Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
File: AS13537.roa (raw, json)
Hash identifier: lEFQ0oNX2kRxknDYiUFVIiQpXZ44dpgx/d1WKMZOmRM=
Subject key identifier: D4:CA:CF:4D:5F:1D:28:8E:A4:D7:DE:F9:0A:C4:A9:29:F7:DC:31:04
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2B062599B41B48F11A9C565674DFF84A9589E1C2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
Signing time: Sun 20 Sep 2026 04:04:55 +0000
ROA not before: Sun 20 Sep 2026 03:59:55 +0000
ROA not after: Sun 19 Sep 2027 04:04:55 +0000
asID: 13537
IP address blocks: 92.112.229.0/24 maxlen: 24
95.134.5.0/24 maxlen: 24
178.92.135.0/24 maxlen: 24
178.92.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:06:25:99:b4:1b:48:f1:1a:9c:56:56:74:df:f8:4a:95:89:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 20 03:59:55 2026 GMT
Not After : Sep 19 04:04:55 2027 GMT
Subject: CN=D4CACF4D5F1D288EA4D7DEF90AC4A929F7DC3104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:52:34:a8:46:99:80:78:f4:18:dc:49:ea:
22:f7:a5:ec:c3:b4:84:64:5a:5e:c0:eb:28:73:99:
1e:96:33:ad:3c:0a:63:26:13:ff:52:72:1c:d2:59:
48:af:02:fb:e6:fd:2c:d1:d2:3f:82:3a:c1:a8:7e:
86:f7:b3:ca:3e:ec:5d:4d:cb:d4:13:df:4d:e8:9a:
13:2b:2c:64:07:23:bf:46:b6:88:34:52:cb:02:14:
d7:17:a0:f8:81:42:08:fc:69:6c:3a:79:c2:4e:a9:
93:ce:02:72:0e:2e:21:99:6f:f1:6b:a4:25:b2:26:
0d:6e:a6:42:cd:9d:57:c0:9e:94:b2:3e:bc:ca:02:
0e:64:85:77:73:b4:4e:00:87:ea:4a:f4:a7:ee:07:
67:48:f7:a1:05:0a:66:9a:48:0c:e8:32:fe:ff:07:
79:e2:0c:98:5c:2e:7e:2d:a2:8f:25:1e:c8:92:75:
28:a0:9d:57:f5:b3:72:67:39:be:e3:27:7a:7d:b2:
8a:c9:32:09:4a:25:bd:0a:48:2e:e9:67:ed:d3:3b:
a0:00:65:cf:52:ae:56:eb:59:f7:ec:74:81:39:4f:
31:52:b1:0b:33:ca:ea:4c:93:73:bc:eb:b0:d5:92:
f9:14:43:11:1b:39:db:ab:e1:9e:72:9b:29:d8:a2:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:CF:4D:5F:1D:28:8E:A4:D7:DE:F9:0A:C4:A9:29:F7:DC:31:04
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.229.0/24
95.134.5.0/24
178.92.135.0/24
178.92.157.0/24
Signature Algorithm: sha256WithRSAEncryption
37:55:71:52:e9:13:f5:34:2d:c2:b6:a9:cd:97:96:e1:a7:78:
9e:d7:5d:e3:e9:bc:50:72:38:7d:82:d4:d9:50:85:9a:69:d0:
4a:a4:d2:15:70:8b:b7:67:4f:29:cd:6a:bb:28:0b:09:28:42:
2b:a1:16:5f:19:ae:cf:7f:2c:fa:86:75:47:02:2f:13:37:2e:
b5:b9:85:7b:dc:54:d2:0b:7f:36:f4:8c:6f:4f:30:ea:d4:08:
b2:ac:79:2c:39:6f:9d:38:fd:25:3a:38:38:c3:2f:64:f8:a1:
aa:19:83:db:2e:f8:36:6a:9a:c3:75:5e:b2:d2:28:9b:af:31:
4b:5c:18:6b:16:17:53:d9:41:92:95:82:87:13:d4:58:da:24:
d6:10:c8:97:0b:df:5d:6f:2f:10:98:1c:09:b9:38:d9:6b:84:
6d:87:6e:48:9b:a2:f1:0e:92:a3:d5:f2:02:d4:eb:86:be:ec:
eb:ad:5e:e0:e1:ff:17:14:be:34:5b:71:1c:cf:56:94:cf:9c:
be:f6:61:7d:16:0c:4b:a7:3d:72:05:cc:f9:00:86:e6:e8:29:
0d:43:33:b1:f5:b8:97:e2:00:57:2d:1a:1f:83:66:83:74:5f:
38:36:c0:e3:0f:45:2b:da:de:ba:b3:ee:0a:d9:74:79:e8:31:
d9:41:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:32:35 2026 by rpki-client