Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: L9ZHZ79EzvjiCWJs+650poCg9Tc8gGpkDmtppnXyXdg=
Subject key identifier: 69:C0:87:E8:70:B9:FC:5F:3A:C0:EC:32:21:BE:3B:A4:9B:CB:D2:20
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 29E46BEDDE9DAE70F7492C90A63F8E7BC8235358
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13537.roa
Signing time: Sun 20 Sep 2026 04:04:40 +0000
ROA not before: Sun 20 Sep 2026 03:59:40 +0000
ROA not after: Sun 19 Sep 2027 04:04:40 +0000
asID: 13537
IP address blocks: 188.220.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e4:6b:ed:de:9d:ae:70:f7:49:2c:90:a6:3f:8e:7b:c8:23:53:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 20 03:59:40 2026 GMT
Not After : Sep 19 04:04:40 2027 GMT
Subject: CN=69C087E870B9FC5F3AC0EC3221BE3BA49BCBD220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:0f:32:fd:06:50:ef:f5:0f:13:fb:ad:fe:
7a:8f:da:21:cc:a2:58:54:03:78:30:8c:d6:e7:db:
4f:d8:73:c7:3a:00:f1:75:a9:47:9d:c8:77:42:9b:
2b:d7:72:ce:07:25:ab:df:42:cb:da:7d:b3:cd:12:
8d:9b:18:b0:ed:cd:6c:c6:c4:d1:8f:c4:2b:48:d2:
a9:9a:00:81:fd:52:a4:97:30:9b:1e:6f:93:61:c8:
cb:8e:f0:5c:80:6b:63:02:6a:58:27:a1:61:6a:50:
1c:a2:dc:3c:1b:e0:91:cc:19:b8:8d:a0:ac:a9:e0:
24:48:1f:f7:b7:89:60:40:0b:a0:0c:80:11:33:bd:
b2:4e:be:78:36:68:fa:7a:c5:85:00:b8:15:e0:93:
eb:90:82:d8:33:6c:64:22:18:47:0c:5a:a1:ce:76:
ed:15:70:e7:9e:e3:fa:04:8f:3a:b1:9d:0a:59:a5:
0d:11:5d:70:14:4c:79:b0:e9:f9:2e:8d:8c:31:29:
5e:f6:ad:36:a6:36:16:e0:ea:52:4d:ba:bf:d4:2a:
1d:6b:0d:98:53:88:eb:e2:c0:eb:76:47:f9:b1:47:
25:95:ce:c3:8a:c9:70:85:d1:b3:d2:77:9a:39:04:
44:ab:cb:e0:b6:e7:2a:01:31:d6:47:f0:d6:fd:a8:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:87:E8:70:B9:FC:5F:3A:C0:EC:32:21:BE:3B:A4:9B:CB:D2:20
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.220.84.0/24
Signature Algorithm: sha256WithRSAEncryption
05:15:f5:cb:ce:ec:bc:60:55:4e:15:9a:dc:9e:e6:e1:01:43:
f6:9c:37:13:87:80:d8:4d:7f:d8:af:43:6b:b6:81:09:50:e2:
9d:13:8f:50:30:24:7e:fc:b8:19:bf:a2:c7:af:cc:c5:25:04:
dc:ff:22:d3:e9:47:25:78:25:3a:53:96:8b:fb:9f:9a:15:bd:
58:a4:7a:92:b5:68:6b:60:94:6c:ed:f9:7f:a4:76:d4:82:76:
34:d5:fe:80:d2:82:66:4f:30:0f:e6:2d:d9:72:29:70:9c:15:
0a:8b:5f:e0:5d:9d:54:0c:40:c4:bf:69:86:92:6c:c3:91:1e:
97:15:f3:e2:75:32:22:c4:39:fc:2b:de:06:c5:49:9b:48:83:
7d:a6:1b:60:13:9c:fa:1b:93:14:3f:f2:35:54:fc:a6:f7:de:
01:33:76:9c:05:c5:89:4d:f6:55:52:e1:c3:6e:8a:d4:83:f5:
a1:03:bd:e8:54:86:14:45:ad:fd:b3:a0:05:9f:f2:71:52:63:
a7:36:db:37:1b:e1:06:72:70:6f:24:f1:29:7b:f0:4a:e6:bd:
2a:f1:bb:8c:6e:49:59:26:8e:03:31:27:78:de:74:e5:e4:dc:
af:13:bb:71:ba:99:c3:29:3c:6c:d2:51:90:31:ea:06:29:1f:
40:62:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:44 2026 by rpki-client