Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: TN23tIXBcBIfk/xJQklzzpseHtRNxFn+suNJ7TZAzkY=
Subject key identifier: EB:EA:69:81:39:F8:52:AE:8F:BC:05:AD:8A:B9:2E:8D:F7:56:36:30
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3B5A3082433F66F2D45A17EDFBF99E903B4B1E82
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13213.roa
Signing time: Tue 26 May 2026 12:10:31 +0000
ROA not before: Tue 26 May 2026 12:05:31 +0000
ROA not after: Tue 25 May 2027 12:10:31 +0000
asID: 13213
IP address blocks: 155.117.33.0/24 maxlen: 24
155.117.35.0/24 maxlen: 24
155.117.37.0/24 maxlen: 24
155.117.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5a:30:82:43:3f:66:f2:d4:5a:17:ed:fb:f9:9e:90:3b:4b:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 26 12:05:31 2026 GMT
Not After : May 25 12:10:31 2027 GMT
Subject: CN=EBEA698139F852AE8FBC05AD8AB92E8DF7563630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:e9:b0:ef:e2:b5:8e:89:35:1d:59:9b:5a:
b8:37:53:b6:0f:20:66:7a:6d:07:ce:b8:bc:dd:86:
fb:d6:f5:4d:48:ac:59:97:c4:7d:00:21:7e:ad:d1:
8d:78:47:94:4e:43:fe:16:0b:86:15:66:3a:f5:b3:
64:90:2a:d2:be:2d:9a:a1:49:2c:e2:ff:3a:7a:8f:
e9:01:04:45:e4:a2:3f:ff:b6:ba:64:1a:25:8d:36:
72:2a:1f:b6:ce:01:92:34:c9:29:7c:62:49:00:4b:
60:66:44:da:83:10:1c:ef:3b:6b:9c:f9:0e:d9:6b:
39:d1:2e:fb:d9:62:70:05:83:32:aa:26:53:69:75:
16:55:e5:6e:3a:0d:b6:c5:e0:aa:7d:c4:2a:97:ab:
24:50:0a:16:88:89:70:01:2a:21:55:06:83:77:5f:
57:75:f8:96:3b:3f:f3:76:1c:77:8a:dd:5d:18:a3:
e8:4d:be:c4:02:e8:16:69:4d:a0:e3:b9:49:e5:47:
0d:9a:5a:0f:63:cd:f7:4a:b6:f7:0f:bd:9b:4a:5a:
01:cf:7b:b1:1e:b2:d0:bf:a8:03:fc:3c:f3:33:a9:
df:39:31:11:ed:b2:64:77:29:9d:4d:f6:d8:63:aa:
f2:de:4f:94:9d:d4:92:48:14:af:c5:8d:d8:72:6a:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:69:81:39:F8:52:AE:8F:BC:05:AD:8A:B9:2E:8D:F7:56:36:30
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.117.33.0/24
155.117.35.0/24
155.117.37.0/24
155.117.39.0/24
Signature Algorithm: sha256WithRSAEncryption
92:82:7c:c0:1f:d8:04:45:ce:ee:1c:27:a1:4d:05:f3:b8:a1:
47:fb:78:80:20:85:ec:cf:5d:0f:b7:cb:f7:8f:1f:b9:76:0f:
eb:69:ca:6a:7f:c6:68:41:56:4e:73:72:ba:88:0b:20:68:08:
72:08:9c:1d:8b:2b:6c:7d:f2:47:98:82:2a:3d:e9:f7:01:c7:
1a:64:ac:26:57:db:6e:c2:55:21:cf:90:76:47:6e:cf:b0:4a:
a4:11:a2:c2:79:04:d2:ef:25:02:70:47:09:ac:81:72:cc:0c:
26:3a:ba:0e:de:fa:b6:35:ec:39:95:a9:73:45:66:a5:69:1b:
04:cc:96:e8:6e:d2:2c:87:f8:44:ac:68:48:a2:58:ed:4f:05:
42:b5:fc:39:8c:ed:f0:e0:cc:16:7c:46:98:5e:d5:03:6c:06:
b1:87:96:32:f5:1b:4d:b3:f8:2b:10:00:67:0e:e2:8a:00:a7:
0d:1d:f2:11:34:7d:a4:29:02:51:b6:08:bd:4f:ae:31:a7:68:
7b:2d:53:60:3d:d2:78:e9:86:52:2f:82:63:35:70:44:77:53:
9b:24:4a:3b:f4:af:ae:04:da:24:b2:e8:95:23:8f:c1:29:7e:
05:f2:fc:36:51:62:53:85:bb:fc:99:0f:1f:7c:2c:46:8c:fe:
20:82:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:12 2026 by rpki-client