This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          YpNWbnpzr70Q3clxDOAiPeykY8tioM2CVcDWJvBZAv8=
Subject key identifier:   11:9E:20:CE:C7:F3:22:F0:2B:34:E1:C2:78:A4:D2:E6:85:C9:4C:1F
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       0C5C2527FEE8FB688BE6FAAB446D6B1167B83ACA
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
Signing time:             Mon 17 Nov 2025 09:49:07 +0000
ROA not before:           Mon 17 Nov 2025 09:44:07 +0000
ROA not after:            Mon 16 Nov 2026 09:49:07 +0000
asID:                     63199
IP address blocks:        188.119.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5c:25:27:fe:e8:fb:68:8b:e6:fa:ab:44:6d:6b:11:67:b8:3a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Nov 17 09:44:07 2025 GMT
            Not After : Nov 16 09:49:07 2026 GMT
        Subject: CN=119E20CEC7F322F02B34E1C278A4D2E685C94C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:a4:8a:1c:fb:65:2d:9b:b9:42:d9:0b:52:
                    d9:03:a7:ed:53:ca:e5:17:78:b7:95:50:14:7f:4e:
                    3d:75:b2:83:b3:ec:22:2d:ce:87:46:45:24:b8:9d:
                    3a:ef:5c:11:c6:10:13:45:3b:e8:c9:70:3a:2f:6e:
                    1a:1e:3f:6c:6f:a3:78:ce:59:af:0c:29:43:a7:8d:
                    72:71:be:0b:1a:0f:48:ff:ce:43:a0:63:cb:7e:f2:
                    a5:6c:91:c5:56:2e:d3:ad:d6:bb:04:4d:06:e4:70:
                    ef:b0:3c:1a:ab:1e:1c:c4:b6:88:ec:3e:66:7e:33:
                    47:f7:99:d1:13:da:e6:94:68:42:0c:1a:56:cd:33:
                    d4:26:85:e2:9c:3d:a3:78:7e:7c:ab:04:51:d5:7e:
                    d3:9c:37:89:8e:ff:ef:f7:ee:44:db:1a:f3:e6:fa:
                    5e:24:e9:d5:0f:c8:6d:ba:f6:93:fa:b9:71:b1:9d:
                    d8:c9:9f:3e:09:39:b7:d4:c3:41:8c:ae:73:e8:0c:
                    19:04:38:f6:eb:8c:26:1b:48:b3:e0:7b:4e:37:36:
                    15:bd:8e:af:72:72:ee:a6:b1:5c:bd:14:99:9d:4f:
                    77:ce:a2:d7:50:10:1c:74:3f:2d:b2:95:5b:1a:2a:
                    1e:45:18:9f:96:a9:c7:9f:5a:31:66:c4:8c:bc:4f:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:20:CE:C7:F3:22:F0:2B:34:E1:C2:78:A4:D2:E6:85:C9:4C:1F
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.119.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:83:57:f3:c3:5d:fa:a5:f3:d6:d1:31:cc:54:73:48:84:
         1c:ab:d9:3b:7c:e2:87:5a:f7:0d:49:d3:83:b0:03:8e:e7:3e:
         1e:11:ca:be:62:b3:50:28:c4:83:df:40:1f:e5:71:f5:5b:44:
         0d:7d:ed:43:36:97:08:5f:c4:40:39:1c:b8:ae:52:90:78:3f:
         fa:da:36:2e:3d:84:62:53:41:12:86:ed:8e:2d:33:35:99:dd:
         97:bc:3b:50:65:83:08:2a:1f:1a:b8:11:77:c7:ef:2a:46:9c:
         45:fb:78:4f:69:82:e6:fc:f3:2b:d6:36:3b:1b:c9:80:06:93:
         64:26:e7:eb:3f:e0:6d:b0:9b:0b:32:0e:5c:60:e2:e0:5c:2c:
         ed:42:5e:ee:e1:91:e6:ea:ef:c0:0c:cf:2f:4c:ed:09:63:95:
         50:fc:13:ba:48:f1:de:93:a9:22:09:42:9b:b1:fa:11:35:c6:
         e5:0f:e7:aa:e7:8e:d9:31:95:1c:6f:27:2b:5e:95:87:ba:f8:
         02:65:e5:e1:57:cd:2e:f6:02:a0:d6:5c:57:4b:a6:59:86:2e:
         da:79:4c:de:4f:52:4f:b2:2e:05:1b:64:a2:c3:b6:91:8f:58:
         3e:65:a1:20:85:92:f8:6c:2e:05:74:54:be:03:85:3b:f5:08:
         59:67:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 10:44:47 2025 by rpki-client