Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          99gfTYdtranQ8UIMVl0FSEciigyhV9SAzc9xdiDmTRQ=
Subject key identifier:   5D:C3:46:7E:38:37:A0:82:40:7B:DF:66:87:F6:FC:5D:9F:9A:04:67
Certificate issuer:       /CN=EE62537B84730FEF19A4F83414308039BC848047
Certificate serial:       7B8002A8537E51C102F0A5E32DD19A46C8A558B2
Authority key identifier: EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS13335.roa
Signing time:             Mon 02 Nov 2026 11:47:41 +0000
ROA not before:           Mon 02 Nov 2026 11:42:41 +0000
ROA not after:            Mon 01 Nov 2027 11:47:41 +0000
asID:                     13335
IP address blocks:        79.182.131.0/24 maxlen: 24
                          79.183.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EF023FDC2BBA283513C6A587F907770B26EFF569.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wI_3Cu6KDUTxqWH-Qd3Cybv9Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Nov 2026 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:80:02:a8:53:7e:51:c1:02:f0:a5:e3:2d:d1:9a:46:c8:a5:58:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE62537B84730FEF19A4F83414308039BC848047
        Validity
            Not Before: Nov  2 11:42:41 2026 GMT
            Not After : Nov  1 11:47:41 2027 GMT
        Subject: CN=5DC3467E3837A082407BDF6687F6FC5D9F9A0467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:4c:10:0e:62:93:8f:13:2f:c9:6a:1a:0c:
                    71:9b:7c:68:7e:85:a7:18:45:03:a9:69:46:18:f0:
                    05:dc:e6:38:ad:78:a1:ca:83:e7:b0:1d:9b:a6:ee:
                    46:7f:ff:ec:46:f6:71:a6:b7:2d:6d:ad:e6:39:d7:
                    e0:a6:f7:0c:93:46:47:69:ac:5c:91:de:fc:f3:11:
                    2d:ff:2a:4e:69:67:ce:1c:2b:63:42:4c:4f:80:f8:
                    78:6d:46:ec:78:9a:8e:57:e6:3d:44:2f:1f:5d:c0:
                    e9:be:30:ba:b0:c0:bc:48:1b:eb:10:50:a9:0a:ec:
                    a6:ff:f2:0f:7b:0b:ed:a3:a0:bd:b4:89:31:ac:96:
                    34:4e:4c:ba:08:44:c5:14:75:a0:ef:62:87:e0:c4:
                    b5:0c:df:48:e9:23:62:bf:e9:d5:97:6a:d5:d5:35:
                    70:2b:e6:94:cc:4f:50:f8:18:72:54:fd:c7:53:55:
                    0f:14:53:68:ea:dc:6c:40:81:e7:e0:13:2c:dc:40:
                    55:b8:79:cf:13:59:24:8e:67:24:8b:15:fc:d7:61:
                    dc:4e:a2:93:bd:d1:dd:e2:98:a1:36:44:80:18:dc:
                    56:a9:44:13:14:a5:be:d6:d9:48:4e:0a:86:ca:66:
                    9f:47:35:5a:5e:72:36:95:a4:4f:19:0b:87:05:19:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:46:7E:38:37:A0:82:40:7B:DF:66:87:F6:FC:5D:9F:9A:04:67
            X509v3 Authority Key Identifier:
                keyid:EE:62:53:7B:84:73:0F:EF:19:A4:F8:34:14:30:80:39:BC:84:80:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/EE62537B84730FEF19A4F83414308039BC848047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/496f20a4-260f-40fa-a389-d6cad2dc0fbd/0/EE62537B84730FEF19A4F83414308039BC848047.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/67144479-709e-44cf-b263-6b10cd3bc173/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.182.131.0/24
                  79.183.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:40:b3:0e:10:5e:eb:c8:19:b8:f3:ff:0d:43:78:ab:81:d6:
         aa:05:36:aa:80:c8:ca:12:de:19:23:4f:6c:eb:61:f7:f0:da:
         e5:c5:fb:4a:78:50:d0:d0:9f:c7:35:81:61:5c:f7:8e:1d:c6:
         ac:fa:a5:8a:ff:e6:df:2a:73:1c:14:50:ac:7f:86:1e:ff:c1:
         34:e6:9a:90:77:e6:ef:01:33:f5:e8:3e:9e:97:25:1d:ea:75:
         8c:31:a4:9b:80:0a:6d:03:0e:34:75:86:23:ac:c8:e4:84:c1:
         d6:52:0e:41:6e:11:2e:b5:e1:83:e8:14:27:9b:2f:c5:e9:c3:
         03:8b:4f:98:41:ad:2d:8b:26:5f:74:53:71:ea:66:0b:b7:f5:
         5a:65:b0:af:04:7e:26:2b:e9:11:01:94:5c:e1:25:0e:f9:14:
         16:8d:7b:8f:c5:93:db:0c:1d:6d:eb:59:58:50:48:78:58:ea:
         2f:53:01:db:b7:02:cf:ff:e9:90:56:24:88:81:93:67:9f:20:
         b1:fb:ce:e1:dc:d9:66:9e:02:42:c6:68:77:f0:12:15:48:23:
         f4:ef:f4:1b:a0:7e:25:d8:5b:3d:95:db:ca:24:16:d8:f3:a6:
         f6:11:39:e0:74:7f:b9:95:18:e0:d2:94:f8:ca:a8:78:19:c5:
         fd:3b:38:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:50:49 2026 by rpki-client