Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: fQsGRdgl1Dx2JyA4qrPfh6M50izlj05FxwwPRlKdVRw=
Subject key identifier: 1D:88:0F:F4:95:0E:D1:E4:5C:17:08:99:19:1B:4B:BA:F3:3B:A0:04
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 09D2DD11E4066B41DF4EA545D68BED9FA7A9C302
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
Signing time: Thu 03 Sep 2026 18:23:21 +0000
ROA not before: Thu 03 Sep 2026 18:18:21 +0000
ROA not after: Thu 02 Sep 2027 18:23:21 +0000
asID: 13335
IP address blocks: 91.124.127.0/24 maxlen: 24
178.92.188.0/23 maxlen: 24
178.94.178.0/24 maxlen: 24
178.94.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d2:dd:11:e4:06:6b:41:df:4e:a5:45:d6:8b:ed:9f:a7:a9:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 3 18:18:21 2026 GMT
Not After : Sep 2 18:23:21 2027 GMT
Subject: CN=1D880FF4950ED1E45C170899191B4BBAF33BA004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:d0:bb:55:fb:a2:20:dd:9e:f1:34:ce:e8:
5e:5e:06:ef:f7:eb:1d:0b:a2:6b:d3:de:d5:56:31:
41:eb:63:de:3c:37:b2:10:9a:24:9b:f4:db:66:2a:
08:de:c8:8c:a8:5f:c3:1b:0a:d0:24:92:3e:08:23:
aa:bb:64:e0:ba:19:86:d0:53:57:13:9b:7b:64:28:
1a:81:ab:0c:23:21:69:be:de:f1:61:d2:3c:21:66:
ad:d8:3a:5d:8e:1a:6a:1c:e3:bc:c1:5a:3d:f8:5e:
d4:36:a4:ee:bd:ba:03:c7:ad:56:6b:3a:e7:0c:e8:
8a:fc:dd:78:87:99:69:16:33:9b:66:82:af:cc:bc:
46:87:6e:d7:dc:47:b6:dc:0c:a1:a6:72:40:d6:33:
92:21:08:d5:2e:cc:1a:ed:d3:12:a0:bd:04:4a:14:
dd:41:62:90:bd:0e:b5:94:ab:3b:6c:b2:5c:42:e1:
28:0e:03:16:61:31:58:4f:30:f5:3c:87:cf:6f:2a:
3b:95:11:11:e4:70:c9:3b:ec:99:f1:df:e0:00:0d:
f4:96:c2:77:6f:bf:40:99:43:4f:c4:e5:9c:a6:12:
ac:ef:9d:7e:fb:af:6e:0e:cc:d1:00:8a:0d:d4:46:
f0:0f:aa:a9:fc:2e:83:2b:69:b8:a2:ad:a6:f6:db:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:0F:F4:95:0E:D1:E4:5C:17:08:99:19:1B:4B:BA:F3:3B:A0:04
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.127.0/24
178.92.188.0/23
178.94.178.0/24
178.94.249.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b6:fc:fd:c1:cc:0d:26:08:9a:bb:82:23:d9:29:52:5b:57:
56:6c:81:b7:7a:75:af:74:91:2b:bb:91:99:77:18:ef:88:71:
e9:5a:ad:03:fb:db:99:2d:af:33:19:5c:ad:da:56:5d:5e:71:
f2:df:7e:72:ff:1b:a3:e1:02:64:5d:7f:81:99:ff:bd:51:6f:
6b:47:34:a6:c0:bf:27:73:2c:03:b7:3e:3b:c6:d9:bf:cc:48:
1d:b6:77:44:2d:c7:24:2e:69:9b:4d:c0:d6:43:8c:5c:5c:6f:
3c:c1:f9:b3:0c:96:65:ec:38:aa:e3:aa:40:a3:ff:dd:a1:61:
dd:c6:45:2c:60:bd:26:06:9d:81:77:c5:54:e4:a5:28:c9:68:
39:bc:30:7b:fc:29:e9:75:78:61:4e:92:e7:05:aa:80:3a:54:
5d:53:31:82:ce:1b:24:45:57:89:39:87:c4:54:c2:5c:2f:fd:
2e:91:ab:c8:f4:a4:dd:97:ec:aa:5e:81:73:fc:e9:a8:f4:40:
51:5c:0f:a2:e6:4b:a0:81:c7:87:61:44:a3:51:27:1c:58:3d:
c9:c9:5d:94:c5:aa:a2:e4:00:34:a9:9f:db:01:7d:f9:a6:ae:
1b:70:8c:dd:a7:96:52:bf:47:45:29:41:4b:ad:fa:05:0c:eb:
66:5d:52:cd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUCdLdEeQGa0HfTqVF1ovtn6epwwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjA5MDMxODE4MjFaFw0yNzA5MDIxODIzMjFaMDMxMTAvBgNV
BAMTKDFEODgwRkY0OTUwRUQxRTQ1QzE3MDg5OTE5MUI0QkJBRjMzQkEwMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq69C7VfuiIN2e8TTO6F5eBu/3
6x0LomvT3tVWMUHrY948N7IQmiSb9NtmKgjeyIyoX8MbCtAkkj4II6q7ZOC6GYbQ
U1cTm3tkKBqBqwwjIWm+3vFh0jwhZq3YOl2OGmoc47zBWj34XtQ2pO69ugPHrVZr
OucM6Ir83XiHmWkWM5tmgq/MvEaHbtfcR7bcDKGmckDWM5IhCNUuzBrt0xKgvQRK
FN1BYpC9DrWUqztsslxC4SgOAxZhMVhPMPU8h89vKjuVERHkcMk77Jnx3+AADfSW
wndvv0CZQ0/E5ZymEqzvnX77r24OzNEAig3URvAPqqn8LoMrabiirab2232VAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUHYgP9JUO0eRcFwiZGRtLuvM7oAQwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABbfH8D
BAGyXLwDBACyXrIDBACyXvkwDQYJKoZIhvcNAQELBQADggEBABO2/P3BzA0mCJq7
giPZKVJbV1Zsgbd6da90kSu7kZl3GO+IcelarQP725ktrzMZXK3aVl1ecfLffnL/
G6PhAmRdf4GZ/71Rb2tHNKbAvydzLAO3PjvG2b/MSB22d0QtxyQuaZtNwNZDjFxc
bzzB+bMMlmXsOKrjqkCj/92hYd3GRSxgvSYGnYF3xVTkpSjJaDm8MHv8Kel1eGFO
kucFqoA6VF1TMYLOGyRFV4k5h8RUwlwv/S6Rq8j0pN2X7KpegXP86aj0QFFcD6Lm
S6CBx4dhRKNRJxxYPcnJXZTFqqLkADSpn9sBffmmrhtwjN2nllK/R0UpQUut+gUM
62ZdUs0=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:34:50 2026 by rpki-client