This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          2bmM5RCqqWe1ppHn19dMJUwU8rVOwtG8hGVHvzg0QlY=
Subject key identifier:   0C:29:D0:28:70:52:45:D3:22:E2:DB:F9:DA:A7:52:B6:ED:C7:CE:D9
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       2B007AAE1F333D1FEA61760077EC8424F5AFCD49
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa
Signing time:             Thu 08 Jan 2026 09:44:53 +0000
ROA not before:           Thu 08 Jan 2026 09:39:53 +0000
ROA not after:            Thu 07 Jan 2027 09:44:53 +0000
asID:                     63199
IP address blocks:        188.119.69.0/24 maxlen: 24
                          194.93.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:00:7a:ae:1f:33:3d:1f:ea:61:76:00:77:ec:84:24:f5:af:cd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Jan  8 09:39:53 2026 GMT
            Not After : Jan  7 09:44:53 2027 GMT
        Subject: CN=0C29D028705245D322E2DBF9DAA752B6EDC7CED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:e8:48:6d:bd:55:12:76:da:04:28:8f:56:
                    be:0c:b4:b6:cd:09:7c:2b:e5:98:e8:27:81:7e:b7:
                    c9:12:c8:e1:5e:b6:c2:e9:9b:88:1e:f8:47:b4:3b:
                    ec:23:c1:a4:77:f9:ea:cd:98:63:63:9e:a2:18:70:
                    c4:0f:ee:a4:9a:aa:1d:3a:10:93:e3:3c:bc:af:88:
                    ce:20:33:ce:36:dc:0e:6c:78:fd:44:33:ed:73:27:
                    7c:a9:e7:6a:9f:21:5b:12:6b:6c:67:70:fd:4f:53:
                    b7:8a:4d:9b:d4:83:75:0f:06:08:78:b4:20:e7:ac:
                    f9:8a:e2:ad:19:b2:e5:de:25:89:36:15:26:f1:14:
                    7e:30:58:51:2b:99:49:ac:32:71:fe:fc:0d:0e:a7:
                    87:30:aa:63:5d:a0:73:86:a0:fd:01:4c:45:8e:cf:
                    b9:4b:be:a8:e8:5e:4e:87:aa:75:16:8c:b5:ca:1f:
                    76:33:9d:13:78:5a:7a:21:e8:53:3e:02:c5:e3:bb:
                    52:3e:d2:c4:5b:4f:58:dd:4b:31:e5:c8:cf:8b:8d:
                    39:a4:74:4d:eb:92:2e:f7:f7:ea:5d:37:32:cf:9a:
                    58:55:ca:d2:b2:6d:43:38:ce:a9:08:fb:3e:ec:0a:
                    97:dd:14:dd:d2:ac:72:79:36:ec:83:15:0b:6a:e2:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:29:D0:28:70:52:45:D3:22:E2:DB:F9:DA:A7:52:B6:ED:C7:CE:D9
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.119.69.0/24
                  194.93.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:5a:6c:d6:a4:86:f1:34:e7:63:60:1f:4e:53:df:f0:d4:83:
         d5:fe:0a:53:8e:ee:e0:db:4e:23:b1:6d:4b:21:ae:17:20:44:
         a3:16:44:2a:c0:d1:20:be:c3:76:1f:a6:1a:03:73:07:bb:dd:
         9b:9b:13:47:89:6e:a5:4e:af:6c:49:c3:6a:ac:93:b1:4d:e6:
         20:58:3a:b5:42:ba:35:5d:d0:39:37:f6:bb:3b:b0:f5:0b:92:
         3b:2a:08:2f:4d:17:b6:8c:45:71:b5:2e:57:5e:90:9e:40:86:
         24:c2:b9:17:d8:9c:cd:03:e0:38:bb:ee:8b:1a:58:64:a2:59:
         f9:f6:01:ba:bd:34:81:1b:5e:b9:11:7d:01:86:1b:d1:8e:6d:
         b6:df:1c:d4:d7:cd:d6:73:c7:04:9f:6f:9f:e6:c1:14:51:bf:
         24:54:28:61:cd:42:14:50:ec:4e:c2:75:72:50:c5:2a:3d:8e:
         3a:7e:8d:45:65:0f:18:00:de:af:e7:77:a3:4b:2a:45:c9:4e:
         aa:ed:46:7c:5d:89:14:00:eb:1e:72:a4:34:a2:8b:2c:1d:8a:
         fa:c1:8d:59:bf:5e:1a:a8:df:ce:ea:5c:cf:58:cf:e1:0a:ae:
         5e:97:9c:f6:35:46:50:5d:4b:21:24:f9:67:1d:10:5a:26:b8:
         78:b0:1e:ba
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKwB6rh8zPR/qYXYAd+yEJPWvzUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNjAxMDgwOTM5NTNaFw0yNzAxMDcwOTQ0NTNaMDMxMTAvBgNV
BAMTKDBDMjlEMDI4NzA1MjQ1RDMyMkUyREJGOURBQTc1MkI2RURDN0NFRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7d+hIbb1VEnbaBCiPVr4MtLbN
CXwr5ZjoJ4F+t8kSyOFetsLpm4ge+Ee0O+wjwaR3+erNmGNjnqIYcMQP7qSaqh06
EJPjPLyviM4gM8423A5seP1EM+1zJ3yp52qfIVsSa2xncP1PU7eKTZvUg3UPBgh4
tCDnrPmK4q0ZsuXeJYk2FSbxFH4wWFErmUmsMnH+/A0Op4cwqmNdoHOGoP0BTEWO
z7lLvqjoXk6HqnUWjLXKH3YznRN4Wnoh6FM+AsXju1I+0sRbT1jdSzHlyM+LjTmk
dE3rki739+pdNzLPmlhVytKybUM4zqkI+z7sCpfdFN3SrHJ5NuyDFQtq4iv1AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUDCnQKHBSRdMi4tv52qdStu3HztkwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC8d0UD
BADCXT4wDQYJKoZIhvcNAQELBQADggEBAK9abNakhvE052NgH05T3/DUg9X+ClOO
7uDbTiOxbUshrhcgRKMWRCrA0SC+w3YfphoDcwe73ZubE0eJbqVOr2xJw2qsk7FN
5iBYOrVCujVd0Dk39rs7sPULkjsqCC9NF7aMRXG1LldekJ5AhiTCuRfYnM0D4Di7
7osaWGSiWfn2Abq9NIEbXrkRfQGGG9GObbbfHNTXzdZzxwSfb5/mwRRRvyRUKGHN
QhRQ7E7CdXJQxSo9jjp+jUVlDxgA3q/nd6NLKkXJTqrtRnxdiRQA6x5ypDSiiywd
ivrBjVm/Xhqo387qXM9Yz+EKrl6XnPY1RlBdSyEk+WcdEFomuHiwHro=
-----END CERTIFICATE-----
Generated at Mon Jan 19 17:11:46 2026 by rpki-client