Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13444.roa
File: AS13444.roa (raw, json)
Hash identifier: FVD69YVWmm0jmqBTbqkZ/Afh5nvXj3WsMqG5vuNmr5I=
Subject key identifier: 74:6F:A6:CB:A7:7D:CB:D1:5F:35:29:40:DB:49:D0:56:F9:F8:21:F9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 762AFDB046AC5D8F9DBC8D439FDA400C6004A9D4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13444.roa
Signing time: Fri 17 Apr 2026 07:47:05 +0000
ROA not before: Fri 17 Apr 2026 07:42:05 +0000
ROA not after: Fri 16 Apr 2027 07:47:05 +0000
asID: 13444
IP address blocks: 191.101.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2a:fd:b0:46:ac:5d:8f:9d:bc:8d:43:9f:da:40:0c:60:04:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 17 07:42:05 2026 GMT
Not After : Apr 16 07:47:05 2027 GMT
Subject: CN=746FA6CBA77DCBD15F352940DB49D056F9F821F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:98:9b:48:70:8a:0a:eb:76:77:a2:2b:02:
d7:f3:70:d7:37:a6:8c:40:39:da:88:b5:c0:b9:6d:
a4:55:14:2c:b4:b0:ce:46:26:fb:4d:4c:0a:d1:5e:
5e:79:1d:78:1b:60:90:e3:55:eb:70:29:19:3e:ab:
85:0c:d0:59:40:d4:da:41:9c:33:b7:4f:66:31:66:
f9:8b:f7:64:8c:4e:29:03:e7:6b:9f:63:9b:85:e6:
1e:73:0c:2e:8c:90:2e:2d:16:76:72:08:72:ef:21:
71:f7:23:e9:ff:cc:6e:90:a0:4b:ed:0d:9a:81:ef:
01:a8:3d:aa:32:dd:fc:53:36:e2:f3:1f:d7:ef:97:
db:6b:cd:ba:4d:82:e9:e7:39:02:aa:e3:66:48:bc:
3c:d5:ce:1f:9b:b0:8c:e9:7a:16:e0:4a:ea:f5:26:
16:5c:92:ff:04:06:8e:a7:85:50:10:a4:83:58:01:
66:88:8b:38:cc:cb:e0:c1:c2:a4:16:05:cb:2d:70:
0f:c1:7d:46:b4:43:f7:8f:de:a1:d1:83:7f:f8:47:
25:5e:5e:1b:5f:73:c3:d5:c0:8d:94:3e:5e:a4:ee:
96:8e:8a:5b:51:3f:b9:9b:83:ff:f1:0e:bb:0c:52:
d3:2d:b4:b1:06:b2:49:3e:8c:f3:f9:b8:cb:40:fb:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:A6:CB:A7:7D:CB:D1:5F:35:29:40:DB:49:D0:56:F9:F8:21:F9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13444.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.179.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f7:39:8f:73:c4:00:f3:85:4e:78:ba:bc:78:92:ad:7f:cf:
ec:db:f3:09:a1:b0:47:ac:dd:ec:4c:0e:5d:f3:84:46:b0:31:
82:a9:38:27:ca:41:3b:1b:67:11:64:e1:fa:5e:11:94:7e:d4:
aa:8a:92:d4:4a:69:b5:fc:42:d3:57:48:63:61:c3:2a:8d:69:
20:17:ed:6f:e6:41:09:18:55:9f:40:0f:4b:8b:65:24:65:ee:
98:1f:be:29:9b:4c:f8:13:18:15:20:e2:15:d7:a8:60:7c:c4:
98:4e:8a:26:96:d2:a7:eb:67:de:a1:a0:ed:52:11:ad:f8:81:
45:af:7e:ce:74:fe:8b:b2:23:43:1f:6a:eb:a2:a6:cf:a8:ce:
47:ff:f3:85:d3:54:6d:61:e0:25:ee:92:13:9f:aa:7c:22:32:
81:28:6d:83:26:e1:6c:24:90:f2:21:ac:be:4d:4b:ef:89:73:
be:14:e5:8e:4e:9f:72:9a:59:1f:e2:8c:bc:76:41:a4:d7:af:
3f:97:d9:6d:55:fe:c7:c9:b1:80:78:a6:a2:74:fe:05:6a:3c:
2d:cf:34:25:21:29:85:8e:d9:97:de:e2:25:46:6d:94:a4:d0:
82:eb:45:b8:09:7d:e5:20:9f:94:69:3b:a1:43:58:9f:81:b0:
56:e3:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:15:10 2026 by rpki-client