Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: qgWGr0TbyEKoPnSitgc45ElCTokKfM3E/6hyZLGikmI=
Subject key identifier: A7:59:A3:9E:4D:33:15:00:C2:08:AE:CB:82:E8:32:C8:16:87:7A:93
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F77752B160A2788E2620AFA25D114877E201E2D
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
Signing time: Wed 17 Jun 2026 14:42:28 +0000
ROA not before: Wed 17 Jun 2026 14:37:28 +0000
ROA not after: Wed 16 Jun 2027 14:42:28 +0000
asID: 63023
IP address blocks: 96.62.100.0/24 maxlen: 24
143.14.67.0/24 maxlen: 24
143.14.220.0/24 maxlen: 24
155.117.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:77:75:2b:16:0a:27:88:e2:62:0a:fa:25:d1:14:87:7e:20:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 17 14:37:28 2026 GMT
Not After : Jun 16 14:42:28 2027 GMT
Subject: CN=A759A39E4D331500C208AECB82E832C816877A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:35:0f:d8:2b:e9:6f:62:57:c9:af:6c:34:
1c:80:e9:e6:11:48:85:f9:a0:f5:4b:16:32:17:60:
5c:de:f0:b5:54:0e:51:7c:02:7e:b1:92:c9:a2:6b:
7b:69:ac:18:64:e1:30:18:75:17:92:4a:26:83:8c:
83:22:43:10:0d:b8:ee:f1:c5:00:0a:97:08:12:73:
f4:e8:15:85:57:36:a0:8e:0e:42:98:88:a5:60:39:
79:ea:e3:c5:40:ed:e5:aa:06:f7:b9:52:e5:e8:4b:
78:fe:ad:81:a9:34:2d:97:10:28:df:d0:56:8e:22:
eb:64:b6:e0:cf:4e:80:5f:13:e3:6b:92:cb:65:82:
00:12:61:dd:96:e0:19:d7:d1:7e:31:7d:ef:06:88:
2b:3d:b7:1a:d4:b1:03:2b:09:87:63:ac:74:c1:89:
c5:f5:b4:8e:11:88:c3:a6:01:1b:1b:2a:28:35:d5:
fd:7d:6f:ab:a7:6b:aa:08:c8:4d:71:b0:02:03:37:
a2:d1:70:7a:48:ba:6b:e6:2a:58:1a:db:85:dc:c0:
3c:f2:7a:cf:a7:53:9e:63:b8:57:60:af:fc:f2:39:
09:d5:dc:9f:3f:b5:92:3a:94:8d:20:a2:f6:85:5b:
b0:d9:69:09:c2:7b:31:32:06:00:c7:48:bf:95:b8:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:A3:9E:4D:33:15:00:C2:08:AE:CB:82:E8:32:C8:16:87:7A:93
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.100.0/24
143.14.67.0/24
143.14.220.0/24
155.117.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b6:db:7c:99:3b:da:0b:da:c7:99:17:5e:c0:ca:63:57:a5:
02:f4:14:fd:4b:5d:23:77:f3:07:68:30:64:61:e8:60:6c:76:
b4:97:cc:d7:35:cc:d0:97:f7:39:2d:c7:c9:7a:bc:7a:b4:d3:
8f:af:db:26:56:c3:6b:f9:d1:5d:7d:76:75:7b:14:0d:1d:67:
22:f8:bb:46:4e:fa:76:41:18:a5:29:c4:b6:9f:cc:e3:6f:a8:
63:b3:26:48:71:1b:80:86:03:a9:7c:d0:5c:be:0f:e7:0e:6a:
5d:bf:9b:24:cb:2f:be:00:07:84:10:51:ae:16:6b:7a:79:a3:
56:36:fa:59:b4:d7:0f:6e:88:a3:94:b4:09:dc:0e:9a:b7:8d:
8e:51:2c:3c:9a:ad:da:23:0b:19:13:7d:49:5e:e3:28:b2:a5:
a0:fd:ac:ba:63:1a:46:e8:34:eb:63:0a:3a:58:bc:20:f8:ba:
43:f7:2d:9f:55:8f:42:e2:5a:fc:f2:7d:29:a1:dc:ab:8f:3b:
23:df:01:41:55:03:66:3f:d3:4a:e8:7e:6d:21:a5:18:25:33:
fb:e4:6a:e7:8b:3c:53:e7:18:ed:2d:62:e2:ea:59:8d:18:75:
dc:40:d6:07:75:e6:e7:69:b0:2b:14:35:5a:b0:04:71:71:ec:
ff:cc:a1:d2
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUL3d1KxYKJ4jiYgr6JdEUh34gHi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA2MTcxNDM3MjhaFw0yNzA2MTYxNDQyMjhaMDMxMTAvBgNV
BAMTKEE3NTlBMzlFNEQzMzE1MDBDMjA4QUVDQjgyRTgzMkM4MTY4NzdBOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtDUP2Cvpb2JXya9sNByA6eYR
SIX5oPVLFjIXYFze8LVUDlF8An6xksmia3tprBhk4TAYdReSSiaDjIMiQxANuO7x
xQAKlwgSc/ToFYVXNqCODkKYiKVgOXnq48VA7eWqBve5UuXoS3j+rYGpNC2XECjf
0FaOIutktuDPToBfE+NrkstlggASYd2W4BnX0X4xfe8GiCs9txrUsQMrCYdjrHTB
icX1tI4RiMOmARsbKig11f19b6una6oIyE1xsAIDN6LRcHpIumvmKlga24XcwDzy
es+nU55juFdgr/zyOQnV3J8/tZI6lI0govaFW7DZaQnCezEyBgDHSL+VuCHrAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUp1mjnk0zFQDCCK7LgugyyBaHepMwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMwMjMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABgPmQD
BACPDkMDBACPDtwDBACbdc4wDQYJKoZIhvcNAQELBQADggEBAKi223yZO9oL2seZ
F17AymNXpQL0FP1LXSN38wdoMGRh6GBsdrSXzNc1zNCX9zktx8l6vHq004+v2yZW
w2v50V19dnV7FA0dZyL4u0ZO+nZBGKUpxLafzONvqGOzJkhxG4CGA6l80Fy+D+cO
al2/myTLL74AB4QQUa4Wa3p5o1Y2+lm01w9uiKOUtAncDpq3jY5RLDyardojCxkT
fUle4yiypaD9rLpjGkboNOtjCjpYvCD4ukP3LZ9Vj0LiWvzyfSmh3KuPOyPfAUFV
A2Y/00rofm0hpRglM/vkaueLPFPnGO0tYuLqWY0YddxA1gd15udpsCsUNVqwBHFx
7P/ModI=
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:24 2026 by rpki-client