Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: h9iiigWXjauuIZWn0zXjq2iKGVwBohHi0pvfufMYyw8=
Subject key identifier: E5:20:AB:75:19:4B:6D:00:B6:E7:F3:D9:47:0A:CD:95:90:C4:3C:D4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 76E5096C575F457DABE3EC03553CACF3130AD00E
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
Signing time: Sun 01 Nov 2026 00:15:29 +0000
ROA not before: Sun 01 Nov 2026 00:10:29 +0000
ROA not after: Sun 31 Oct 2027 00:15:29 +0000
asID: 13213
IP address blocks: 46.202.2.0/24 maxlen: 24
46.202.29.0/24 maxlen: 24
46.202.31.0/24 maxlen: 24
46.202.37.0/24 maxlen: 24
46.202.43.0/24 maxlen: 24
46.202.44.0/24 maxlen: 24
46.202.47.0/24 maxlen: 24
46.202.48.0/24 maxlen: 24
46.202.76.0/24 maxlen: 24
46.202.80.0/24 maxlen: 24
46.203.89.0/24 maxlen: 24
46.203.106.0/24 maxlen: 24
91.124.44.0/24 maxlen: 24
91.124.45.0/24 maxlen: 24
91.124.46.0/24 maxlen: 24
91.124.47.0/24 maxlen: 24
92.112.13.0/24 maxlen: 24
92.112.16.0/24 maxlen: 24
92.112.17.0/24 maxlen: 24
92.112.18.0/24 maxlen: 24
92.112.19.0/24 maxlen: 24
92.112.69.0/24 maxlen: 24
92.112.76.0/24 maxlen: 24
92.112.78.0/24 maxlen: 24
92.112.80.0/24 maxlen: 24
92.112.87.0/24 maxlen: 24
92.112.88.0/24 maxlen: 24
95.135.2.0/24 maxlen: 24
95.135.3.0/24 maxlen: 24
95.135.4.0/24 maxlen: 24
95.135.5.0/24 maxlen: 24
95.135.8.0/24 maxlen: 24
95.135.9.0/24 maxlen: 24
95.135.10.0/24 maxlen: 24
95.135.11.0/24 maxlen: 24
95.135.14.0/24 maxlen: 24
95.135.15.0/24 maxlen: 24
95.135.16.0/24 maxlen: 24
95.135.17.0/24 maxlen: 24
95.135.20.0/24 maxlen: 24
95.135.21.0/24 maxlen: 24
95.135.22.0/24 maxlen: 24
95.135.23.0/24 maxlen: 24
95.135.26.0/24 maxlen: 24
95.135.27.0/24 maxlen: 24
95.135.28.0/24 maxlen: 24
95.135.29.0/24 maxlen: 24
95.135.32.0/24 maxlen: 24
95.135.33.0/24 maxlen: 24
95.135.34.0/24 maxlen: 24
95.135.35.0/24 maxlen: 24
95.135.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e5:09:6c:57:5f:45:7d:ab:e3:ec:03:55:3c:ac:f3:13:0a:d0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 1 00:10:29 2026 GMT
Not After : Oct 31 00:15:29 2027 GMT
Subject: CN=E520AB75194B6D00B6E7F3D9470ACD9590C43CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:b1:5e:84:94:f0:e5:61:35:91:bd:92:02:
f4:32:11:52:19:ff:0b:ba:3f:0f:e9:1d:b2:8b:e1:
c2:7d:94:9c:ae:e1:05:6c:10:0d:6e:eb:db:64:76:
a1:79:f1:f8:46:a4:13:56:f5:34:21:91:c8:44:e7:
0f:38:06:9c:53:f3:86:e7:95:86:04:86:02:02:0a:
d0:70:54:70:14:23:bb:af:2f:d2:6f:56:87:b3:c5:
f1:fa:42:31:cd:ce:4d:da:c2:78:06:73:6b:c5:22:
a7:60:71:cf:83:5f:0e:78:e4:51:cf:85:7b:52:a3:
af:29:ee:3d:65:c7:d0:64:4e:50:05:63:cf:bb:13:
3e:e3:73:f9:07:4c:2a:cb:40:d7:91:e2:be:a2:e9:
41:08:d9:2d:16:d3:8b:33:f9:0e:a4:30:21:28:95:
cf:35:3b:81:15:9f:6b:7c:0a:88:8c:04:9c:90:6e:
db:87:22:f9:c6:9f:df:3d:cf:78:4d:85:90:76:e9:
66:86:3e:dc:25:c3:e2:49:9c:e1:25:e3:93:7d:97:
6f:18:8c:11:08:70:39:00:f9:01:e1:8a:51:d1:50:
22:f2:12:03:3f:bc:64:f4:30:14:0f:7d:96:0c:31:
93:9c:0a:f1:1e:ab:ca:f9:df:d3:b4:49:d9:f4:23:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:AB:75:19:4B:6D:00:B6:E7:F3:D9:47:0A:CD:95:90:C4:3C:D4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.2.0/24
46.202.29.0/24
46.202.31.0/24
46.202.37.0/24
46.202.43.0-46.202.44.255
46.202.47.0-46.202.48.255
46.202.76.0/24
46.202.80.0/24
46.203.89.0/24
46.203.106.0/24
91.124.44.0/22
92.112.13.0/24
92.112.16.0/22
92.112.69.0/24
92.112.76.0/24
92.112.78.0/24
92.112.80.0/24
92.112.87.0-92.112.88.255
95.135.2.0-95.135.5.255
95.135.8.0/22
95.135.14.0-95.135.17.255
95.135.20.0/22
95.135.26.0-95.135.29.255
95.135.32.0/22
95.135.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:88:ae:99:9c:18:83:f8:40:d5:23:ef:97:e1:b3:3e:ce:22:
e3:98:50:e7:6e:3f:19:f9:05:fd:b6:79:19:66:2f:78:02:06:
6c:ce:45:14:d8:68:b0:66:cd:84:09:83:66:f9:8d:3c:40:ed:
c8:e7:f9:99:41:2f:fc:83:62:de:85:3f:a9:bb:55:98:6f:d8:
07:a5:52:7c:49:c7:aa:6f:96:9a:09:b8:8d:c7:2d:12:29:a2:
5d:bd:51:23:cd:31:f0:bb:82:07:e8:81:02:eb:dd:01:0e:9d:
bd:d1:21:e4:dd:cf:a4:e2:e5:97:c8:ac:d7:6f:8e:72:a0:39:
31:f9:7c:17:64:3a:a0:d1:e7:16:1c:b2:ad:32:d6:4e:48:cc:
b5:81:8a:9c:b2:0f:94:0f:7f:9a:c7:6b:71:19:dd:06:08:13:
e6:f2:7d:74:85:40:97:cc:ff:57:05:6c:91:02:b3:ce:58:fa:
1e:90:0e:1a:31:5e:d8:e4:ab:ca:54:57:64:fe:dc:61:ab:0f:
4a:ee:42:38:4c:25:42:fa:72:9b:d8:79:17:da:f6:f7:59:df:
23:e9:27:9c:9f:73:bd:eb:10:7e:29:ca:62:99:44:23:f0:68:
91:f4:ea:36:40:b5:78:7f:32:15:43:a3:eb:f3:03:d8:e3:33:
2a:29:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 08:12:11 2026 by rpki-client