Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: 3FKwfbYOLqZf6xecV3Q/OHkiZMH7bpnl66qqSMmakik=
Subject key identifier: A3:89:7C:F9:EF:AE:F3:88:14:DF:BF:E2:50:22:E0:B0:7D:BD:6E:2C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 15176B48FAAE5B045B7AAB4A53717E294E096D26
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
Signing time: Sun 20 Sep 2026 04:05:38 +0000
ROA not before: Sun 20 Sep 2026 04:00:38 +0000
ROA not after: Sun 19 Sep 2027 04:05:38 +0000
asID: 13537
IP address blocks: 143.14.209.0/24 maxlen: 24
168.222.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:17:6b:48:fa:ae:5b:04:5b:7a:ab:4a:53:71:7e:29:4e:09:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 20 04:00:38 2026 GMT
Not After : Sep 19 04:05:38 2027 GMT
Subject: CN=A3897CF9EFAEF38814DFBFE25022E0B07DBD6E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:cf:df:2f:df:0e:94:80:de:e3:d0:6a:49:
24:b0:37:aa:2e:7c:ea:e8:85:51:1d:b3:38:cf:e9:
52:6b:2d:8b:8a:48:57:58:75:f5:fb:82:ce:dd:3d:
cf:d7:ed:61:6a:73:e4:e0:23:d5:d9:9a:03:68:e9:
cd:14:9a:3c:c8:f6:6a:2d:81:b2:21:39:67:d6:27:
22:2f:2a:f5:11:78:38:75:fe:f8:39:ea:04:85:08:
3f:ee:7d:da:df:cd:ad:01:80:fb:9d:fd:f0:04:f0:
72:87:1d:a7:ff:7d:8e:2b:ab:e6:dd:d2:4d:55:76:
63:23:bf:61:27:d2:b7:4a:bd:49:aa:8e:88:df:e0:
14:db:87:9e:6a:c2:c9:38:78:0d:3d:4f:28:90:33:
87:ac:da:44:cc:1f:96:de:00:90:d9:47:d9:8e:b3:
d3:65:23:81:ce:89:1b:49:15:26:c7:5b:ad:00:80:
66:a2:11:db:ae:86:a2:54:57:c6:37:7b:74:f7:71:
99:c5:dd:45:68:11:8e:e9:f4:88:34:ad:7f:16:27:
d3:e0:fe:51:27:d2:be:86:6e:63:7d:06:04:b6:ea:
7f:3f:d7:55:37:ba:4f:db:4d:49:5e:34:0f:23:de:
4f:ac:73:26:f3:6e:6e:3c:ad:39:43:6d:8c:74:2c:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:7C:F9:EF:AE:F3:88:14:DF:BF:E2:50:22:E0:B0:7D:BD:6E:2C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.14.209.0/24
168.222.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7d:15:d6:ef:d7:0f:1c:0d:cb:e5:fd:ca:ff:4c:95:02:4f:
c9:df:3e:66:e7:1a:fb:4b:3c:24:83:0c:9c:61:e8:e2:58:51:
b8:fe:2c:be:dd:b3:a4:02:3a:bd:a2:1d:c5:af:e3:fe:fb:04:
30:d0:2e:7d:dd:de:2b:31:58:3d:96:d2:f1:bf:62:b9:8d:92:
74:2e:a2:32:a4:79:ca:52:7c:bc:43:e1:50:6f:f8:bc:84:7f:
cd:98:c3:ab:af:37:e4:f3:15:9c:ae:41:d6:c1:80:3c:93:08:
a4:e6:fe:b5:c8:42:da:f5:0a:c2:6f:ad:96:58:6b:9e:b8:bf:
9a:c2:3f:38:04:f4:75:b8:80:86:f8:1f:8c:07:2a:63:f7:21:
1a:6f:31:d0:76:53:e8:b1:a7:41:56:fa:29:aa:b5:65:4a:97:
4d:3c:82:77:0a:53:b3:72:7c:b2:59:c3:fe:fe:99:ae:5a:33:
c3:d5:b0:c3:b7:41:6c:13:e2:f0:f5:e0:88:2a:14:83:56:4c:
75:ff:12:c8:4a:78:3c:a1:39:e5:d0:53:5d:a1:d5:fb:06:c0:
b1:78:20:03:5c:c8:b1:e8:d6:4c:c7:9c:14:28:dd:42:6d:13:
26:8e:3e:87:75:c9:5b:2d:28:dc:09:51:68:ff:52:62:62:ba:
51:93:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:46:36 2026 by rpki-client