Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: 5KksOigBdn9atPr40fx6Kn0nR7a4MDTHQ4HqM2lbgjk=
Subject key identifier: 7A:FB:8B:8C:F4:2F:43:14:9B:40:2B:9A:17:B6:87:5B:2B:22:6F:06
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7D2B725AD799F3C3E8DFA4A31C8D106392481763
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
Signing time: Fri 15 May 2026 01:49:31 +0000
ROA not before: Fri 15 May 2026 01:44:31 +0000
ROA not after: Fri 14 May 2027 01:49:31 +0000
asID: 13537
IP address blocks: 95.134.5.0/24 maxlen: 24
178.92.135.0/24 maxlen: 24
178.92.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2b:72:5a:d7:99:f3:c3:e8:df:a4:a3:1c:8d:10:63:92:48:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 15 01:44:31 2026 GMT
Not After : May 14 01:49:31 2027 GMT
Subject: CN=7AFB8B8CF42F43149B402B9A17B6875B2B226F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:08:58:6c:b5:41:f8:f8:5c:68:d4:80:bd:
0a:64:5e:83:b7:6f:ca:2b:2a:c2:8d:6f:d8:99:7c:
dc:0f:55:a3:fe:bf:f7:df:cb:e2:92:05:44:e4:ba:
a6:e3:54:64:71:69:2e:02:b9:a6:87:2b:6b:c7:59:
dd:03:4a:14:f8:0a:65:79:7f:01:24:b2:1e:3f:a2:
c9:63:83:9a:fd:99:be:26:8c:09:4f:c0:85:97:08:
89:9e:21:8d:c2:29:fe:fb:68:1d:b3:06:1e:94:bc:
0f:b6:3e:f8:37:b5:3c:33:44:d1:df:85:e5:97:2d:
42:6b:94:b6:9a:f7:dd:d5:08:00:8a:4f:d0:50:a1:
48:a1:6f:6d:ea:49:d3:82:b7:73:f2:0a:18:43:57:
4b:f0:fb:64:55:b1:40:83:3a:2c:d7:64:f6:18:a9:
af:52:b8:ff:d5:d3:aa:8a:1f:d1:59:90:a7:05:b9:
c1:42:a8:27:ae:10:4e:cb:bb:3e:a9:69:94:d7:ae:
b0:49:11:05:be:61:5a:61:7b:be:1d:0a:0f:dd:0b:
08:77:ff:9b:d8:aa:98:0f:0b:4e:b4:57:90:f5:ff:
57:fe:84:59:cb:6a:70:d2:28:b7:d0:3e:12:76:39:
cb:fa:68:ad:12:e5:ba:fa:1f:79:fe:31:e8:63:c6:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:8B:8C:F4:2F:43:14:9B:40:2B:9A:17:B6:87:5B:2B:22:6F:06
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.134.5.0/24
178.92.135.0/24
178.92.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:dc:27:21:4e:91:3b:f2:08:28:44:0c:04:4c:6b:68:94:be:
b5:d1:f3:f5:cb:77:b4:7b:d1:e4:b6:9c:f8:09:ab:54:b1:35:
36:17:2b:15:ee:d4:18:5d:ed:f1:6d:a2:ee:c5:4b:0b:a8:ce:
2a:92:a6:40:a7:7f:f7:79:bc:b2:1c:63:96:86:fb:25:0a:3c:
66:4b:08:df:70:4c:76:66:4c:46:fd:be:63:f9:21:4a:ba:9c:
a1:29:43:a2:04:e9:00:8b:5b:43:78:52:56:e6:1c:65:07:21:
a0:79:bb:6c:22:3d:8b:2e:c7:2e:8a:9a:81:74:0f:4a:73:9e:
45:a1:80:c2:ff:37:76:17:35:d5:1f:3e:e1:f7:af:f2:ce:bf:
b1:ee:9d:b4:d7:bd:4d:f4:47:76:78:56:f9:3e:bc:76:92:d1:
af:70:32:2d:07:af:03:92:a7:4c:b6:cc:88:45:23:de:ee:97:
69:3f:1a:56:1e:c9:46:64:32:88:3c:ce:c4:6f:6f:b4:04:5a:
92:d7:d8:e4:8e:f8:08:ea:3a:67:59:81:13:7f:8d:e2:b8:2a:
aa:c1:88:02:58:cc:64:cb:ed:3a:42:9e:15:14:f7:51:a3:f3:
19:a0:59:c3:3f:c0:75:6b:30:a0:f3:c2:3c:af:3e:a3:a3:15:
d5:8c:0e:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:37:52 2026 by rpki-client