Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: lERUZZqANjlkTEU8XS4G5vZuEl88lNKrvuUJ6oGVAks=
Subject key identifier: D1:35:7F:10:F0:74:FA:E8:22:09:9E:C4:94:27:C2:CB:00:67:37:C4
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3EF32E222E226C5CB3E55EE4A393B845137E7DFA
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63902.roa
Signing time: Mon 03 Aug 2026 13:18:14 +0000
ROA not before: Mon 03 Aug 2026 13:13:14 +0000
ROA not after: Mon 02 Aug 2027 13:18:14 +0000
asID: 63902
IP address blocks: 96.62.152.0/24 maxlen: 24
96.62.222.0/24 maxlen: 24
155.117.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f3:2e:22:2e:22:6c:5c:b3:e5:5e:e4:a3:93:b8:45:13:7e:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 3 13:13:14 2026 GMT
Not After : Aug 2 13:18:14 2027 GMT
Subject: CN=D1357F10F074FAE822099EC49427C2CB006737C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:29:fb:c8:10:74:09:b4:b1:c3:05:b9:c5:
38:bb:d0:08:ed:3b:1d:28:7d:52:ff:42:91:a3:b6:
86:f6:86:f9:7a:b5:91:e1:a3:0e:a7:f1:3b:39:f0:
5e:82:d4:a0:a3:a5:3a:93:92:07:94:9c:f5:d7:78:
c7:b7:37:32:cd:62:f3:11:e0:1b:d2:60:6c:2a:c2:
f9:f2:f7:6a:eb:f0:05:4c:f9:9e:88:f6:0a:b4:79:
8d:80:84:17:bf:18:47:c7:af:72:27:42:01:b9:1d:
23:e9:c8:4f:2a:2f:f6:de:ae:dd:ad:05:bf:ae:e2:
12:5b:be:5b:f8:0e:8a:e8:9e:00:ef:91:13:c7:6f:
59:5a:34:eb:4c:02:a7:54:57:5a:63:59:ed:e7:d1:
e8:83:7a:94:be:ac:e8:a0:7e:c5:b6:77:09:fe:e6:
ef:31:3a:c2:21:c4:d3:c9:f9:20:56:a9:19:69:67:
49:28:91:e3:c9:bc:a5:dc:10:f8:e3:52:1d:47:32:
88:18:62:52:1f:1d:2b:1e:2f:75:0e:93:fd:30:cc:
4c:da:95:f1:2d:97:3c:2c:1f:04:b8:8e:3e:d1:ad:
02:82:67:ef:ab:1f:62:09:5a:2b:38:6a:fd:4c:65:
af:62:4e:bf:68:5c:c8:77:ff:65:e6:24:0c:d4:7c:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:7F:10:F0:74:FA:E8:22:09:9E:C4:94:27:C2:CB:00:67:37:C4
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.152.0/24
96.62.222.0/24
155.117.15.0/24
Signature Algorithm: sha256WithRSAEncryption
03:16:8e:eb:a8:60:39:4b:4b:5b:ae:a4:85:f9:f7:0a:31:0c:
2e:73:06:48:de:60:60:b5:e2:2e:c2:9d:d2:04:32:3c:eb:01:
ca:79:6a:93:d7:87:09:fd:a6:0c:37:7a:e1:50:e5:77:73:df:
55:97:d8:ec:44:c0:93:67:0c:96:36:08:80:3b:f5:53:a7:97:
22:24:86:03:9e:c6:a6:c1:bb:d6:9b:50:36:fc:1a:0c:56:85:
82:34:d2:27:43:45:6e:34:82:7f:82:dd:83:4b:b9:11:2e:7a:
45:78:c9:c1:24:9a:b0:62:0c:42:23:2d:7e:e7:fc:29:6d:54:
d5:cf:02:55:49:60:df:43:09:61:7b:59:12:16:95:a4:7c:b4:
bf:ca:28:e3:99:b0:dd:9c:ee:73:64:3a:fa:92:14:74:a7:da:
bc:62:9b:b2:9e:f8:53:3d:e9:78:4e:89:39:8d:fe:cc:2f:76:
8c:fc:5e:9b:e3:2f:b6:9c:37:71:6c:03:0e:dc:14:55:ad:af:
d7:80:01:c6:b5:76:aa:56:97:e0:3b:19:54:01:fc:e5:f3:46:
c3:ee:18:11:cc:1d:70:eb:99:ad:ef:5b:54:1c:96:9e:dd:9f:
fa:f4:f9:72:77:7f:bb:af:e1:dc:03:6b:cd:e6:b2:2f:88:8c:
19:59:c0:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:06 2026 by rpki-client