Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: YX9YfQGt5z781gZMiTnmuivBnKEOnQcOw4ypfW5NDo8=
Subject key identifier: 39:95:77:F6:63:EB:89:63:8B:0E:CF:7A:2D:81:02:A7:BB:94:D5:A2
Certificate issuer: /CN=ef023fdc2bba283513c6a587f907770b26eff569
Certificate serial: 4A0CC0E36C06EB00E3DACD4E6EB8C2575FFF2AAA
Authority key identifier: EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13335.roa
Signing time: Mon 05 Oct 2026 07:38:15 +0000
ROA not before: Mon 05 Oct 2026 07:33:15 +0000
ROA not after: Mon 04 Oct 2027 07:38:15 +0000
asID: 13335
IP address blocks: 109.66.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:0c:c0:e3:6c:06:eb:00:e3:da:cd:4e:6e:b8:c2:57:5f:ff:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef023fdc2bba283513c6a587f907770b26eff569
Validity
Not Before: Oct 5 07:33:15 2026 GMT
Not After : Oct 4 07:38:15 2027 GMT
Subject: CN=399577F663EB89638B0ECF7A2D8102A7BB94D5A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:a0:a3:de:b2:1b:52:bb:4f:cb:e2:a2:d5:
7d:b2:d7:08:b3:83:f2:5a:f9:26:0f:aa:c1:22:52:
32:92:19:10:cb:0d:29:d3:5b:50:e8:2c:8a:b9:96:
ab:8a:6d:1a:44:23:98:e8:d4:a1:e8:92:19:48:9c:
e7:1f:0f:ab:0b:32:c6:75:18:ec:e6:f0:7f:8c:5a:
58:eb:87:37:fe:10:e1:b5:65:f0:86:2c:05:53:5e:
8c:d9:42:a5:7e:b0:34:4f:29:90:a4:a7:0a:21:07:
a6:84:9f:b2:33:f5:da:b1:1b:da:25:55:dd:91:ad:
6b:e0:5a:c5:8f:05:43:29:60:7f:cc:94:cc:7f:44:
0a:0b:97:dd:05:33:c4:c9:13:01:a0:49:07:59:33:
24:88:e0:3e:ed:45:47:b3:cb:8c:56:29:23:e9:dd:
32:50:aa:bb:8a:91:63:d4:37:29:e0:51:71:8b:40:
40:b5:3e:db:58:f3:15:00:02:ca:7e:49:ce:6d:b2:
b8:6f:a8:e9:ad:4d:20:91:8c:29:f8:71:81:c0:ce:
cb:8f:70:bb:5e:22:24:ce:32:6c:1d:06:30:5f:6f:
ff:e5:70:f6:69:de:88:2e:a6:28:fa:92:60:43:ef:
13:12:3b:90:41:55:fb:12:79:0e:45:a1:db:9a:d7:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:77:F6:63:EB:89:63:8B:0E:CF:7A:2D:81:02:A7:BB:94:D5:A2
X509v3 Authority Key Identifier:
keyid:EF:02:3F:DC:2B:BA:28:35:13:C6:A5:87:F9:07:77:0B:26:EF:F5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.226.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:86:6e:83:b3:f5:0c:68:35:c2:68:e3:ef:95:f6:b3:47:b3:
eb:ff:f0:79:b5:cc:c6:67:cd:ce:0b:82:12:d9:35:49:fd:40:
4b:77:ad:01:02:a0:40:dc:33:21:50:76:ea:bb:c8:e5:88:50:
b8:e3:12:2b:d9:45:06:71:78:34:4f:d5:e9:93:64:5e:ae:7e:
42:1e:81:3e:83:2e:82:fe:c4:ab:17:dd:31:7d:b0:6e:0a:bf:
3a:52:cc:d4:4e:64:a4:6c:66:6e:ee:28:2c:b1:4d:7f:16:30:
0b:94:2d:d7:c0:31:87:1f:b1:21:20:71:ba:73:68:6f:bf:90:
3d:eb:2b:41:92:62:78:f8:c4:f0:76:55:0e:2d:60:9f:a1:71:
1e:dc:4b:66:70:50:92:b9:f1:8e:aa:73:59:d2:d4:69:32:82:
30:30:20:fe:05:ce:f7:ef:76:e8:87:96:19:58:5d:c0:0c:9d:
99:83:27:65:01:19:99:ad:0e:0b:dc:50:58:ca:14:3b:71:a4:
d1:d8:dd:d8:5d:a3:74:47:03:00:53:91:c7:6d:62:b9:71:fe:
e5:5f:dd:4c:f2:1f:06:0a:f4:fa:e9:0d:ca:65:5f:66:5d:e7:
b2:e5:ca:92:47:91:e6:ae:fa:8a:34:bb:93:92:87:11:f6:d9:
0e:cf:80:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:02 2026 by rpki-client