Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: M4DWCMNpAZ6xaOVf9BzfrcznppzWY7BbqrsWCcMkGn8=
Subject key identifier: AE:4E:97:ED:86:0C:9D:37:D6:96:11:80:90:51:CD:5B:F7:17:89:BA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 390B05971B408EAD17868FC692CD184DBBC99EFC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa
Signing time: Tue 04 Nov 2025 00:02:48 +0000
ROA not before: Mon 03 Nov 2025 23:57:48 +0000
ROA not after: Tue 03 Nov 2026 00:02:48 +0000
asID: 13213
IP address blocks: 2.58.29.0/24 maxlen: 24
5.181.133.0/24 maxlen: 24
45.81.2.0/24 maxlen: 24
45.89.251.0/24 maxlen: 24
45.137.31.0/24 maxlen: 24
45.139.181.0/24 maxlen: 24
109.106.2.0/24 maxlen: 24
130.185.125.0/24 maxlen: 24
179.61.167.0/24 maxlen: 24
179.61.175.0/24 maxlen: 24
179.61.178.0/24 maxlen: 24
179.61.179.0/24 maxlen: 24
179.61.218.0/24 maxlen: 24
179.61.233.0/24 maxlen: 24
181.41.204.0/24 maxlen: 24
181.41.208.0/24 maxlen: 24
181.214.60.0/24 maxlen: 24
181.214.61.0/24 maxlen: 24
181.214.64.0/24 maxlen: 24
181.214.65.0/24 maxlen: 24
181.214.66.0/24 maxlen: 24
181.214.67.0/24 maxlen: 24
181.214.68.0/24 maxlen: 24
181.214.69.0/24 maxlen: 24
181.214.86.0/24 maxlen: 24
181.214.103.0/24 maxlen: 24
181.214.109.0/24 maxlen: 24
181.214.114.0/24 maxlen: 24
181.214.116.0/24 maxlen: 24
181.214.126.0/24 maxlen: 24
181.214.200.0/24 maxlen: 24
181.214.202.0/24 maxlen: 24
181.214.203.0/24 maxlen: 24
181.214.225.0/24 maxlen: 24
181.215.19.0/24 maxlen: 24
181.215.80.0/24 maxlen: 24
181.215.81.0/24 maxlen: 24
181.215.82.0/24 maxlen: 24
181.215.83.0/24 maxlen: 24
181.215.85.0/24 maxlen: 24
181.215.86.0/24 maxlen: 24
181.215.96.0/24 maxlen: 24
181.215.98.0/24 maxlen: 24
181.215.100.0/24 maxlen: 24
181.215.103.0/24 maxlen: 24
181.215.105.0/24 maxlen: 24
181.215.106.0/24 maxlen: 24
181.215.117.0/24 maxlen: 24
181.215.118.0/24 maxlen: 24
181.215.126.0/24 maxlen: 24
181.215.129.0/24 maxlen: 24
181.215.131.0/24 maxlen: 24
181.215.150.0/24 maxlen: 24
181.215.155.0/24 maxlen: 24
181.215.158.0/24 maxlen: 24
181.215.217.0/24 maxlen: 24
185.34.43.0/24 maxlen: 24
185.142.24.0/24 maxlen: 24
185.143.229.0/24 maxlen: 24
185.151.59.0/24 maxlen: 24
185.158.100.0/24 maxlen: 24
185.158.101.0/24 maxlen: 24
185.158.102.0/24 maxlen: 24
185.158.103.0/24 maxlen: 24
185.158.134.0/24 maxlen: 24
191.96.35.0/24 maxlen: 24
191.96.46.0/24 maxlen: 24
191.96.160.0/24 maxlen: 24
191.96.161.0/24 maxlen: 24
191.96.162.0/24 maxlen: 24
191.96.163.0/24 maxlen: 24
191.96.239.0/24 maxlen: 24
191.101.4.0/24 maxlen: 24
191.101.5.0/24 maxlen: 24
191.101.10.0/24 maxlen: 24
191.101.43.0/24 maxlen: 24
