Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS63099.roa
File: AS63099.roa (raw, json)
Hash identifier: 2BTNha5HWxUKCQL9al3vS5T/APkNoVIJPEUwHhgI43A=
Subject key identifier: DE:78:7A:B0:73:3D:B5:00:AA:66:16:CB:6F:3C:49:6B:32:DA:B7:E6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1EC250799D55563467736B2312BD696DA13F6B99
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS63099.roa
Signing time: Wed 02 Sep 2026 06:53:17 +0000
ROA not before: Wed 02 Sep 2026 06:48:17 +0000
ROA not after: Wed 01 Sep 2027 06:53:17 +0000
asID: 63099
IP address blocks: 51.146.126.0/23 maxlen: 24
51.194.182.0/23 maxlen: 24
51.241.142.0/23 maxlen: 24
51.241.146.0/23 maxlen: 24
51.241.220.0/22 maxlen: 24
87.81.64.0/21 maxlen: 24
94.194.164.0/22 maxlen: 24
94.194.172.0/22 maxlen: 24
94.194.192.0/22 maxlen: 24
94.194.196.0/22 maxlen: 24
94.194.216.0/22 maxlen: 24
94.194.220.0/22 maxlen: 24
188.220.130.0/24 maxlen: 24
188.220.131.0/24 maxlen: 24
188.220.160.0/23 maxlen: 24
188.220.176.0/21 maxlen: 24
188.221.112.0/22 maxlen: 24
188.221.132.0/22 maxlen: 24
188.221.136.0/22 maxlen: 24
188.221.148.0/22 maxlen: 24
188.221.158.0/23 maxlen: 24
188.221.164.0/22 maxlen: 24
188.221.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c2:50:79:9d:55:56:34:67:73:6b:23:12:bd:69:6d:a1:3f:6b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 2 06:48:17 2026 GMT
Not After : Sep 1 06:53:17 2027 GMT
Subject: CN=DE787AB0733DB500AA6616CB6F3C496B32DAB7E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:e7:9c:5f:89:74:de:a7:cf:ff:2e:68:f0:
ac:5c:3c:b3:22:e8:57:94:da:68:c8:a1:31:ba:ee:
19:46:e0:f2:9b:ab:f2:28:d6:d0:45:b5:97:41:dc:
22:f1:d4:ae:64:f5:92:ac:33:7a:ba:a2:89:45:89:
f3:d6:9d:19:7c:04:53:f2:15:ba:be:c4:81:5c:e3:
e0:ae:77:64:5c:a0:36:e8:23:b6:82:a9:17:0d:b3:
83:49:d5:92:84:a4:b2:0a:9a:77:7b:7a:3a:87:f6:
73:31:0c:d0:16:3e:15:c2:c4:54:35:24:63:4a:9a:
b7:8e:09:60:86:c0:f9:d6:2e:39:11:52:45:4d:55:
7b:85:65:c0:fb:cb:97:63:8d:0c:22:95:f0:0c:e9:
43:b8:8b:f9:67:02:b5:1d:ac:e2:09:e1:09:0a:20:
d5:6f:9c:7f:e7:81:7b:76:b9:85:61:99:9e:05:e7:
3b:1e:e0:c6:74:0c:ed:a5:1c:e6:db:3f:c1:9a:fd:
67:84:15:78:63:6f:01:0e:7e:76:89:b2:b2:93:53:
28:f3:6f:1f:4c:21:13:c1:f6:52:79:99:4b:82:ae:
24:3d:18:d3:90:07:06:a6:f6:7a:1b:30:db:96:2e:
5f:4f:9c:a8:55:24:92:d3:22:7c:2f:80:e1:63:72:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:7A:B0:73:3D:B5:00:AA:66:16:CB:6F:3C:49:6B:32:DA:B7:E6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS63099.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.126.0/23
51.194.182.0/23
51.241.142.0/23
51.241.146.0/23
51.241.220.0/22
87.81.64.0/21
94.194.164.0/22
94.194.172.0/22
94.194.192.0/21
94.194.216.0/21
188.220.130.0/23
188.220.160.0/23
188.220.176.0/21
188.221.112.0/22
188.221.132.0-188.221.139.255
188.221.148.0/22
188.221.158.0/23
188.221.164.0/22
188.221.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:8c:e5:93:9d:18:fe:70:35:47:6e:97:35:63:3b:14:1f:ef:
4d:03:5e:b4:8c:fd:aa:4c:af:bd:20:02:09:5c:7f:f0:c6:a7:
bd:e4:53:57:84:ee:e1:61:e0:a1:22:68:eb:80:81:2a:a8:48:
5b:c4:f0:29:14:19:c8:61:27:f1:62:89:2b:ec:64:f7:19:06:
5e:1e:89:b5:52:7d:8e:ac:53:98:1b:24:7d:e0:c0:f3:8d:d1:
5b:28:55:74:75:3f:00:f1:bb:54:aa:09:22:05:b0:9d:71:f5:
23:07:6f:75:af:73:63:c1:26:e3:6b:4e:de:74:6f:e5:03:57:
1f:ca:df:3e:81:46:e5:bb:6d:22:5b:b4:a0:f4:ab:25:db:dc:
ff:ac:57:c6:50:78:88:90:98:e9:d6:ff:cd:1b:e1:8a:82:02:
92:6c:ba:61:68:49:7e:37:7f:58:5c:fa:81:88:a6:1e:51:a4:
6d:a1:bb:a2:3a:4d:ac:89:b2:c6:d5:a6:fd:bc:ad:dc:14:2a:
e8:f5:10:8f:f7:38:42:c7:16:9e:29:30:50:60:c0:6e:c3:c2:
65:fb:49:b4:77:c4:41:51:5b:e9:43:e8:0b:68:47:e6:d1:fd:
71:81:2c:e3:44:9e:7b:de:d4:1b:52:a3:ad:59:cd:0f:32:3b:
a5:e7:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:46 2026 by rpki-client