Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS13852.roa
File: AS13852.roa (raw, json)
Hash identifier: Uke4CDlI5ygW36nSqvPG2999PVPfBJwO1pM34rncYRQ=
Subject key identifier: 2C:EF:1A:C6:92:7F:D4:AA:02:74:82:91:D3:7F:64:82:44:A3:E9:7C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3B0FEFD3C417A89DF16F8EFF062FB7234B4E58FD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS13852.roa
Signing time: Tue 04 Nov 2025 01:07:58 +0000
ROA not before: Tue 04 Nov 2025 01:02:58 +0000
ROA not after: Tue 03 Nov 2026 01:07:58 +0000
asID: 13852
IP address blocks: 2a0f:85c1:b10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0f:ef:d3:c4:17:a8:9d:f1:6f:8e:ff:06:2f:b7:23:4b:4e:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 4 01:02:58 2025 GMT
Not After : Nov 3 01:07:58 2026 GMT
Subject: CN=2CEF1AC6927FD4AA02748291D37F648244A3E97C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:ff:a1:88:9c:8e:be:1e:5c:e4:1e:34:12:
bb:ae:d4:bc:d6:ac:50:32:0c:27:2f:97:89:41:a5:
5f:fd:46:99:01:71:0a:1e:06:7b:f3:72:28:19:cc:
43:e8:7c:2b:b2:81:44:14:86:4d:80:1c:92:a3:87:
e3:fc:07:55:a9:05:6e:4c:5b:3b:d8:b2:2b:ce:72:
85:80:67:06:bb:da:20:25:9d:bb:65:2e:c2:99:b4:
86:17:c0:d8:41:64:73:84:c5:0d:22:84:a4:5a:db:
83:3a:44:81:e1:f2:d6:43:c8:1c:7c:ae:56:74:4c:
75:0b:e2:9f:8e:98:df:a8:eb:7e:d8:5c:26:51:70:
f8:4e:0b:4e:d8:37:6b:61:95:89:39:d3:b4:ce:4c:
5d:11:7c:13:74:89:50:89:f9:ca:08:d9:67:53:8b:
b9:6a:b6:34:fd:63:18:af:de:fe:4c:15:4f:94:f5:
4b:34:1f:f9:33:1d:c7:f8:c9:ee:4f:e4:08:00:1f:
4e:73:1d:94:1c:a7:c1:b3:cb:ac:a0:ba:33:16:df:
77:12:9f:5a:9a:dd:fd:b8:e2:72:1a:0c:d9:39:99:
f0:7b:25:48:3b:8d:fa:4b:3c:d1:3f:2b:27:32:46:
60:c2:0b:bf:43:77:a1:47:b4:92:6c:65:f7:b8:c6:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EF:1A:C6:92:7F:D4:AA:02:74:82:91:D3:7F:64:82:44:A3:E9:7C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS13852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:b10::/44
Signature Algorithm: sha256WithRSAEncryption
b9:8e:2a:45:70:15:1a:32:6e:d6:9d:49:7d:78:55:77:50:8d:
85:39:d7:cf:9b:38:48:21:0a:fa:45:41:c3:27:7d:df:7b:f3:
a6:65:32:58:18:73:85:0d:e7:6e:ec:f5:6e:58:81:20:98:47:
35:6f:74:0a:a5:f0:68:44:b8:de:87:3d:40:21:84:01:8a:5e:
af:4c:1e:09:f9:44:ea:f0:78:60:3d:dc:a6:38:f1:f6:a6:ca:
ef:32:6c:6c:50:1c:e8:b7:1d:64:6e:c5:cf:e3:76:7b:11:37:
04:72:ff:b3:61:ab:a5:4e:8b:70:c8:28:e2:49:35:15:80:19:
ff:93:01:e3:9b:c5:4c:88:b8:f9:6a:06:d6:92:be:16:40:16:
ec:52:4a:2c:47:4b:e8:23:49:9a:a4:e9:89:12:76:38:07:fc:
d8:e3:38:ab:32:80:1d:6d:69:c5:dc:fd:f8:89:ac:1e:9f:78:
0f:64:43:d7:64:bd:89:c3:2b:44:cc:6f:ee:e5:82:91:ec:35:
cc:73:1b:25:5a:73:90:eb:71:9b:c4:a9:34:5d:fc:76:c4:bc:
8f:70:cb:d7:24:db:27:7b:f0:e2:8c:b1:f7:ce:af:14:df:62:
a4:3b:10:32:03:e9:50:3a:62:d7:45:61:31:d7:b6:3f:a9:bb:
c6:4f:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:55:37 2025 by rpki-client