2c:f5:55:13:96:7e:c1:
99:a1:0f:2c:6d:d1:0e:15:24:50:51:03:1b:40:ea:
cd:da:d9:50:4f:d4:f2:04:a2:0d:3d:85:67:be:f2:
ea:13:d4:36:66:0a:16:4a:d2:82:5a:c2:99:24:e0:
d6:e2:d7:df:9c:4e:ff:71:55:3d:e5:56:35:49:25:
5f:58:c5:f4:1e:43:e6:59:2d:33:b8:f8:06:4d:20:
74:e7:92:ee:f1:2a:15:a8:92:21:7a:f1:3a:1b:6e:
21:9e:68:d5:e9:ad:22:20:25:57:c5:a3:34:24:b8:
2d:6f:ec:a9:81:02:a1:34:20:3f:0a:d5:c1:87:94:
d9:eb:05:04:36:d3:48:6f:4a:2d:ca:5e:9c:5d:a6:
1f:2d:e3:24:b0:f3:77:7c:5b:40:e6:2f:be:53:de:
7c:87:25:16:73:93:af:27:64:c6:21:83:e2:bd:6a:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:71:89:69:E7:BB:08:45:11:AC:23:C9:68:AE:41:5B:5D:98:01
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.127.0/24
178.92.188.0/23
178.94.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9e:b4:f4:26:1a:4a:09:34:6a:fd:c5:13:b0:07:99:3e:dd:
24:b3:69:62:94:50:97:7f:eb:0c:78:51:e8:3f:98:9c:89:6c:
2e:78:67:da:c9:fe:f2:7b:8b:ec:5c:b4:00:34:47:76:46:18:
ee:fe:7c:cf:af:52:06:f4:b7:87:9d:be:64:a3:ae:0d:d6:f6:
28:89:13:3b:cb:ec:c5:48:9e:48:73:9b:e8:40:e2:7c:d4:a3:
60:71:d8:f8:62:03:8d:da:63:ee:6b:24:cb:b5:58:58:21:09:
d5:89:1f:92:9a:72:17:16:14:03:5b:f3:58:a1:56:ad:ee:8a:
cc:fa:eb:a8:20:73:cb:51:75:33:9b:b4:82:4e:2e:1a:9b:19:
07:ce:2a:77:18:11:ae:c1:8c:ef:57:36:00:a4:55:59:4a:e6:
dd:6f:8a:40:61:94:b5:b5:75:bb:0e:8f:d2:45:2c:ca:4a:dc:
8d:7f:0c:88:62:92:09:13:2c:8b:39:62:26:b7:7c:9c:fd:04:
26:5f:eb:db:f2:f3:a1:17:63:7d:47:14:ca:ed:07:17:60:26:
25:9d:33:00:5b:e4:0f:92:1b:22:a8:ed:ab:f4:e5:56:19:7a:
e4:22:6d:27:85:63:bc:06:7a:57:cd:fc:66:07:e8:be:3a:ff:
62:a9:82:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:54:52 2026 by rpki-client