Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
File: AS63473.roa (raw, json)
Hash identifier: feUi03XYHwz6wvpivPk0J+IViUcwGZ+JwPQJtxsF4Y8=
Subject key identifier: 45:7D:B3:F0:BF:33:F8:04:DD:E0:1D:8D:99:D7:4B:2F:1F:34:71:51
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2F171ABABF216DA8B0A10BA581DE1ACF5A088F98
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
Signing time: Tue 02 Jun 2026 08:17:17 +0000
ROA not before: Tue 02 Jun 2026 08:12:17 +0000
ROA not after: Tue 01 Jun 2027 08:17:17 +0000
asID: 63473
IP address blocks: 82.22.63.0/24 maxlen: 24
82.24.57.0/24 maxlen: 24
82.47.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:17:1a:ba:bf:21:6d:a8:b0:a1:0b:a5:81:de:1a:cf:5a:08:8f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 2 08:12:17 2026 GMT
Not After : Jun 1 08:17:17 2027 GMT
Subject: CN=457DB3F0BF33F804DDE01D8D99D74B2F1F347151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:0a:b1:13:18:67:d9:96:d0:b7:eb:f4:c0:
20:96:20:f7:88:30:a6:3f:0c:84:80:5d:82:79:02:
b1:cc:19:f5:dc:ff:b0:ed:90:68:ef:40:69:9f:c3:
58:2b:6b:7f:aa:2f:a5:4e:24:97:be:be:0f:12:05:
46:f5:e9:86:35:8b:47:3a:1e:cb:76:57:42:71:46:
9e:39:e7:02:a4:39:c5:a5:3f:39:4c:c6:1a:e2:5b:
18:5b:d5:05:e3:83:fc:af:2d:a6:b3:d5:1a:c4:66:
52:ea:b8:56:35:cd:a2:8f:2d:0d:f3:c2:e1:db:51:
75:bb:ea:8b:d1:49:c9:f7:ca:42:17:79:54:23:a9:
0c:64:74:92:03:b0:2a:39:f7:e4:b9:4a:68:94:71:
01:48:21:33:66:83:0b:82:8f:c7:f7:7a:62:87:42:
63:94:af:bd:b7:ba:24:6f:f3:0e:a6:e5:1e:63:e6:
a3:ae:e8:27:a9:ec:f7:d8:61:cf:43:d6:c6:bc:a0:
f7:5a:93:df:4f:b8:a4:72:e2:3e:4b:9e:ea:41:33:
c3:dc:1e:f9:ec:bd:77:29:b6:3f:0b:b6:ab:80:21:
b7:12:33:73:9f:48:e7:bd:4e:57:40:db:04:de:94:
5b:42:8b:ef:07:3d:6a:ae:d4:9f:d4:77:8b:b1:d4:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:B3:F0:BF:33:F8:04:DD:E0:1D:8D:99:D7:4B:2F:1F:34:71:51
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.63.0/24
82.24.57.0/24
82.47.177.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f5:cf:09:fb:6e:e3:42:7f:34:7f:40:8b:f6:6f:98:13:11:
99:5d:0e:54:99:9b:4c:2c:8c:29:48:cf:9f:c5:52:39:65:65:
8a:83:c3:8b:7c:1d:b8:d1:e1:c0:8a:64:7a:4b:97:e4:7b:b1:
72:db:4d:b2:f1:78:1f:0a:31:0d:0b:97:6e:a6:68:6b:08:63:
9d:8b:8c:0d:b9:da:71:d3:33:28:d3:67:b2:a1:46:a2:ba:38:
69:0b:23:d3:88:2c:08:36:a4:b8:d8:98:ac:2d:96:40:3c:04:
7d:91:45:ab:89:59:66:54:18:77:1b:1b:a8:7b:8a:16:9f:35:
6e:f0:44:ed:28:c8:94:c7:0d:82:d7:06:fe:29:a2:34:69:6d:
c2:d1:5c:54:46:e9:67:40:bd:ba:b0:68:1d:14:66:8d:1a:50:
8c:a8:c5:de:ed:6a:7a:aa:d4:9b:fd:a0:47:0e:f1:0d:ba:29:
76:db:c9:98:37:53:9f:b9:52:03:84:f8:49:c6:64:d0:03:56:
47:dc:28:7e:b7:23:0a:c3:21:2d:c8:97:ed:b0:d5:15:54:f8:
b8:6c:69:16:5e:ab:4f:8d:a5:69:09:14:a8:c0:a2:aa:55:aa:
48:6a:b3:73:15:2f:94:82:90:0f:c3:4b:ee:d0:9a:70:a9:bc:
0f:b6:74:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:33 2026 by rpki-client