Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: fFaNxhioqkzt1T+Ae7zrj87FvtkTkC6Y0vbhDcM1SpY=
Subject key identifier: 37:8A:75:91:D0:A2:9A:5A:D0:6A:2D:7A:26:31:34:D6:C3:1A:83:E2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6E93293B07145186F02FF346D738B8A81D82A677
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
Signing time: Wed 04 Nov 2026 10:13:18 +0000
ROA not before: Wed 04 Nov 2026 10:08:18 +0000
ROA not after: Wed 03 Nov 2027 10:13:18 +0000
asID: 13335
IP address blocks: 51.194.144.0/22 maxlen: 22
51.241.128.0/23 maxlen: 23
78.105.145.0/24 maxlen: 24
94.118.0.0/24 maxlen: 24
94.118.42.0/24 maxlen: 24
94.118.162.0/23 maxlen: 24
94.194.72.0/21 maxlen: 24
94.194.228.0/22 maxlen: 24
188.220.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:93:29:3b:07:14:51:86:f0:2f:f3:46:d7:38:b8:a8:1d:82:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 4 10:08:18 2026 GMT
Not After : Nov 3 10:13:18 2027 GMT
Subject: CN=378A7591D0A29A5AD06A2D7A263134D6C31A83E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:3c:99:9a:06:c9:54:c7:0a:3f:58:e3:5d:
99:08:86:f9:f3:02:09:6b:7c:08:2a:ea:4f:cc:91:
ac:38:98:12:65:03:7e:31:6c:6b:ae:76:24:1c:6e:
82:de:6d:97:3f:75:9a:92:80:8b:8a:db:87:26:70:
09:03:74:00:6a:89:fc:f6:af:d8:91:bf:f9:89:10:
e0:e2:b3:86:80:1d:a2:f8:3f:e3:cb:26:35:de:fa:
05:75:f7:a1:17:98:64:d5:66:2c:3c:29:e0:46:09:
59:95:c4:a5:33:ea:10:bb:af:a5:34:84:83:fe:c4:
77:a3:da:52:5a:7e:cb:0b:23:91:13:f3:f9:6b:a1:
1c:31:07:fe:aa:8a:48:d5:12:af:2e:ca:eb:03:48:
5f:95:b3:17:d9:52:c1:c6:15:07:83:99:5e:c1:ec:
aa:12:13:dc:e8:a6:e4:82:6d:f1:41:5a:0f:c3:01:
9e:7a:3b:b4:31:48:47:c1:e9:b2:ca:c2:15:ad:7b:
a5:6e:d6:ae:f9:a5:e2:8a:41:42:b7:48:de:18:8c:
a7:a3:c1:a0:34:9f:ae:60:64:0b:e1:e4:4c:1d:8a:
d8:ff:a3:73:d0:15:f1:e8:06:bb:00:08:0d:05:68:
b5:98:74:ce:29:0c:61:78:62:0e:bd:9d:65:6e:be:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8A:75:91:D0:A2:9A:5A:D0:6A:2D:7A:26:31:34:D6:C3:1A:83:E2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.144.0/22
51.241.128.0/23
78.105.145.0/24
94.118.0.0/24
94.118.42.0/24
94.118.162.0/23
94.194.72.0/21
94.194.228.0/22
188.220.168.0/21
Signature Algorithm: sha256WithRSAEncryption
54:32:d9:78:66:7d:ba:c9:52:2f:f4:30:07:87:85:e0:f0:7d:
18:8b:f1:69:63:09:0c:aa:a1:a3:30:dd:e4:77:ea:b8:29:4a:
45:09:50:82:7f:2f:35:c2:e2:22:9f:7b:69:d8:09:c0:62:47:
c4:9d:f4:87:81:b5:e7:34:48:d0:81:be:12:f9:bd:9a:72:b4:
05:80:30:4f:09:3c:57:33:92:a5:44:26:c9:d0:85:9e:58:70:
95:ca:32:63:76:e2:11:43:3e:8d:88:95:0a:f0:e0:37:e2:32:
a0:bb:57:b1:f8:43:3f:c5:22:34:7a:8e:6b:13:77:bc:b9:42:
8d:3a:64:4f:68:61:f0:5e:d4:25:d9:9c:6c:80:48:a6:23:a3:
3d:51:0e:10:26:27:63:88:f9:fe:98:83:dc:e8:35:48:fe:a8:
65:19:0f:d6:93:46:5f:8b:42:92:9a:c9:83:c2:a4:52:b6:a0:
40:85:31:37:3d:d4:ee:a8:06:fb:d7:c5:38:a7:21:b5:a2:e9:
61:72:49:a1:0a:1d:00:e4:46:2e:07:eb:7f:fc:2e:39:5c:c0:
d2:4d:19:5d:c3:f6:be:ab:63:23:ad:7e:b2:5d:9c:52:1c:8b:
76:7a:be:57:b7:c0:c3:98:06:79:41:06:95:2b:8b:1c:dc:40:
a8:94:7b:26
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUbpMpOwcUUYbwL/NG1zi4qB2CpncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjExMDQxMDA4MThaFw0yNzExMDMxMDEzMThaMDMxMTAvBgNV
BAMTKDM3OEE3NTkxRDBBMjlBNUFEMDZBMkQ3QTI2MzEzNEQ2QzMxQTgzRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bDyZmgbJVMcKP1jjXZkIhvnz
AglrfAgq6k/Mkaw4mBJlA34xbGuudiQcboLebZc/dZqSgIuK24cmcAkDdABqifz2
r9iRv/mJEODis4aAHaL4P+PLJjXe+gV196EXmGTVZiw8KeBGCVmVxKUz6hC7r6U0
hIP+xHej2lJafssLI5ET8/lroRwxB/6qikjVEq8uyusDSF+VsxfZUsHGFQeDmV7B
7KoSE9zopuSCbfFBWg/DAZ56O7QxSEfB6bLKwhWte6Vu1q75peKKQUK3SN4YjKej
waA0n65gZAvh5Ewditj/o3PQFfHoBrsACA0FaLWYdM4pDGF4Yg69nWVuvrelAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUN4p1kdCimlrQai16JjE01sMag+IwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBAIzwpAD
BAEz8YADBABOaZEDBABedgADBABedioDBAFedqIDBANewkgDBAJewuQDBAO83Kgw
DQYJKoZIhvcNAQELBQADggEBAFQy2XhmfbrJUi/0MAeHheDwfRiL8WljCQyqoaMw
3eR36rgpSkUJUIJ/LzXC4iKfe2nYCcBiR8Sd9IeBtec0SNCBvhL5vZpytAWAME8J
PFczkqVEJsnQhZ5YcJXKMmN24hFDPo2IlQrw4DfiMqC7V7H4Qz/FIjR6jmsTd7y5
Qo06ZE9oYfBe1CXZnGyASKYjoz1RDhAmJ2OI+f6Yg9zoNUj+qGUZD9aTRl+LQpKa
yYPCpFK2oECFMTc91O6oBvvXxTinIbWi6WFySaEKHQDkRi4H63/8LjlcwNJNGV3D
9r6rYyOtfrJdnFIci3Z6vle3wMOYBnlBBpUrixzcQKiUeyY=
-----END CERTIFICATE-----
Generated at Sun Nov 8 10:39:22 2026 by rpki-client