Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: LrFzt2Y9a6HFrp860sdc3kAKqZKCdirfgF2fheSU1ng=
Subject key identifier: 00:AA:8C:CC:04:D0:B9:BC:39:58:71:FB:51:D2:1E:F7:FB:33:32:F7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5ACC15AEF4CF60BFE28D3C6DEC8FEB433813EE8D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
Signing time: Thu 17 Sep 2026 21:23:50 +0000
ROA not before: Thu 17 Sep 2026 21:18:50 +0000
ROA not after: Thu 16 Sep 2027 21:23:50 +0000
asID: 13335
IP address blocks: 51.194.144.0/22 maxlen: 22
51.241.128.0/23 maxlen: 23
94.118.0.0/24 maxlen: 24
94.118.42.0/24 maxlen: 24
94.194.72.0/21 maxlen: 24
94.194.152.0/21 maxlen: 24
94.194.208.0/21 maxlen: 24
94.194.228.0/22 maxlen: 24
94.194.232.0/21 maxlen: 24
188.220.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cc:15:ae:f4:cf:60:bf:e2:8d:3c:6d:ec:8f:eb:43:38:13:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 17 21:18:50 2026 GMT
Not After : Sep 16 21:23:50 2027 GMT
Subject: CN=00AA8CCC04D0B9BC395871FB51D21EF7FB3332F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:9f:d4:58:5d:ad:9c:43:df:c0:95:6a:19:
93:b4:e5:88:23:11:e6:16:7f:8e:21:91:48:c0:53:
71:1d:6b:a2:45:8f:92:c0:2a:06:b8:97:25:1e:dc:
de:03:aa:6e:7f:c3:8e:71:c0:86:6b:c0:37:ce:38:
06:89:37:7e:b0:53:c6:a7:b8:10:1e:07:3f:54:7d:
ed:58:f9:ba:49:33:98:48:ad:ed:c0:ba:a9:be:aa:
64:74:99:4e:5d:3d:8c:88:32:4b:30:03:d7:74:3b:
f2:a4:c1:37:62:ce:d4:f7:5b:dd:7a:c3:fd:2b:81:
77:e7:24:e0:e3:58:01:4d:c8:97:7a:e0:87:d3:8a:
f4:5c:eb:ed:9e:55:6b:fe:f0:f6:fc:0b:9b:83:8b:
62:95:6b:e8:b8:4c:b0:0e:cd:0d:07:f1:b8:8b:7b:
f2:b2:cf:07:87:da:31:76:5c:15:35:e8:43:09:88:
fd:2c:59:a5:17:b2:90:71:db:a2:58:1d:22:25:63:
f4:61:66:7b:26:96:3e:c0:65:c9:f4:86:06:b0:3e:
21:02:15:75:75:db:d2:ce:a9:14:f6:30:ff:e7:f9:
83:f8:ab:c4:32:28:dc:d2:ca:84:be:67:55:f5:15:
3f:7b:36:31:74:c4:f0:b4:58:65:e5:cd:1d:79:7f:
82:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:8C:CC:04:D0:B9:BC:39:58:71:FB:51:D2:1E:F7:FB:33:32:F7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.144.0/22
51.241.128.0/23
94.118.0.0/24
94.118.42.0/24
94.194.72.0/21
94.194.152.0/21
94.194.208.0/21
94.194.228.0-94.194.239.255
188.220.168.0/21
Signature Algorithm: sha256WithRSAEncryption
91:45:eb:c4:be:14:4f:55:14:50:56:68:43:eb:94:c7:f1:56:
5d:33:62:5c:33:dc:10:7a:81:7c:36:06:6f:e1:67:bf:df:d0:
87:87:f2:38:d5:a1:4b:d7:4c:e8:50:a0:f3:6e:ab:c7:27:3d:
10:bf:04:65:c5:02:99:5b:03:06:73:62:bc:bb:ef:0c:eb:bb:
e1:4e:5d:e1:81:5f:da:d4:35:7d:c9:4c:cf:eb:11:87:e1:e5:
e1:b2:04:f0:cb:4c:4e:73:5f:26:dc:e6:12:73:ed:52:27:b9:
d8:ec:7d:9f:9a:f5:45:5c:13:b8:70:65:99:05:a5:29:b8:30:
66:2f:47:e3:36:d9:0a:b9:1b:e3:b3:ef:fd:09:e2:ab:4d:64:
a3:c5:e5:10:e0:90:f2:a5:3f:0f:2c:2d:1d:11:b8:77:a3:e4:
15:72:3e:df:67:e4:f4:c8:8d:a8:2e:8d:ea:01:52:55:f1:8a:
64:b1:15:29:87:1d:4e:39:f1:e5:ec:65:6c:3b:1f:0f:9a:95:
d6:76:7c:30:43:d8:72:d4:42:3c:6f:65:b3:25:f7:9e:70:62:
1a:6b:33:e0:6f:6a:9d:a4:35:ab:60:c6:38:cb:12:76:24:94:
72:5d:d9:b4:23:c5:3e:01:9a:6b:36:6b:e9:aa:ab:57:bf:d8:
ec:23:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:34:23 2026 by rpki-client