Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 8U/e2gfhu4k0keuA8h+aYYDobCchB7hRA5MKoZL7nzU=
Subject key identifier: 16:CD:23:86:83:6F:85:45:E7:32:5D:F7:5F:52:AC:A2:FE:E7:5E:8E
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 31C1BE5DF53EA636F3CCBBAEB49F74A2FE31E5EC
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS13335.roa
Signing time: Fri 11 Sep 2026 12:49:35 +0000
ROA not before: Fri 11 Sep 2026 12:44:35 +0000
ROA not after: Fri 10 Sep 2027 12:49:35 +0000
asID: 13335
IP address blocks: 82.139.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c1:be:5d:f5:3e:a6:36:f3:cc:bb:ae:b4:9f:74:a2:fe:31:e5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 11 12:44:35 2026 GMT
Not After : Sep 10 12:49:35 2027 GMT
Subject: CN=16CD2386836F8545E7325DF75F52ACA2FEE75E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:94:73:2f:8d:d2:ae:cf:be:e5:b7:23:fa:
f8:9d:1c:76:78:08:76:65:76:9e:fa:3e:86:f1:01:
fe:54:99:a5:1d:44:3f:e7:7a:cc:b8:92:79:4d:1f:
dd:2b:90:cc:de:a5:ff:26:57:64:4f:94:1f:0a:8f:
e2:39:88:0b:e3:db:35:81:d7:80:d1:00:0b:c5:37:
e1:11:b8:3f:5b:23:62:75:12:67:4f:de:5a:1f:12:
fe:d8:73:8c:e9:f7:f1:fc:76:6e:71:eb:49:0c:5a:
f1:e3:2b:dc:0f:f5:b8:51:0c:02:cc:5b:d0:00:56:
2b:6f:22:d6:65:da:45:1e:d1:56:ba:67:e7:21:4f:
60:26:c6:ea:ea:6f:16:56:e6:0c:e5:2f:e5:c9:88:
73:36:4f:54:31:e7:32:82:47:f8:c7:3e:ff:ea:dc:
8b:f8:f9:49:81:dc:62:60:eb:51:07:31:0e:4c:4d:
5d:69:23:e2:8b:2d:5a:3a:49:23:aa:37:02:d8:16:
eb:76:c5:22:5e:ad:3e:b6:c9:dc:d6:38:60:39:0a:
59:9d:a8:91:ca:b6:0a:1b:5b:d2:0e:61:9a:b0:ca:
6b:e8:7c:d3:21:58:67:e0:65:54:1d:9e:f6:30:e8:
7e:7c:5a:8c:64:e8:d7:8d:36:8d:d0:82:d1:d6:88:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CD:23:86:83:6F:85:45:E7:32:5D:F7:5F:52:AC:A2:FE:E7:5E:8E
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:6d:cd:a8:20:89:27:c7:4f:ac:66:58:d3:9b:d9:61:79:39:
c8:41:23:be:26:1b:fb:f0:f9:12:83:61:3d:72:de:da:73:4b:
d9:23:d1:bd:f0:46:58:09:67:77:9e:a2:df:81:35:54:14:87:
be:95:52:12:3e:4b:c6:e8:b7:d6:10:a9:95:5f:aa:f6:1a:af:
24:b9:27:d6:f9:9c:17:54:75:75:fe:db:b7:cc:35:93:5f:9c:
ee:56:55:b8:ec:7d:05:f5:df:24:c3:4e:b1:8d:b8:31:e5:80:
f2:d2:73:15:47:54:b8:f2:ab:ef:8d:c5:36:d6:37:09:1e:bf:
6e:28:30:dd:54:32:fb:32:f5:97:99:1b:59:ea:fd:6c:95:db:
0f:66:d4:76:4e:4f:85:8c:c4:a1:5a:9d:04:96:13:42:b2:13:
44:e8:43:cf:6d:ed:f1:40:47:80:2f:53:2c:24:d6:1e:8c:33:
bd:a7:a6:8c:24:29:cb:db:d0:db:be:fc:77:b6:79:0c:56:65:
29:9d:f1:45:a5:e7:40:0c:0b:c8:92:7f:4c:5d:37:41:bd:e5:
4d:28:23:af:a3:9c:64:d9:a1:03:1f:d0:4a:e9:3d:a8:06:73:
f1:24:e2:84:1a:77:aa:e2:08:52:7f:f4:a4:a8:8e:6e:b1:30:
e5:b0:c5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:22:50 2026 by rpki-client