191.101.99.0/24 maxlen: 24
191.101.119.0/24 maxlen: 24
191.101.159.0/24 maxlen: 24
191.101.167.0/24 maxlen: 24
191.101.225.0/24 maxlen: 24
191.101.255.0/24 maxlen: 24
213.109.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0b:05:97:1b:40:8e:ad:17:86:8f:c6:92:cd:18:4d:bb:c9:9e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 3 23:57:48 2025 GMT
Not After : Nov 3 00:02:48 2026 GMT
Subject: CN=AE4E97ED860C9D37D69611809051CD5BF71789BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:b7:2f:70:78:e3:5d:fe:67:81:0b:52:e2:
4a:2b:40:32:8a:ab:20:1c:f0:2e:b1:41:8e:7a:75:
6f:a6:20:e3:9d:1a:f3:d5:bb:ec:69:9d:65:a2:26:
e2:d7:f6:4e:f9:26:fe:a3:31:35:f3:ac:98:95:57:
fe:bb:21:fc:40:ec:96:9c:45:b6:e7:ed:e4:f2:a8:
28:b4:57:a5:57:d1:61:20:1b:1b:1f:12:aa:9c:bc:
f7:25:69:9d:09:01:f7:f7:7e:06:a2:92:8e:88:dc:
f1:29:76:d1:6e:f4:e3:b4:a2:7e:dd:09:93:f5:7d:
13:3c:5d:3e:91:00:00:5c:82:a8:38:d9:b8:e9:41:
e2:d4:47:ea:05:a1:36:2e:fe:5b:f0:c9:ba:98:03:
2c:20:97:9a:85:5b:d6:c1:91:6b:2c:9e:35:8e:7a:
75:a5:ff:3b:b5:bd:52:dd:d8:14:1c:59:74:8c:33:
72:34:9c:8a:14:e3:28:aa:b1:2d:12:02:90:27:b9:
da:6e:c5:92:a5:c9:20:c7:20:a0:cd:8c:e1:d4:0f:
fc:c2:5e:f1:e9:e9:62:54:e2:31:7a:cf:fa:c2:5d:
34:a7:c5:56:6a:04:21:2e:7e:d1:8d:fb:af:d8:d7:
dc:bc:b1:42:5a:41:69:dd:44:6c:3b:bf:dd:f3:40:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:97:ED:86:0C:9D:37:D6:96:11:80:90:51:CD:5B:F7:17:89:BA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.29.0/24
5.181.133.0/24
45.81.2.0/24
45.89.251.0/24
45.137.31.0/24
45.139.181.0/24
109.106.2.0/24
130.185.125.0/24
179.61.167.0/24
179.61.175.0/24
179.61.178.0/23
179.61.218.0/24
179.61.233.0/24
181.41.204.0/24
181.41.208.0/24
181.214.60.0/23
181.214.64.0-181.214.69.255
181.214.86.0/24
181.214.103.0/24
181.214.109.0/24
181.214.114.0/24
181.214.116.0/24
181.214.126.0/24
181.214.200.0/24
181.214.202.0/23
181.214.225.0/24
181.215.19.0/24
181.215.80.0/22
181.215.85.0-181.215.86.255
181.215.96.0/24
181.215.98.0/24
181.215.100.0/24
181.215.103.0/24
181.215.105.0-181.215.106.255
181.215.117.0-181.215.118.255
181.215.126.0/24
181.215.129.0/24
181.215.131.0/24
181.215.150.0/24
181.215.155.0/24
181.215.158.0/24
181.215.217.0/24
185.34.43.0/24
185.142.24.0/24
185.143.229.0/24
185.151.59.0/24
185.158.100.0/22
185.158.134.0/24
191.96.35.0/24
191.96.46.0/24
191.96.160.0/22
191.96.239.0/24
191.101.4.0/23
191.101.10.0/24
191.101.43.0/24
191.101.99.0/24
191.101.119.0/24
191.101.159.0/24
191.101.167.0/24
191.101.225.0/24
191.101.255.0/24
213.109.171.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c3:6b:2d:4a:3f:dd:1b:66:26:4f:0c:92:54:85:bb:4f:0e:
