Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: nwrjGvrP8i5rq/5ek4GRAAuS42ApMAP6480MBENIw5k=
Subject key identifier: FB:57:E6:E8:24:43:CD:53:9E:9B:14:4F:CA:75:6C:B4:71:58:B4:AC
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 655F034585BD925357174DE3F02601361CB2F827
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
Signing time: Fri 17 Apr 2026 06:52:06 +0000
ROA not before: Fri 17 Apr 2026 06:47:06 +0000
ROA not after: Fri 16 Apr 2027 06:52:06 +0000
asID: 63199
IP address blocks: 96.62.115.0/24 maxlen: 24
140.150.239.0/24 maxlen: 24
140.233.187.0/24 maxlen: 24
146.103.35.0/24 maxlen: 24
147.79.17.0/24 maxlen: 24
148.135.199.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
155.117.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5f:03:45:85:bd:92:53:57:17:4d:e3:f0:26:01:36:1c:b2:f8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 17 06:47:06 2026 GMT
Not After : Apr 16 06:52:06 2027 GMT
Subject: CN=FB57E6E82443CD539E9B144FCA756CB47158B4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:bc:ea:b6:18:b1:69:b4:98:95:28:d2:d5:
3f:c8:65:00:a6:3f:11:2a:77:00:6a:73:86:d0:b0:
8f:31:d6:99:51:d3:1e:4b:10:69:1f:df:b0:69:51:
3b:a6:5e:af:fd:4d:23:2e:a6:e9:7b:23:12:38:f3:
59:33:c5:e3:49:7b:f0:1a:93:95:fd:de:16:b7:1c:
d7:9d:4a:bb:3a:94:b1:a2:84:8c:76:93:20:92:55:
e6:c1:2a:d8:5e:28:6d:99:cb:4d:c9:03:b7:1a:e1:
50:4b:56:59:63:78:f2:0b:e8:cd:96:5f:43:5e:19:
33:14:53:5a:a6:9c:23:9c:4e:16:2b:80:d7:6d:e9:
4b:9e:3e:3a:d6:4e:e8:b3:91:39:a7:d4:6f:92:10:
48:22:3b:fe:2d:bc:52:44:31:b8:4a:05:cc:eb:e6:
32:51:1e:27:d2:47:e2:ba:ab:fa:57:dc:96:b0:ac:
7c:c3:fa:b1:74:8f:d9:5c:08:2f:23:c8:10:b0:d7:
f2:24:68:5f:75:52:be:47:a3:c7:48:2a:86:a0:ef:
d2:a5:37:39:70:a1:2c:0e:f8:56:76:d3:47:56:a6:
66:84:24:43:20:4b:6c:d8:37:65:34:dc:79:b1:97:
43:a5:11:ef:e4:c5:38:f9:e8:2d:4d:ee:4a:15:1b:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:E6:E8:24:43:CD:53:9E:9B:14:4F:CA:75:6C:B4:71:58:B4:AC
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.115.0/24
140.150.239.0/24
140.233.187.0/24
146.103.35.0/24
147.79.17.0/24
148.135.199.0/24
150.241.131.0/24
155.117.6.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1f:01:ff:04:f2:1a:60:f8:32:d3:ee:af:b2:1e:0f:8a:b8:
ba:d5:63:8f:31:ff:25:42:2c:b9:eb:42:14:2f:38:f9:f7:42:
f6:22:20:45:59:a1:8d:f1:70:f3:9a:88:40:78:fe:24:be:22:
9a:35:95:f2:fb:a4:26:48:7a:a5:7c:39:9d:9d:88:40:35:79:
1c:ac:c6:fd:af:4d:19:9d:d0:e8:4f:46:3b:45:6c:50:9c:82:
83:ca:2c:6d:cc:bc:f8:e9:8b:f4:31:62:da:64:97:77:50:8d:
40:cd:be:df:d6:f0:4e:fe:c2:ec:6b:09:46:6e:7f:58:eb:60:
ea:69:a5:f8:92:fd:76:55:fb:24:6c:db:00:ab:de:b3:7e:a2:
24:4a:01:3e:6c:66:ac:fb:2c:34:7b:da:bc:17:f9:af:fc:20:
cd:d3:13:c4:53:a2:11:78:dd:52:4c:b5:35:ad:0d:13:e8:64:
da:d7:7d:ee:81:62:a7:f0:14:bc:a6:d4:04:0b:e9:8d:dd:db:
e3:38:50:e2:ef:af:9a:d4:45:d2:71:c2:cb:9c:55:24:cc:08:
60:ff:a9:bf:65:c8:60:36:fe:30:d4:76:e2:3a:01:b2:89:e0:
c1:a3:af:b8:97:42:c8:d5:0b:bc:25:0b:98:d2:12:c3:e3:11:
70:36:5f:d1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUZV8DRYW9klNXF03j8CYBNhyy+CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA0MTcwNjQ3MDZaFw0yNzA0MTYwNjUyMDZaMDMxMTAvBgNV
BAMTKEZCNTdFNkU4MjQ0M0NENTM5RTlCMTQ0RkNBNzU2Q0I0NzE1OEI0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrbzqthixabSYlSjS1T/IZQCm
PxEqdwBqc4bQsI8x1plR0x5LEGkf37BpUTumXq/9TSMupul7IxI481kzxeNJe/Aa
k5X93ha3HNedSrs6lLGihIx2kyCSVebBKtheKG2Zy03JA7ca4VBLVlljePIL6M2W
X0NeGTMUU1qmnCOcThYrgNdt6UuePjrWTuizkTmn1G+SEEgiO/4tvFJEMbhKBczr
5jJRHifSR+K6q/pX3JawrHzD+rF0j9lcCC8jyBCw1/IkaF91Ur5Ho8dIKoag79Kl
NzlwoSwO+FZ200dWpmaEJEMgS2zYN2U03Hmxl0OlEe/kxTj56C1N7koVG/i1AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU+1fm6CRDzVOemxRPynVstHFYtKwwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBABgPnMD
BACMlu8DBACM6bsDBACSZyMDBACTTxEDBACUh8cDBACW8YMDBACbdQYwDQYJKoZI
hvcNAQELBQADggEBAFYfAf8E8hpg+DLT7q+yHg+KuLrVY48x/yVCLLnrQhQvOPn3
QvYiIEVZoY3xcPOaiEB4/iS+Ipo1lfL7pCZIeqV8OZ2diEA1eRysxv2vTRmd0OhP
RjtFbFCcgoPKLG3MvPjpi/QxYtpkl3dQjUDNvt/W8E7+wuxrCUZuf1jrYOpppfiS
/XZV+yRs2wCr3rN+oiRKAT5sZqz7LDR72rwX+a/8IM3TE8RTohF43VJMtTWtDRPo
ZNrXfe6BYqfwFLym1AQL6Y3d2+M4UOLvr5rURdJxwsucVSTMCGD/qb9lyGA2/jDU
duI6AbKJ4MGjr7iXQsjVC7wlC5jSEsPjEXA2X9E=
-----END CERTIFICATE-----
Generated at Sun Apr 19 23:01:45 2026 by rpki-client