Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: etZwzNE+bbPTLtanxzZUACiG76zg9oPP3zOPbXGnqy8=
Subject key identifier: C9:9B:60:B7:FD:0F:77:54:44:15:CC:4E:A2:96:BE:9A:08:74:64:CD
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1B5E7C32703F6F34DEAB73A871CE2F549A8B4D69
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
Signing time: Tue 07 Jul 2026 02:32:16 +0000
ROA not before: Tue 07 Jul 2026 02:27:16 +0000
ROA not after: Tue 06 Jul 2027 02:32:16 +0000
asID: 63199
IP address blocks: 145.223.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5e:7c:32:70:3f:6f:34:de:ab:73:a8:71:ce:2f:54:9a:8b:4d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 7 02:27:16 2026 GMT
Not After : Jul 6 02:32:16 2027 GMT
Subject: CN=C99B60B7FD0F77544415CC4EA296BE9A087464CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:81:dd:26:e3:6a:e5:b8:26:41:27:0c:22:
cd:a9:bc:22:1a:df:be:ec:e3:34:0a:39:92:66:3c:
ca:bb:37:6d:e9:b0:6a:34:7b:9d:43:97:4a:2e:f4:
3f:1e:8f:ab:ad:be:28:48:15:d5:3f:2b:23:d6:b2:
1c:8b:71:1e:80:18:b3:6c:9d:57:89:91:bf:94:38:
80:60:a2:45:1f:ff:d3:87:ee:0f:08:95:22:a4:78:
9b:50:5d:1b:a4:26:e3:28:29:07:32:c6:05:f8:c6:
88:a7:bd:df:9b:0f:1f:7c:42:53:db:b1:9d:f3:32:
e8:d7:22:d7:08:4e:37:7f:ce:40:ef:05:91:94:95:
13:0e:61:aa:06:8e:d5:49:bc:c5:9b:d5:2a:aa:da:
0f:de:e0:d7:3a:6e:50:15:9e:cc:f5:73:3c:1d:4e:
e8:c5:3a:06:b6:5e:79:86:7f:2f:a4:6f:a7:8f:e5:
6a:80:c9:ae:99:7e:1e:a3:fd:9c:d3:32:88:93:a1:
a4:94:7c:3a:55:b8:04:d8:b4:3d:98:de:b1:d8:e6:
1b:56:a5:cc:b8:66:c5:e6:5d:97:e0:a4:a7:88:2a:
00:ee:b5:05:d0:d4:f4:10:ad:6a:6b:6c:7a:09:6c:
e5:56:8f:93:46:2e:20:40:e8:af:5e:9b:64:bd:4a:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9B:60:B7:FD:0F:77:54:44:15:CC:4E:A2:96:BE:9A:08:74:64:CD
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.223.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e3:ce:cd:00:bc:9e:1a:39:35:2e:09:95:36:98:e8:ad:07:
99:71:30:c8:44:97:07:51:2b:de:7f:21:63:58:24:6a:89:b0:
40:92:da:4d:60:85:90:c2:d0:10:74:2d:38:bf:ec:11:ee:90:
6d:a2:76:77:22:24:43:17:67:f5:06:bd:25:84:1a:00:98:3f:
7f:23:46:eb:15:be:e9:ae:f0:46:44:6e:c2:1c:28:de:0d:33:
bc:0e:cd:18:ce:eb:cd:41:7f:22:12:24:93:ef:86:0f:4a:63:
f7:d7:4e:04:3c:e5:a1:5b:db:09:0d:9c:2d:f2:ca:9f:ed:eb:
bf:6a:7c:2d:04:ba:a1:7a:f6:74:f8:08:cd:20:39:4f:8a:c2:
f7:be:bc:2a:81:74:79:0c:54:67:44:f1:da:b9:22:f6:cc:d9:
62:8f:8f:20:3e:cc:b8:dd:f0:8b:bb:43:41:9c:dd:18:30:47:
42:83:04:0d:9f:d3:1c:0b:7e:e1:8a:1b:60:d2:2e:ec:96:9d:
8b:20:c7:a7:4b:2e:60:6b:5c:29:b4:e4:3d:13:9f:b3:6f:0c:
a0:06:2f:92:ae:05:98:53:8e:fb:8b:a6:e6:7e:0b:f6:43:36:
52:91:74:9f:91:fd:ba:d0:16:97:f9:35:6b:16:2a:6c:96:d8:
a9:b9:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 18:34:15 2026 by rpki-client