This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          gwTIJSpXpG7QPJ9lw5bd8TXem8mQrFtIdCGchBuu3zU=
Subject key identifier:   05:99:0C:0B:6F:53:10:C3:79:AA:9E:44:94:5E:9B:0C:74:61:EA:A9
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       0F869941B9A94C0D28B419F49D2A13EC494AC675
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63199.roa
Signing time:             Thu 18 Dec 2025 07:55:56 +0000
ROA not before:           Thu 18 Dec 2025 07:50:56 +0000
ROA not after:            Thu 17 Dec 2026 07:55:56 +0000
asID:                     63199
IP address blocks:        91.206.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 03:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:86:99:41:b9:a9:4c:0d:28:b4:19:f4:9d:2a:13:ec:49:4a:c6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Dec 18 07:50:56 2025 GMT
            Not After : Dec 17 07:55:56 2026 GMT
        Subject: CN=05990C0B6F5310C379AA9E44945E9B0C7461EAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:13:94:b8:64:64:63:75:ac:0f:72:a0:9b:
                    52:84:b8:a4:ab:05:6f:1c:81:be:64:a4:32:52:6d:
                    48:41:d1:9a:89:aa:0f:1f:6b:b3:e7:fe:f0:37:67:
                    9f:4c:e5:9f:77:6b:fd:a9:39:cf:06:89:17:ac:80:
                    23:71:90:3c:1e:ad:50:08:aa:31:fd:38:1f:d8:3c:
                    35:4b:54:cf:b2:23:8b:9d:c1:66:db:39:e3:e4:11:
                    19:b6:64:25:d2:b4:a5:74:c1:f3:8b:91:d8:5e:53:
                    f1:6f:84:b5:6e:7c:d7:9d:fb:f5:7a:6b:21:76:15:
                    b5:ad:15:fc:e1:46:38:05:e5:7d:47:97:c8:58:bd:
                    a2:29:f0:08:12:8d:30:37:7c:78:b0:71:a7:1b:99:
                    08:f2:cc:2a:99:31:81:8a:47:75:06:8d:90:17:1b:
                    be:cd:ed:6e:ec:62:93:ff:72:5a:9c:06:7d:b8:ec:
                    9e:ea:61:ae:c6:9f:75:5b:1e:81:26:04:ee:29:bf:
                    d5:67:a0:18:a0:61:95:31:73:a3:6f:05:32:b7:db:
                    0a:07:41:d0:bb:70:8b:85:1b:ed:86:5b:23:a3:81:
                    42:42:f3:15:49:a7:24:4a:0f:5b:57:0b:be:8e:f1:
                    26:c6:40:15:7c:9f:4e:ff:9b:9e:24:c4:6d:b4:14:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:0C:0B:6F:53:10:C3:79:AA:9E:44:94:5E:9B:0C:74:61:EA:A9
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a5:e6:f4:8e:52:47:f9:fa:5f:94:c5:ae:49:d1:cf:5f:94:
         32:3a:69:7f:f4:94:ff:7a:70:26:eb:b2:fc:51:4f:8a:d8:ee:
         39:6f:cc:b7:b5:cf:b8:77:75:c6:53:2e:b4:29:5d:74:da:97:
         c6:b9:c2:c6:ad:78:95:00:fa:6f:ee:71:69:39:eb:84:62:a0:
         a5:95:b1:57:40:57:eb:47:5d:5b:4a:b6:ab:32:c9:f2:07:79:
         07:d5:1f:8f:67:d6:ea:9f:0a:71:37:59:b6:e4:fa:a8:10:27:
         7f:0c:93:d8:8c:9a:6a:50:d8:65:d2:3d:27:bc:b4:5e:3b:68:
         b9:6e:25:95:9a:03:33:0a:95:79:ac:71:ae:43:08:5d:93:7d:
         51:4e:af:d0:26:bc:8f:a5:4c:1a:ba:0e:99:d4:9c:0d:f4:ce:
         eb:ea:c9:14:4e:ac:80:25:b5:96:03:09:97:0c:4c:fd:2f:f1:
         46:d2:7a:08:38:0f:04:8f:5f:f8:43:b4:19:5d:f2:eb:5b:b0:
         e3:30:19:cf:e9:7b:18:3d:9e:17:d3:69:63:a0:69:ac:be:9b:
         c4:7e:3b:d2:55:46:c2:36:2e:b5:1d:3b:7a:e5:e6:8b:62:9e:
         90:dc:4e:90:cc:de:82:4d:88:47:0c:4d:ab:39:57:f8:72:63:
         c0:7b:53:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:22 2026 by rpki-client