Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: fe5olAtDhUFSB6xMd5DV3FT2TVv+eXjldRXgfP9EOfM=
Subject key identifier: B2:60:01:CB:B3:C8:F1:64:29:42:66:B7:60:CA:C9:94:93:D1:1F:55
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 08D0344ACB2495CBF50EA6D1D49ADAEA5A27ECD2
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
Signing time: Tue 20 Jan 2026 10:27:39 +0000
ROA not before: Tue 20 Jan 2026 10:22:39 +0000
ROA not after: Tue 19 Jan 2027 10:27:39 +0000
asID: 13335
IP address blocks: 5.252.81.0/24 maxlen: 24
181.215.196.0/24 maxlen: 24
185.158.133.0/24 maxlen: 24
191.96.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d0:34:4a:cb:24:95:cb:f5:0e:a6:d1:d4:9a:da:ea:5a:27:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 20 10:22:39 2026 GMT
Not After : Jan 19 10:27:39 2027 GMT
Subject: CN=B26001CBB3C8F164294266B760CAC99493D11F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:d3:b7:a6:fc:2d:95:5b:9b:22:c7:3d:6a:
98:97:39:56:96:81:50:48:f0:ab:ae:bb:ee:ab:a3:
26:69:14:0c:4e:6b:ed:82:c9:1e:4a:49:14:18:c1:
94:c8:12:db:ee:25:c9:5c:76:a1:95:86:65:a8:46:
cc:04:27:d2:db:53:a4:53:1f:db:ec:b2:61:15:5d:
6f:59:ee:8d:d1:e6:6a:85:22:74:a9:3c:7c:38:23:
c6:58:3e:f1:57:0d:4a:91:de:d8:54:f9:b9:f1:87:
3e:75:08:4e:27:7d:02:92:da:49:0c:9e:96:68:e3:
14:73:4f:96:27:72:c3:ab:5c:2d:7e:27:51:91:c4:
cf:42:ac:f9:3a:75:4a:b5:4a:9a:ff:36:50:f6:10:
02:37:4d:9c:63:21:00:f3:1d:4b:11:d8:3c:4b:aa:
18:22:6c:d5:4c:5b:e0:32:d1:75:b4:7b:41:5c:42:
be:c8:82:06:47:74:c8:15:ea:72:d8:5b:4f:ca:f2:
73:69:3b:57:3c:2e:05:df:94:07:ed:f0:be:e2:9a:
2e:b8:79:ec:08:7a:28:c6:2c:59:0e:99:6b:8c:45:
51:27:c4:c4:5e:23:98:5e:54:f4:93:2f:73:7f:12:
4c:01:0a:13:02:a4:73:47:8f:21:db:6a:92:fc:f2:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:60:01:CB:B3:C8:F1:64:29:42:66:B7:60:CA:C9:94:93:D1:1F:55
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.81.0/24
181.215.196.0/24
185.158.133.0/24
191.96.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:43:36:7b:f6:9e:33:e0:63:e0:e9:21:dd:82:19:aa:af:ae:
47:6b:cc:1a:e3:8a:51:1d:df:fc:25:18:86:0b:ad:5e:c3:a2:
5c:5c:c9:96:e5:0c:6d:42:8d:75:10:62:d5:32:58:f3:1f:0c:
b8:a3:16:a0:16:55:27:12:ec:a9:b4:be:a3:b0:c6:b1:78:0c:
9d:20:17:5a:b0:72:74:43:b7:eb:a1:de:82:68:34:77:d2:33:
7b:10:a5:1a:a5:c4:19:92:b1:d2:04:3d:83:d7:8c:8c:ef:a0:
f7:02:e8:f8:8e:1a:74:55:e5:0f:c7:56:02:2c:cb:c4:a0:80:
49:6a:70:c7:1d:3c:e1:cd:23:88:e0:e1:5e:77:a5:11:21:b9:
c9:10:5c:b9:d6:07:e3:a0:36:41:d7:98:8d:2f:41:f4:1e:0d:
93:c7:40:3c:7a:74:20:e4:aa:c5:6f:41:03:e0:45:7f:ea:46:
d9:42:aa:72:fb:1f:98:98:16:49:61:e6:25:5b:05:0b:f5:ae:
6d:58:93:61:ec:a0:23:f0:fd:61:56:3c:16:7d:ea:9d:84:53:
35:46:31:64:65:77:0f:df:41:5d:af:56:fa:3d:16:a3:19:15:
c7:d1:b5:7a:36:87:92:bf:32:28:a9:db:f8:86:d2:78:b2:64:
a3:0e:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:56:04 2026 by rpki-client