Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: EfCsSY4FRzunKn+n4IGeQVbH5RnhX2HYXHEP/mimmqw=
Subject key identifier: B8:75:C8:54:4A:FE:B5:08:35:CC:85:89:E2:6E:13:46:14:04:E0:3C
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 51B0967097792D27CF042807F0208A5E66292DA0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
Signing time: Tue 17 Feb 2026 15:21:05 +0000
ROA not before: Tue 17 Feb 2026 15:16:05 +0000
ROA not after: Tue 16 Feb 2027 15:21:05 +0000
asID: 13213
IP address blocks: 46.202.2.0/24 maxlen: 24
46.202.29.0/24 maxlen: 24
46.202.31.0/24 maxlen: 24
46.202.37.0/24 maxlen: 24
46.202.43.0/24 maxlen: 24
46.202.44.0/24 maxlen: 24
46.202.47.0/24 maxlen: 24
46.202.48.0/24 maxlen: 24
46.202.76.0/24 maxlen: 24
46.202.80.0/24 maxlen: 24
46.203.89.0/24 maxlen: 24
46.203.106.0/24 maxlen: 24
91.124.44.0/24 maxlen: 24
91.124.45.0/24 maxlen: 24
91.124.46.0/24 maxlen: 24
91.124.47.0/24 maxlen: 24
92.112.13.0/24 maxlen: 24
92.112.16.0/24 maxlen: 24
92.112.17.0/24 maxlen: 24
92.112.18.0/24 maxlen: 24
92.112.19.0/24 maxlen: 24
92.112.69.0/24 maxlen: 24
92.112.76.0/24 maxlen: 24
92.112.78.0/24 maxlen: 24
92.112.80.0/24 maxlen: 24
92.112.87.0/24 maxlen: 24
92.112.88.0/24 maxlen: 24
92.113.54.0/24 maxlen: 24
92.113.64.0/24 maxlen: 24
95.135.2.0/24 maxlen: 24
95.135.3.0/24 maxlen: 24
95.135.4.0/24 maxlen: 24
95.135.5.0/24 maxlen: 24
95.135.8.0/24 maxlen: 24
95.135.9.0/24 maxlen: 24
95.135.10.0/24 maxlen: 24
95.135.11.0/24 maxlen: 24
95.135.14.0/24 maxlen: 24
95.135.15.0/24 maxlen: 24
95.135.16.0/24 maxlen: 24
95.135.17.0/24 maxlen: 24
95.135.20.0/24 maxlen: 24
95.135.21.0/24 maxlen: 24
95.135.22.0/24 maxlen: 24
95.135.23.0/24 maxlen: 24
95.135.26.0/24 maxlen: 24
95.135.27.0/24 maxlen: 24
95.135.28.0/24 maxlen: 24
95.135.29.0/24 maxlen: 24
95.135.32.0/24 maxlen: 24
95.135.33.0/24 maxlen: 24
95.135.34.0/24 maxlen: 24
95.135.35.0/24 maxlen: 24
95.135.253.0/24 maxlen: 24
178.92.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:b0:96:70:97:79:2d:27:cf:04:28:07:f0:20:8a:5e:66:29:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 17 15:16:05 2026 GMT
Not After : Feb 16 15:21:05 2027 GMT
Subject: CN=B875C8544AFEB50835CC8589E26E13461404E03C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:95:a8:40:5c:33:79:4a:b5:b5:53:86:f5:
d4:11:cb:8a:8e:ff:41:d5:e8:3d:e9:7f:95:ee:52:
1a:5a:1d:dc:c2:38:29:e5:dd:ff:22:da:6f:a7:cd:
fb:84:4d:ec:d9:7d:0f:f0:0a:86:a8:64:39:53:3f:
c3:d4:62:06:39:30:41:7f:0c:2a:d3:6c:73:df:c4:
90:28:40:55:2c:d8:7f:fc:29:84:49:94:c4:7d:57:
0b:12:ab:e7:d3:64:ec:df:0c:9d:42:59:46:4f:d7:
64:a2:f9:1b:3f:eb:b3:ac:ff:31:1b:6d:cc:2e:15:
88:c9:c3:22:e7:ce:d5:4d:a9:86:83:45:b3:8f:51:
5d:82:b0:03:c4:38:c7:d6:cc:43:a5:a2:3a:18:8f:
97:33:d0:63:56:32:87:12:39:9a:c7:bf:91:04:a5:
86:e9:17:dc:45:26:43:3b:69:a1:05:66:d7:c3:5f:
24:0c:a7:96:d3:1b:ad:88:e6:7a:33:7b:6c:9a:1b:
08:74:80:2f:7b:6a:c1:06:29:ac:21:0a:6a:ac:bb:
41:7f:b9:3b:02:bf:c4:65:36:f4:36:f2:a1:0a:89:
37:fb:28:ba:9f:e0:cc:62:04:be:47:b9:0d:c4:05:
06:8f:cd:fc:e4:7d:10:40:a2:31:75:87:e7:7a:a6:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:75:C8:54:4A:FE:B5:08:35:CC:85:89:E2:6E:13:46:14:04:E0:3C
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.2.0/24
46.202.29.0/24
46.202.31.0/24
46.202.37.0/24
46.202.43.0-46.202.44.255
46.202.47.0-46.202.48.255
46.202.76.0/24
46.202.80.0/24
46.203.89.0/24
46.203.106.0/24
91.124.44.0/22
92.112.13.0/24
92.112.16.0/22
92.112.69.0/24
92.112.76.0/24
92.112.78.0/24
92.112.80.0/24
92.112.87.0-92.112.88.255
92.113.54.0/24
92.113.64.0/24
95.135.2.0-95.135.5.255
95.135.8.0/22
95.135.14.0-95.135.17.255
95.135.20.0/22
95.135.26.0-95.135.29.255
95.135.32.0/22
95.135.253.0/24
178.92.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:28:4f:38:0e:f0:75:c2:6e:19:fb:49:05:a6:fc:11:2e:bd:
0e:cc:3f:f3:0f:c1:f6:80:ea:78:05:98:09:72:10:91:12:de:
0b:85:64:cb:23:4c:23:47:39:e3:b5:e9:12:ce:ac:ab:e7:f0:
8c:e1:93:8c:bc:8c:03:4e:b2:ba:89:98:51:05:3b:16:41:d0:
70:92:3c:af:54:11:6d:e8:c6:07:e2:0b:d4:a2:d2:b5:15:49:
53:ee:d3:f6:3c:d5:19:2a:24:39:2d:63:f0:a6:b7:ab:89:58:
3e:47:3e:c5:9f:9a:84:1f:34:49:69:04:f0:e9:cd:e8:30:43:
8c:dc:a7:c7:dc:49:dd:d9:72:c2:86:d4:b5:03:a7:67:2c:fe:
b7:6e:03:be:54:b3:b3:41:aa:bc:6e:45:b5:e0:77:f1:e8:24:
c0:fc:ce:c7:4c:a1:4a:ef:a0:80:85:3b:36:7a:c3:90:2c:77:
81:4f:57:59:4e:20:74:0a:72:c2:a9:e7:02:9d:f3:f1:a2:45:
e0:d5:a0:f1:ae:a8:60:19:f1:96:f0:78:44:ff:81:34:e3:f3:
8e:75:fb:56:88:6a:21:ed:5e:6f:9a:06:ad:48:17:62:50:47:
ce:c5:43:ed:e8:99:16:8a:c4:45:c5:43:a9:57:36:2f:79:c8:
6e:6f:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:37 2026 by rpki-client