Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
File: AS63473.roa (raw, json)
Hash identifier: sM4L+oZm/q9TLijOk6GIlnWBX9VbH64jYl73PdM64h8=
Subject key identifier: 88:23:AF:FA:57:4D:8F:1C:34:8A:ED:2A:44:1C:61:76:AF:74:47:56
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 657F302656EBA79849AEF1124F76964525DE2CA4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
Signing time: Thu 02 Jul 2026 13:18:18 +0000
ROA not before: Thu 02 Jul 2026 13:13:18 +0000
ROA not after: Thu 01 Jul 2027 13:18:18 +0000
asID: 63473
IP address blocks: 82.21.65.0/24 maxlen: 24
82.22.63.0/24 maxlen: 24
82.24.57.0/24 maxlen: 24
82.47.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7f:30:26:56:eb:a7:98:49:ae:f1:12:4f:76:96:45:25:de:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 2 13:13:18 2026 GMT
Not After : Jul 1 13:18:18 2027 GMT
Subject: CN=8823AFFA574D8F1C348AED2A441C6176AF744756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:f9:19:66:50:ce:11:a2:52:19:f2:ca:55:
e3:1e:dc:67:9f:ad:dc:5e:cb:86:8c:e5:78:ef:72:
2e:c1:5b:84:d8:3b:53:8d:f2:d5:08:f3:3c:5b:1f:
a1:86:ca:1c:8e:db:f3:d9:7a:35:a9:cc:fd:b1:c8:
8a:42:85:2e:f0:41:c2:62:af:d9:c0:27:b1:a4:9a:
7c:7e:53:4b:50:9d:da:98:12:45:95:e0:02:6f:fd:
44:2a:7d:f4:0a:f9:ce:c9:23:12:08:50:34:38:f9:
d4:80:9f:a0:a1:6b:e7:a0:e0:a9:fe:c0:85:41:e4:
b7:bc:34:ca:a6:45:af:54:51:69:59:84:87:d9:8b:
32:ff:5e:17:3e:2c:29:fd:ff:43:c2:b8:d7:0e:e0:
db:67:7e:e3:94:10:58:11:90:37:b6:bf:7e:83:14:
d7:cf:19:7a:eb:42:4f:86:59:1d:46:74:d7:22:a3:
d1:41:7d:b8:d7:f0:49:97:55:8a:1c:2f:1b:08:a9:
97:98:80:43:bb:e7:44:11:39:02:ca:d9:d6:c0:7e:
1e:2d:f5:f8:cf:79:c1:63:3b:66:77:9d:c9:5c:31:
e9:cd:88:97:bb:18:2b:52:30:ee:f7:53:55:b7:a1:
86:6d:0c:fd:24:7c:2f:0d:87:83:ad:d1:1e:74:e4:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:23:AF:FA:57:4D:8F:1C:34:8A:ED:2A:44:1C:61:76:AF:74:47:56
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.65.0/24
82.22.63.0/24
82.24.57.0/24
82.47.177.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1a:94:4e:76:73:a2:e8:1e:b1:25:c2:57:77:10:44:3a:6e:
f7:c5:23:9f:1f:b2:e8:d8:27:12:1b:54:31:2c:ba:ab:fc:db:
d0:8c:b8:8d:0b:56:bb:07:d9:fe:4f:be:5b:d8:a1:fe:c5:da:
70:6f:83:f1:77:5c:c0:9f:1d:41:a9:62:d5:f9:41:34:bf:2f:
fa:a4:f1:df:3e:36:7c:8d:b2:c5:ab:bc:89:eb:39:12:d1:d6:
3f:ae:e9:54:8d:05:8e:d7:e7:7b:6b:12:8b:00:3a:4a:87:05:
c1:2a:6a:76:9d:cb:44:6e:6a:04:8f:3d:65:48:3b:7f:cc:07:
9b:94:b2:45:05:11:e9:1f:42:fa:bd:b1:13:fa:24:84:e5:95:
ec:2f:c3:8a:70:fc:f9:2a:36:bc:73:67:23:77:90:97:34:f1:
bc:0a:7c:36:fa:b6:b1:89:ea:5d:fc:c4:e0:2f:6b:f8:89:b0:
ec:7e:c9:ad:89:b1:a3:41:83:ff:b9:5d:9d:31:6f:94:f3:11:
8f:9f:a4:a9:a6:f9:be:72:60:6b:e9:bc:6e:64:a8:c4:42:33:
3e:8a:6a:c4:4a:c1:6f:4b:1c:35:b7:dc:bd:66:de:7c:5a:a8:
36:43:1c:87:c8:74:44:46:a3:fb:8a:0f:67:c4:39:da:c2:68:
9a:74:d7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:05:17 2026 by rpki-client