Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13030.roa
File: AS13030.roa (raw, json)
Hash identifier: f1OVMd9Ea5a3yTIMCOhJVbIxFGJIvx7M+pAeRBX0WlE=
Subject key identifier: 0F:2A:4D:A3:67:F5:F1:5F:CE:99:CE:67:3A:F0:72:66:C0:9D:06:5A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3C638709060C093C10387B1D6880D5FFAD98FA24
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13030.roa
Signing time: Thu 29 Oct 2026 19:09:20 +0000
ROA not before: Thu 29 Oct 2026 19:04:20 +0000
ROA not after: Thu 28 Oct 2027 19:09:20 +0000
asID: 13030
IP address blocks: 94.118.95.0/24 maxlen: 24
94.118.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:63:87:09:06:0c:09:3c:10:38:7b:1d:68:80:d5:ff:ad:98:fa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 29 19:04:20 2026 GMT
Not After : Oct 28 19:09:20 2027 GMT
Subject: CN=0F2A4DA367F5F15FCE99CE673AF07266C09D065A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:4d:30:f3:22:05:28:21:51:10:3a:f2:ce:
31:4a:f6:38:11:04:5f:08:0b:5b:ba:6a:14:31:9c:
57:dc:97:99:3b:ae:a6:ab:87:4f:d5:f9:39:a3:62:
df:40:b7:19:55:0f:00:e5:40:a4:da:c6:7c:89:cd:
1e:a5:3e:24:cf:6f:ff:0f:df:07:da:b8:3c:b6:1a:
fe:d0:21:3f:7f:45:a4:c3:0b:41:5a:ad:c5:43:16:
6e:b7:dc:af:57:75:51:f4:81:61:92:03:ed:e2:50:
59:40:e7:fa:7b:43:6e:dc:ad:5e:cf:5d:35:06:84:
68:cb:81:c8:a6:ce:a4:e8:06:4c:31:a8:12:f3:cc:
11:d9:24:9f:fe:26:3d:2b:3c:ed:55:1b:f4:5f:50:
39:6d:ff:30:84:88:5a:7b:e8:97:e7:7a:c3:98:f9:
59:f4:4a:f6:f2:92:1c:e6:b8:63:3c:2b:dc:69:4f:
fe:4b:27:28:b2:c2:c5:9e:b6:15:d0:96:7c:de:44:
f6:68:8f:3d:93:65:ee:16:73:da:8d:db:cd:ec:24:
7d:ae:88:b4:51:9c:4d:d1:17:08:ca:76:92:cb:16:
d5:91:e6:fb:2f:88:30:10:a1:64:bf:fd:16:09:30:
95:e0:b7:f5:61:48:e5:a0:0e:80:b8:2f:40:f9:b8:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:4D:A3:67:F5:F1:5F:CE:99:CE:67:3A:F0:72:66:C0:9D:06:5A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.95.0/24
94.118.107.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3a:17:f7:15:48:f4:1d:02:8e:40:15:c0:19:80:2d:da:c1:
fc:de:96:76:34:da:10:6f:89:0d:d0:60:7b:f9:3a:d4:d0:cf:
a3:af:54:37:71:7b:0a:f2:98:92:66:0b:41:21:5f:05:12:3b:
63:4e:97:99:87:ed:43:c9:f3:df:fc:24:71:20:cf:25:7e:17:
bf:8c:f4:4d:b9:40:25:56:3c:1d:e8:67:e9:9d:67:57:64:df:
84:76:2f:05:e5:e7:d7:80:35:3c:56:f1:f1:6f:c0:d6:4f:0e:
05:ff:5e:fe:39:55:2c:22:b0:35:65:c3:f3:15:32:ec:1d:e4:
f1:95:df:f0:26:ed:7c:88:56:e6:d0:9c:8d:db:32:62:8c:86:
02:43:87:a3:9b:87:c3:1c:6c:fc:57:47:af:65:d8:dd:a9:94:
a6:76:a3:18:53:01:8e:55:1e:c2:2b:4c:8d:74:75:29:9f:24:
51:e0:65:fd:cf:e5:f6:c9:ec:c3:3d:34:72:ad:49:8f:0c:43:
54:40:8a:20:d5:97:fd:d9:bd:5b:f5:58:a7:7b:62:8a:f5:83:
6f:5b:61:3c:42:65:53:e6:68:2b:60:67:13:b3:34:31:b4:2b:
1d:12:33:96:00:ea:b4:e2:29:0a:d6:8d:a4:60:47:04:2f:1d:
d4:30:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:07:54 2026 by rpki-client