Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: 9xuB8jUa0XlZVLeXCd+xsv2dLYqbEsnLCQmfqht5tSY=
Subject key identifier: 3A:99:8E:33:17:3D:15:30:23:56:74:4E:11:28:36:5E:F2:E8:3B:3D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0B18149498CBAB33A5B0CE7B9730239C3DA519C4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13335.roa
Signing time: Sun 12 Apr 2026 15:37:26 +0000
ROA not before: Sun 12 Apr 2026 15:32:26 +0000
ROA not after: Sun 11 Apr 2027 15:37:26 +0000
asID: 13335
IP address blocks: 82.21.82.0/24 maxlen: 24
82.22.16.0/24 maxlen: 24
82.24.40.0/24 maxlen: 24
82.26.156.0/24 maxlen: 24
82.39.142.0/24 maxlen: 24
82.40.22.0/24 maxlen: 24
84.75.180.0/23 maxlen: 24
178.83.176.0/24 maxlen: 24
2a13:9500:3e::/48 maxlen: 48
2a13:9500:b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:18:14:94:98:cb:ab:33:a5:b0:ce:7b:97:30:23:9c:3d:a5:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 12 15:32:26 2026 GMT
Not After : Apr 11 15:37:26 2027 GMT
Subject: CN=3A998E33173D15302356744E1128365EF2E83B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:16:a2:e8:85:c8:0f:f5:7e:9f:55:5b:c3:
5b:e8:fe:8a:19:b9:40:f8:ea:eb:7e:2d:99:34:30:
f6:c1:75:67:e9:91:91:07:75:b4:b8:64:6f:a0:3f:
f3:d8:6c:98:b7:4e:d8:dc:0f:28:7c:ee:a1:93:5e:
f1:73:df:d0:90:cb:db:54:05:52:6b:ff:5b:38:e1:
a6:6d:bf:7c:1d:2c:b8:09:52:d9:97:ea:6f:74:d3:
a5:06:bd:bf:9d:bb:45:16:7e:6d:1e:aa:78:f1:0f:
ce:1f:07:d1:9a:c0:73:57:42:6c:28:39:0c:a0:c1:
f8:5f:c1:73:64:95:ea:3d:3f:74:6d:ef:d2:73:2a:
d0:45:3d:dd:f9:72:f7:eb:bd:e6:1f:90:6b:a7:17:
f7:0a:b2:44:e8:9c:81:be:c9:e9:20:b3:e5:f0:10:
72:60:50:5f:a0:16:53:00:16:be:29:bc:57:8b:7b:
2d:ec:54:c3:04:2f:23:7e:90:4e:8e:e9:9f:0a:5c:
86:23:3b:a8:e0:18:6c:c7:8f:2d:86:ad:8e:90:ce:
f6:d6:56:c7:74:69:98:f2:57:07:06:9f:83:f0:19:
8b:1f:16:40:90:53:53:a7:5e:7b:a9:af:54:b4:21:
56:ef:86:fc:4f:dc:49:d5:bb:4e:b0:b6:a2:9a:5b:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:8E:33:17:3D:15:30:23:56:74:4E:11:28:36:5E:F2:E8:3B:3D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.82.0/24
82.22.16.0/24
82.24.40.0/24
82.26.156.0/24
82.39.142.0/24
82.40.22.0/24
84.75.180.0/23
178.83.176.0/24
IPv6:
2a13:9500:3e::/48
2a13:9500:b7::/48
Signature Algorithm: sha256WithRSAEncryption
89:00:ff:40:a4:73:9d:fd:be:90:c7:dc:51:77:5f:bf:f3:b0:
a9:2f:6d:71:13:c9:78:39:ee:0c:24:79:84:a2:f4:06:7f:38:
c6:ee:3d:f5:90:79:3c:f3:95:29:1c:63:02:34:a6:89:23:35:
d1:f9:f2:26:f5:b7:da:70:60:11:b3:bd:47:bc:89:96:fe:b5:
70:91:b2:a2:d9:ee:3d:42:8c:b2:d1:7a:5d:e7:a9:ce:4c:6f:
ce:31:63:72:ec:07:dc:55:5d:96:14:58:95:dc:de:b5:7b:39:
be:f2:64:1a:69:0a:8a:83:82:67:e7:1c:22:36:42:e5:57:ad:
3b:dc:ba:fa:39:c1:42:af:8d:c9:8d:3e:67:1c:eb:41:42:64:
d5:9c:df:5f:2f:1e:f4:e2:69:86:a3:18:c1:5e:55:93:f9:55:
18:f5:c3:02:c0:13:89:1b:96:97:16:bc:5c:2b:d2:f3:83:36:
03:04:ef:76:bb:6c:c2:cb:6b:13:6f:e3:82:a1:77:e0:00:f2:
bf:b5:20:0c:19:49:4c:8c:93:0e:33:1c:85:60:9b:35:cb:dd:
7f:93:74:3a:fe:f3:cd:2e:bb:fe:d6:69:bc:7d:89:92:07:fb:
50:36:13:e2:aa:17:af:ab:e2:5b:72:25:58:90:c4:4a:e6:09:
6b:ba:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:50 2026 by rpki-client