Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: UVPZm8dw19UY6DmiWiFDzhR/8ZKYRISJp36FAoWOzxc=
Subject key identifier: 85:E6:AD:6F:0B:F0:E8:BB:97:90:7D:1A:AD:DA:68:40:65:E1:B7:EC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1EEDD59334CCC28F2D9A08E81AC620F0412773EF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
Signing time: Fri 03 Apr 2026 15:58:15 +0000
ROA not before: Fri 03 Apr 2026 15:53:15 +0000
ROA not after: Fri 02 Apr 2027 15:58:15 +0000
asID: 13335
IP address blocks: 5.252.81.0/24 maxlen: 24
181.215.196.0/24 maxlen: 24
185.158.133.0/24 maxlen: 24
191.96.81.0/24 maxlen: 24
191.101.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 15:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ed:d5:93:34:cc:c2:8f:2d:9a:08:e8:1a:c6:20:f0:41:27:73:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 3 15:53:15 2026 GMT
Not After : Apr 2 15:58:15 2027 GMT
Subject: CN=85E6AD6F0BF0E8BB97907D1AADDA684065E1B7EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:20:56:0a:52:21:d3:06:1e:da:c2:be:d8:
98:93:b4:de:9a:e6:a9:7b:63:f8:36:63:a9:96:b9:
30:69:ea:fc:61:83:a1:e7:1e:6c:56:41:84:10:6d:
20:a0:ea:a5:d8:a4:1d:d3:02:eb:e7:fa:47:ce:b8:
ef:e6:8a:c5:2f:35:c4:be:c3:e5:1f:1a:dc:98:f5:
fb:5a:5f:fa:ad:bc:53:84:87:24:ce:13:cd:29:f2:
7a:2b:56:ad:f1:f8:ad:31:9c:a1:e3:1c:2f:4e:cf:
3b:ca:4e:1e:fa:c6:cb:82:52:5e:50:8c:38:10:49:
e1:d4:8b:32:b0:23:81:b2:fd:1b:b0:da:d6:33:02:
49:21:e7:b6:a4:d3:af:2d:17:66:1b:8f:d4:26:7f:
9d:c1:d1:7c:ff:65:35:4c:fd:8e:dd:f1:be:da:a7:
4b:af:da:e2:b7:d7:2e:c0:39:51:01:7d:2c:12:a1:
24:7e:74:06:98:58:81:b3:58:86:bb:8f:9f:cb:b0:
de:ab:00:be:6f:e6:dc:90:98:45:aa:7e:a5:d1:e3:
cb:1b:3e:98:51:c4:7a:17:1e:cb:e2:59:58:b7:49:
7c:ba:00:8a:d6:f8:f1:72:8b:86:44:ae:c3:e5:f9:
83:99:17:13:c8:ff:b0:e9:2c:6b:1d:fe:ee:98:29:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:AD:6F:0B:F0:E8:BB:97:90:7D:1A:AD:DA:68:40:65:E1:B7:EC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.81.0/24
181.215.196.0/24
185.158.133.0/24
191.96.81.0/24
191.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
07:59:72:2d:08:a7:6f:39:eb:26:3b:e1:31:1a:8a:d5:a8:71:
c5:c7:6f:33:1c:72:35:31:51:fe:6f:cc:9c:af:6d:dc:25:e8:
ac:c0:80:51:35:c4:86:af:0a:cd:de:e7:29:1e:30:ee:5d:30:
94:fd:6c:54:ca:0e:33:14:4a:d2:8c:63:73:ff:a6:7a:1e:31:
b5:e1:05:f5:86:fb:6f:c0:95:f0:39:d1:45:cd:c3:88:0d:5e:
5c:8d:62:f2:34:3a:b7:9f:e9:9b:92:42:4f:4a:26:85:60:06:
dd:6d:f3:9b:29:c4:df:03:57:32:22:61:53:de:4a:02:ff:16:
89:ba:b7:44:87:be:49:e8:ee:e0:be:0b:86:83:bf:0e:23:b3:
06:05:8d:c0:5a:35:17:ae:28:b2:cc:ba:53:3e:d8:8f:bc:99:
3e:67:05:0d:c6:3f:c7:6f:d4:42:b5:4c:f0:dd:0c:d5:15:66:
e0:ce:d0:1e:d2:da:18:c1:75:a0:13:cc:9b:b2:10:18:5f:eb:
e5:3e:38:29:eb:f9:fb:83:c3:d6:f3:39:c4:78:17:0a:d0:2a:
b4:28:25:15:da:b9:ec:c4:70:1c:c3:23:ed:f9:bd:44:56:c7:
4b:ad:7c:f1:88:80:4e:2d:38:a5:68:f8:fd:07:15:2f:c4:4b:
2c:e7:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:38:41 2026 by rpki-client