Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 6OIEyeqHjjUp+nYvR73DkEddE6WSG4m6elUEIq9fO6U=
Subject key identifier: 1A:F3:52:FD:46:D1:E0:68:47:74:AC:E3:F3:3C:B5:63:34:61:EB:15
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1C469199F5E2C579D5268D3C980329FD1E164F81
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
Signing time: Wed 04 Nov 2026 14:45:35 +0000
ROA not before: Wed 04 Nov 2026 14:40:35 +0000
ROA not after: Wed 03 Nov 2027 14:45:35 +0000
asID: 13335
IP address blocks: 140.233.163.0/24 maxlen: 24
140.233.180.0/24 maxlen: 24
143.14.91.0/24 maxlen: 24
143.14.142.0/24 maxlen: 24
143.14.163.0/24 maxlen: 24
143.14.165.0/24 maxlen: 24
143.14.167.0/24 maxlen: 24
143.14.168.0/24 maxlen: 24
143.14.176.0/22 maxlen: 24
143.14.224.0/24 maxlen: 24
143.14.251.0/24 maxlen: 24
148.135.194.0/24 maxlen: 24
155.117.113.0/24 maxlen: 24
155.117.208.0/23 maxlen: 23
162.141.1.0/24 maxlen: 24
167.148.69.0/24 maxlen: 24
167.148.84.0/23 maxlen: 24
167.148.120.0/23 maxlen: 24
168.222.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:46:91:99:f5:e2:c5:79:d5:26:8d:3c:98:03:29:fd:1e:16:4f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 4 14:40:35 2026 GMT
Not After : Nov 3 14:45:35 2027 GMT
Subject: CN=1AF352FD46D1E0684774ACE3F33CB5633461EB15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:fe:0f:7c:81:9c:aa:cc:a6:63:1c:3f:2a:
d4:fd:f0:e0:f4:a0:4e:83:37:93:10:c5:2e:00:e7:
eb:67:79:0d:d9:f5:6f:c1:f8:98:a3:f8:8c:b9:bb:
9f:05:f0:55:2f:e2:8f:98:67:60:d2:cd:e2:04:93:
ad:af:53:30:f4:f8:a8:27:44:f9:33:1f:cc:58:0a:
f9:a7:b5:0e:d1:d4:16:e2:4f:85:03:c6:db:f5:d7:
0f:03:1c:dd:56:81:40:e2:07:09:79:a2:25:d8:c0:
9e:46:2c:60:a2:32:f0:f3:b5:94:14:15:08:78:11:
02:50:05:ea:d7:61:15:50:50:b6:d8:05:0f:09:17:
8f:51:9f:86:78:5c:08:87:98:bd:93:60:ad:be:00:
87:a4:4a:dc:7f:bb:5a:a7:67:16:40:4b:6a:19:a2:
11:49:ff:94:95:2f:98:43:da:90:fb:b7:4a:58:02:
71:9b:78:34:c9:ab:ed:e3:9b:25:fe:58:5f:6e:a7:
eb:b7:60:97:e6:2b:79:f4:3b:12:1d:87:f6:67:c2:
16:53:7e:b1:54:b0:68:ee:a2:38:64:95:b7:76:b2:
2d:83:fb:47:38:b5:a0:b8:39:86:3a:4f:47:43:22:
03:b3:8f:ad:7b:d3:d6:6e:25:28:e7:a1:d0:ab:f7:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F3:52:FD:46:D1:E0:68:47:74:AC:E3:F3:3C:B5:63:34:61:EB:15
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.163.0/24
140.233.180.0/24
143.14.91.0/24
143.14.142.0/24
143.14.163.0/24
143.14.165.0/24
143.14.167.0-143.14.168.255
143.14.176.0/22
143.14.224.0/24
143.14.251.0/24
148.135.194.0/24
155.117.113.0/24
155.117.208.0/23
162.141.1.0/24
167.148.69.0/24
167.148.84.0/23
167.148.120.0/23
168.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3e:f6:6b:21:5c:63:11:45:0a:d6:60:14:14:b9:59:67:35:
86:00:84:b4:89:9f:74:f0:9f:b8:57:26:12:00:9c:32:f4:54:
c9:14:3a:b2:1d:11:e4:6e:db:77:dc:db:6f:0d:a3:87:41:a3:
cb:0c:b3:13:dc:43:44:b7:d6:f7:09:23:73:7b:58:56:c0:62:
a7:31:87:01:e1:85:b3:5b:b4:39:45:d0:94:3f:aa:e5:c8:6d:
83:b5:1d:d1:4b:4e:17:03:3e:f8:52:98:f9:86:cf:ed:cc:16:
d7:05:3b:6a:a9:f8:0b:ad:3d:61:99:90:c4:cc:fd:22:91:74:
e8:95:bf:be:1c:d9:bb:ed:23:86:81:75:6c:07:6f:ec:54:12:
f6:b2:ed:96:f7:64:c0:ed:92:3f:6d:7d:f2:73:85:13:dd:c7:
f9:ac:65:d1:09:7d:91:fd:77:68:43:11:7f:81:00:18:fc:fb:
96:96:f8:67:ff:d3:a7:96:87:3e:e4:c0:f5:e0:8c:29:76:e4:
a4:7f:8a:fc:d6:14:71:eb:90:1a:1d:24:30:d2:58:b0:38:f2:
24:14:7d:8b:ae:af:54:c3:d8:62:27:f3:aa:63:ac:72:bc:21:
84:90:ee:c7:45:38:fc:45:aa:e8:6b:42:62:10:67:33:09:cd:
ff:4f:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:22:36 2026 by rpki-client