Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63099.roa
File: AS63099.roa (raw, json)
Hash identifier: 2F1TUsXEWykFo6ke8kLbJi6OEKMysxWhEAqZZX/Rcm0=
Subject key identifier: 8D:3A:E3:15:F5:D1:80:1F:B5:27:65:3A:3E:C1:15:54:02:BE:3A:82
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 426AE9CDD65C69B7C9B92FB1623BF1EFCAAFB734
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63099.roa
Signing time: Thu 25 Jun 2026 10:56:06 +0000
ROA not before: Thu 25 Jun 2026 10:51:06 +0000
ROA not after: Thu 24 Jun 2027 10:56:06 +0000
asID: 63099
IP address blocks: 162.141.38.0/24 maxlen: 24
162.141.118.0/24 maxlen: 24
162.141.128.0/24 maxlen: 24
167.148.31.0/24 maxlen: 24
167.148.146.0/24 maxlen: 24
167.148.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6a:e9:cd:d6:5c:69:b7:c9:b9:2f:b1:62:3b:f1:ef:ca:af:b7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 25 10:51:06 2026 GMT
Not After : Jun 24 10:56:06 2027 GMT
Subject: CN=8D3AE315F5D1801FB527653A3EC1155402BE3A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:33:72:5b:06:6d:54:dc:ca:83:73:46:a4:
88:01:9c:2d:49:73:54:3a:ed:de:85:4e:52:d0:4d:
66:d4:7e:5e:eb:55:01:31:27:7c:41:73:55:01:b4:
ef:4a:a2:cd:aa:56:f6:de:26:a5:03:9d:c8:ab:8b:
8d:4b:77:1d:55:02:00:ed:1f:f9:eb:df:c3:54:be:
19:8a:cd:65:6f:63:37:df:4a:32:e2:04:e9:46:0e:
8b:c2:64:8d:54:a5:ca:97:fe:f5:26:9c:52:90:b9:
bb:43:07:ba:28:bd:a9:6d:4c:a7:81:a1:aa:ba:7b:
bb:b4:66:cf:ec:e7:b2:2c:8e:84:fe:43:b8:99:66:
ec:8d:b0:d3:d4:5b:29:e8:14:24:d7:0a:6c:74:5b:
4b:7d:51:26:4a:8d:d7:73:9b:6a:ea:7f:5d:d1:30:
75:7b:46:c2:e6:17:36:8d:5d:aa:13:27:24:8e:2c:
68:5c:4f:44:f3:e1:38:4a:2b:92:71:fb:24:2d:aa:
6e:c3:2a:f8:f8:af:11:52:a0:f9:43:44:11:c6:74:
3e:b8:20:5f:7b:b8:fe:ed:c8:99:36:18:12:a0:ac:
72:76:0d:4d:6d:a0:b4:b1:56:08:da:00:cc:e1:4d:
36:54:b5:af:ac:e6:bf:ca:79:43:21:c3:7b:f2:15:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:E3:15:F5:D1:80:1F:B5:27:65:3A:3E:C1:15:54:02:BE:3A:82
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63099.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.38.0/24
162.141.118.0/24
162.141.128.0/24
167.148.31.0/24
167.148.146.0/24
167.148.148.0/24
Signature Algorithm: sha256WithRSAEncryption
46:70:74:0d:bf:1c:80:56:ce:1e:6b:7b:5b:a7:c1:78:89:9c:
ed:d1:ef:43:49:8e:26:43:f0:b3:5a:f6:40:92:2a:c8:0d:ed:
38:05:fa:60:14:2c:d0:63:f7:7b:1e:e5:f2:ea:fd:60:3b:18:
4f:a2:08:30:76:47:b9:34:19:ae:42:61:cb:c5:42:99:38:c9:
a7:14:15:8f:f2:44:bb:fa:52:97:55:06:81:e1:b0:29:24:e9:
62:6a:04:14:ab:eb:74:03:b4:97:01:89:64:84:f9:cc:6d:a8:
22:23:f3:17:99:f7:58:64:0b:95:36:af:64:9a:df:8e:50:2b:
78:89:15:4b:64:e4:23:3c:95:cd:ef:83:1b:c7:cb:75:24:ba:
b4:d4:61:40:df:7e:f9:51:77:2e:81:a0:f3:52:f5:96:10:c7:
8c:73:09:8a:e4:73:1a:19:b3:6b:d6:ed:33:17:8c:2d:8d:e1:
59:d5:b0:24:06:75:56:9d:18:d6:23:39:4d:13:cb:3e:19:43:
7b:f5:3a:b9:b8:d5:03:49:8b:71:27:2d:2a:51:f4:93:b9:26:
45:b0:56:19:ba:5d:1a:4a:60:fe:3c:b7:7c:83:99:6e:77:ed:
28:78:9a:16:a5:4e:a5:5c:f5:45:64:48:ae:f4:ec:c7:6c:4b:
7c:be:c1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:36:14 2026 by rpki-client