Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: Anzxkp3+KuK7+Hwcztj2ta3f6+fiusrZBCOzXpLJ/Ks=
Subject key identifier: 0D:21:E0:F7:5D:39:10:90:3B:BC:DB:A9:4A:D9:14:BE:B3:B4:85:F0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2344E3E3347E44CA198B4F539095153D88950241
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
Signing time: Mon 02 Mar 2026 10:10:19 +0000
ROA not before: Mon 02 Mar 2026 10:05:19 +0000
ROA not after: Mon 01 Mar 2027 10:10:19 +0000
asID: 63199
IP address blocks: 140.150.152.0/24 maxlen: 24
150.241.131.0/24 maxlen: 24
150.241.240.0/24 maxlen: 24
168.222.10.0/24 maxlen: 24
168.222.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 07:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:44:e3:e3:34:7e:44:ca:19:8b:4f:53:90:95:15:3d:88:95:02:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Mar 2 10:05:19 2026 GMT
Not After : Mar 1 10:10:19 2027 GMT
Subject: CN=0D21E0F75D3910903BBCDBA94AD914BEB3B485F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:65:86:ed:88:05:ce:71:80:47:48:6e:4f:
50:5d:59:d2:bd:de:92:a7:9a:37:15:8f:7a:ae:6a:
50:92:c6:d6:c2:b0:2a:b6:7e:dc:4f:b8:f9:27:70:
c8:71:0d:0f:ec:7e:ab:9e:3e:3b:63:09:ee:66:d3:
ed:a9:c4:ef:8c:23:d9:8b:a6:e2:14:68:bf:46:86:
7c:fa:16:18:13:c5:78:fb:3b:d5:e2:50:4c:22:5a:
49:1d:5c:1e:ae:d8:98:64:fd:a8:a3:3d:da:3d:18:
59:9d:59:4b:92:7c:8e:2e:53:a5:bd:e3:48:f2:79:
1b:d6:b2:65:bf:0b:67:1e:fe:1e:ea:46:14:aa:7a:
22:d5:7d:06:c8:be:83:9a:80:c5:90:a4:b1:49:40:
69:85:73:2c:44:95:14:2e:4e:0f:cf:48:6a:cd:a0:
c4:0d:9e:93:0b:b3:81:88:10:34:97:b1:26:f6:1f:
58:50:48:4b:2f:f2:2b:a5:da:54:55:c6:be:af:ef:
86:8c:e1:9b:f6:e7:97:68:0f:e6:ff:5a:a2:b0:41:
5d:03:b1:ba:c0:76:ec:1c:7a:01:88:62:c1:50:94:
49:bd:83:9e:32:74:13:d7:15:c1:5c:26:cb:c4:9e:
34:c1:df:de:46:cb:56:22:7f:a8:92:28:c0:b7:60:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:E0:F7:5D:39:10:90:3B:BC:DB:A9:4A:D9:14:BE:B3:B4:85:F0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.152.0/24
150.241.131.0/24
150.241.240.0/24
168.222.10.0/24
168.222.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:6e:c7:fe:2f:95:ff:fb:d2:69:96:25:56:56:df:7b:b2:e9:
e9:34:8b:00:e1:ca:e3:05:da:a3:ec:eb:af:17:16:6a:24:76:
9f:44:bc:20:68:db:c7:d3:d5:91:30:65:90:27:0b:99:ca:98:
dc:32:e0:46:b3:b5:7d:a6:92:62:20:0e:b0:24:92:52:cd:23:
e7:16:bc:3a:26:14:49:26:fa:f6:ec:69:0f:10:ca:f8:96:f7:
92:56:cd:fd:f7:2f:ea:e7:f9:40:29:71:c3:5e:28:01:7e:de:
6d:6f:58:77:64:46:ed:19:f4:11:1a:dc:48:65:4a:d0:9d:88:
86:2a:18:7f:ca:96:91:64:92:e3:c9:b2:3c:86:a7:e0:11:d5:
86:4b:8b:86:9b:a3:51:c7:15:e4:73:d9:be:7b:8e:44:40:45:
5f:36:54:95:ba:a7:fa:61:cc:48:fc:fc:c8:3a:81:99:27:1b:
63:64:9a:8c:6f:4c:82:27:bd:32:13:8c:45:18:bf:a1:45:38:
d1:10:7b:8a:62:ca:22:95:a8:5e:15:da:98:27:f7:c1:f6:72:
5f:a3:b9:30:92:fc:67:3d:91:38:12:73:3d:43:8d:a5:ac:4b:
91:35:ef:1e:74:9b:56:48:e9:56:d7:4f:9a:94:c6:20:0f:d6:
10:be:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 10:45:29 2026 by rpki-client