Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: h6lYDbei+a6J4yvrjPeufy3iFI5zq2vfqmmzWGYRZks=
Subject key identifier: D8:FF:D6:D6:8C:CD:CA:C3:99:24:ED:91:8E:80:E1:C2:6C:F2:7A:95
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7BAF7E3F2B0EE2AEC7C340C61B6B80D627A5D59C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63902.roa
Signing time: Thu 25 Jun 2026 09:48:41 +0000
ROA not before: Thu 25 Jun 2026 09:43:41 +0000
ROA not after: Thu 24 Jun 2027 09:48:41 +0000
asID: 63902
IP address blocks: 82.29.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:af:7e:3f:2b:0e:e2:ae:c7:c3:40:c6:1b:6b:80:d6:27:a5:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jun 25 09:43:41 2026 GMT
Not After : Jun 24 09:48:41 2027 GMT
Subject: CN=D8FFD6D68CCDCAC39924ED918E80E1C26CF27A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:ee:3b:20:e1:57:db:72:c3:7c:d4:2b:a1:
48:79:de:31:9d:36:21:d8:69:3d:17:eb:9c:54:6b:
6e:13:7a:2f:f6:78:4d:c9:f0:9b:35:b3:20:42:8f:
d5:ef:f4:9d:23:1f:26:99:6a:70:fd:d8:58:12:52:
91:4a:37:8a:51:92:2d:b6:13:f5:6f:c0:29:24:ee:
9e:a5:94:0f:09:ff:2d:55:25:22:71:08:fd:e4:dc:
35:c7:13:e2:1c:7f:fc:62:15:3b:e4:20:21:2c:cc:
a3:73:bd:1e:1d:a1:16:b4:20:0f:5a:b2:50:f8:ec:
ee:2b:9b:1c:ef:9a:20:b2:75:9b:5d:e1:dd:49:30:
3c:e7:71:9a:6a:1d:5c:ad:b7:68:e3:6f:24:2e:19:
16:31:cb:f1:e3:a7:83:d6:94:f2:99:7b:d7:f3:9a:
cc:bf:15:c2:b9:8b:23:65:96:e2:e1:09:94:3a:3d:
7d:23:2d:74:cb:97:30:f6:88:50:84:c7:cc:5e:50:
71:57:f4:41:e1:dc:a6:59:ec:0c:51:07:c9:ad:99:
72:67:f2:ce:26:22:27:56:80:1e:9d:89:86:31:04:
c1:06:13:bf:71:a7:c8:31:de:39:aa:ec:12:b9:03:
d0:60:14:b0:36:b6:75:10:62:27:fa:f7:bc:6f:64:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:D6:D6:8C:CD:CA:C3:99:24:ED:91:8E:80:E1:C2:6C:F2:7A:95
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3e:75:e9:d6:88:bf:9f:8f:35:06:52:8d:27:fb:92:75:8d:
d9:d0:1e:11:e4:ec:5d:51:94:01:a0:b2:f6:56:c4:9c:cb:2f:
d2:2d:d9:e1:fa:b6:d8:e4:be:93:a3:47:ab:7e:f8:00:bc:ec:
f2:8c:48:08:60:c4:60:3c:d5:47:0d:76:81:4f:97:39:49:97:
c6:c4:a6:66:8b:d7:a3:f4:dc:64:ed:5b:12:c7:fd:d6:11:6d:
e2:e7:e8:ae:04:51:da:8a:41:4e:ea:c4:f0:1c:93:60:79:be:
74:42:4d:da:65:88:80:fc:d8:52:fc:e5:d0:8b:9d:63:32:29:
a0:b8:4c:0c:b5:90:a6:ea:f4:d6:4d:04:09:00:ee:96:f2:02:
4a:3e:06:0b:0f:75:bd:2f:73:18:14:ca:1b:18:99:fa:89:d5:
89:9f:ce:8a:35:28:63:49:f6:24:93:8a:2c:fb:2a:a4:ab:2a:
3b:e0:a5:8a:1c:2e:65:b2:8b:0a:b1:eb:d8:38:32:cc:95:79:
e1:3b:80:65:6c:69:32:63:fe:f5:14:e3:1d:26:38:79:57:7d:
92:d9:c1:b9:74:c8:b2:76:32:57:ca:d9:ef:7a:54:82:24:48:
f6:23:98:66:a4:ba:ac:e8:75:88:89:d3:19:81:98:02:b8:03:
fe:a0:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:09:37 2026 by rpki-client