a3:0f:8d:e7:38:8d:75:9e:f1:b5:0e:0f:80:83:73:77:8a:ca:
51:76:08:59:df:90:ba:74:72:37:4c:eb:46:33:7b:99:a6:27:
a5:09:6e:29:01:7c:e8:8c:9b:0a:eb:c5:70:3a:fd:b6:6e:50:
7f:c7:e6:53:28:b2:19:97:9b:78:92:df:9a:82:22:ad:6d:0d:
2e:0c:6e:0a:f3:c1:c9:b1:c2:ad:0d:62:bd:0c:da:c5:9b:69:
cc:66:cf:66:38:79:ee:ac:c6:6e:a0:c5:cc:b1:93:9e:50:03:
1d:f4:58:80:97:95:85:dc:c3:ce:7e:0a:7d:c2:61:2a:d5:89:
66:bd:4d:a3:6e:09:04:f9:e9:44:ea:da:34:11:39:5f:8c:04:
29:44:06:3a:cf:17:3a:b1:8c:89:14:95:a1:15:2e:df:09:4a:
3f:d6:de:40:46:85:91:b4:12:7f:e1:82:56:7a:70:8b:57:ff:
6a:18:51:56:03:90:d6:46:c5:76:03:5b:fd:2a:a5:fc:37:a5:
5b:79:17:87:8d:17:45:44:4b:84:1a:87:98:9f:4b:7f:7c:72:
ae:10:73:57:6a:bf:31:89:9d:c4:f6:4e:0a:29:e7:11:7d:d2:
62:97:91:ac
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgIUOQsFlxtAjq0Xho/Gks0YTbvJnvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTExMDMyMzU3NDhaFw0yNjExMDMwMDAyNDhaMDMxMTAvBgNV
BAMTKEFFNEU5N0VEODYwQzlEMzdENjk2MTE4MDkwNTFDRDVCRjcxNzg5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaLLcvcHjjXf5ngQtS4korQDKK
qyAc8C6xQY56dW+mIOOdGvPVu+xpnWWiJuLX9k75Jv6jMTXzrJiVV/67IfxA7Jac
Rbbn7eTyqCi0V6VX0WEgGxsfEqqcvPclaZ0JAff3fgaiko6I3PEpdtFu9OO0on7d
CZP1fRM8XT6RAABcgqg42bjpQeLUR+oFoTYu/lvwybqYAywgl5qFW9bBkWssnjWO
enWl/zu1vVLd2BQcWXSMM3I0nIoU4yiqsS0SApAnudpuxZKlySDHIKDNjOHUD/zC
XvHp6WJU4jF6z/rCXTSnxVZqBCEuftGN+6/Y19y8sUJaQWndRGw7v93zQGuTAgMB
AAGjggOhMIIDnTAdBgNVHQ4EFgQUrk6X7YYMnTfWlhGAkFHNW/cXibowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTMyMTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwggG1BggrBgEFBQcBBwEB/wSCAaQwggGgMIIBnAQCAAEw
ggGUAwQAAjodAwQABbWFAwQALVECAwQALVn7AwQALYkfAwQALYu1AwQAbWoCAwQA
grl9AwQAsz2nAwQAsz2vAwQBsz2yAwQAsz3aAwQAsz3pAwQAtSnMAwQAtSnQAwQB
tdY8MAwDBAa11kADBAG11kQDBAC11lYDBAC11mcDBAC11m0DBAC11nIDBAC11nQD
BAC11n4DBAC11sgDBAG11soDBAC11uEDBAC11xMDBAK111AwDAMEALXXVQMEALXX
VgMEALXXYAMEALXXYgMEALXXZAMEALXXZzAMAwQAtddpAwQAtddqMAwDBAC113UD
BAC113YDBAC1134DBAC114EDBAC114MDBAC115YDBAC115sDBAC1154DBAC119kD
BAC5IisDBAC5jhgDBAC5j+UDBAC5lzsDBAK5nmQDBAC5noYDBAC/YCMDBAC/YC4D
BAK/YKADBAC/YO8DBAG/ZQQDBAC/ZQoDBAC/ZSsDBAC/ZWMDBAC/ZXcDBAC/ZZ8D
BAC/ZacDBAC/ZeEDBAC/Zf8DBADVbaswDQYJKoZIhvcNAQELBQADggEBAAHDay1K
P90bZiZPDJJUhbtPDqMPjec4jXWe8bUOD4CDc3eKylF2CFnfkLp0cjdM60Yze5mm
J6UJbikBfOiMmwrrxXA6/bZuUH/H5lMoshmXm3iS35qCIq1tDS4Mbgrzwcmxwq0N
Yr0M2sWbacxmz2Y4ee6sxm6gxcyxk55QAx30WICXlYXcw85+Cn3CYSrViWa9TaNu
CQT56UTq2jQROV+MBClEBjrPFzqxjIkUlaEVLt8JSj/W3kBGhZG0En/hglZ6cItX
/2oYUVYDkNZGxXYDW/0qpfw3pVt5F4eNF0VES4Qah5ifS398cq4Qc1dqvzGJncT2
Tgop5xF90mKXkaw=
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:09 2025 by rpki-client