Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: mE9dOZZhSggxiPrFut848lOtJh2x3dubBAHmZyLNmb0=
Subject key identifier: AF:0D:0C:99:20:68:59:F5:FB:A2:21:56:B2:AB:45:22:10:14:73:4F
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 663743ABD8E90227BB78FC5613BD12521C68124D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
Signing time: Sat 24 Oct 2026 00:07:51 +0000
ROA not before: Sat 24 Oct 2026 00:02:51 +0000
ROA not after: Sat 23 Oct 2027 00:07:51 +0000
asID: 13537
IP address blocks: 143.14.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:37:43:ab:d8:e9:02:27:bb:78:fc:56:13:bd:12:52:1c:68:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 24 00:02:51 2026 GMT
Not After : Oct 23 00:07:51 2027 GMT
Subject: CN=AF0D0C99206859F5FBA22156B2AB45221014734F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:d2:8a:31:3f:9a:95:37:93:2b:dc:56:65:
e2:00:64:97:12:2b:a1:1c:e7:2c:7f:f3:f9:4b:33:
5b:f5:dd:00:38:a6:da:72:73:55:5a:29:78:36:02:
12:ba:67:a6:a3:89:53:82:bf:f0:da:b7:6f:00:15:
cf:b6:10:c1:03:30:ec:6a:8a:a2:c2:d5:8f:d4:a5:
c5:1e:2d:b2:9f:0f:4a:18:65:d9:14:c6:06:d9:ed:
6f:d1:6d:ef:37:9e:85:20:57:2f:17:4a:0a:c8:dc:
fb:98:02:be:2b:cc:8a:44:5e:f2:82:2f:d6:0a:a7:
ee:50:b3:77:8e:1b:47:37:7c:b2:cc:d5:a6:3c:83:
23:c4:eb:a7:37:14:c8:31:e8:f8:e5:49:c2:ed:51:
10:eb:5b:45:4e:d3:aa:27:ee:55:55:09:37:63:11:
f1:56:c6:6d:c2:76:92:39:b2:f8:1c:90:9c:2f:50:
74:d4:40:17:53:4a:3d:59:47:8a:96:2c:30:0d:4d:
bf:09:6d:ba:5d:36:a0:c8:70:4c:65:24:87:84:e6:
fa:5c:55:e6:5d:8c:8d:cf:16:24:eb:07:5f:3d:c6:
51:6b:fa:49:5b:b7:45:23:5c:7b:52:51:00:52:12:
75:e8:a4:33:0b:c6:10:f2:0e:79:b2:6a:84:0f:72:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:0C:99:20:68:59:F5:FB:A2:21:56:B2:AB:45:22:10:14:73:4F
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5b:3b:4a:e7:60:cb:f7:51:87:d1:1f:e3:b4:3c:3f:50:57:
74:4a:1a:1a:8c:51:46:99:59:61:eb:aa:b8:ae:0f:f2:43:14:
78:33:3e:ea:93:f3:d5:1d:83:15:3e:0f:e6:63:06:59:97:5b:
2e:8e:d2:a7:ce:70:01:c9:ea:49:7f:02:21:e6:b3:c4:ae:b2:
bf:85:81:a5:85:e6:46:71:bb:b2:cc:32:c5:40:f4:70:08:7f:
79:05:5e:0d:ac:68:4b:7d:62:53:ce:c3:02:d2:54:50:02:0a:
f8:3c:c4:a2:f2:a3:3e:9a:eb:10:ed:f7:23:52:fa:c3:1e:4e:
42:90:2e:e7:8e:93:a7:f8:90:b5:f2:b8:80:e0:24:f8:76:99:
2a:1c:1c:ac:1c:e2:10:bc:19:1e:5a:de:8e:23:3d:e5:69:b3:
09:f5:5b:03:e4:4c:44:6f:49:80:b5:3b:53:cf:76:de:1e:41:
7f:98:cc:77:1c:dd:3e:2d:9b:c8:5d:0f:af:d4:55:37:54:f7:
b1:b5:ee:8c:f5:da:d3:90:02:1c:bd:7a:63:d4:b5:a3:bb:78:
db:c9:3c:3b:d4:0c:c4:ce:96:e2:78:fb:a2:fe:60:6d:10:df:
76:67:31:fb:5c:a6:6e:10:fd:db:d5:3f:df:54:9b:d9:41:98:
ae:8a:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 07:43:05 2026 by rpki-client