This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          JdqOUK60ZfUuu1UqykNWVzzPvCPiUK3sUSEEt4Vqx2U=
Subject key identifier:   4F:85:9B:EB:E8:D1:60:7F:A8:35:76:00:96:F8:5D:93:0E:D5:5F:83
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4A2BECED3B695FF317EB949C1B7DF220F726C1DC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
Signing time:             Sat 29 Nov 2025 11:12:13 +0000
ROA not before:           Sat 29 Nov 2025 11:07:13 +0000
ROA not after:            Sat 28 Nov 2026 11:12:13 +0000
asID:                     63199
IP address blocks:        46.202.62.0/24 maxlen: 24
                          95.134.154.0/24 maxlen: 24
                          95.134.213.0/24 maxlen: 24
                          95.135.19.0/24 maxlen: 24
                          95.135.25.0/24 maxlen: 24
                          95.135.221.0/24 maxlen: 24
                          178.92.30.0/24 maxlen: 24
                          178.92.129.0/24 maxlen: 24
                          178.93.110.0/24 maxlen: 24
                          178.93.248.0/24 maxlen: 24
                          178.94.202.0/24 maxlen: 24
                          178.94.229.0/24 maxlen: 24
                          178.95.75.0/24 maxlen: 24
                          178.95.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2b:ec:ed:3b:69:5f:f3:17:eb:94:9c:1b:7d:f2:20:f7:26:c1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov 29 11:07:13 2025 GMT
            Not After : Nov 28 11:12:13 2026 GMT
        Subject: CN=4F859BEBE8D1607FA835760096F85D930ED55F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:04:63:a6:76:ec:e1:d2:84:48:da:99:0d:
                    bb:2f:8a:f1:16:6f:02:13:56:bb:de:88:31:87:20:
                    5d:23:d8:0e:e9:fb:aa:0c:93:46:da:e9:6e:d9:d2:
                    23:79:f2:35:a5:98:8c:cc:71:aa:f0:7a:df:17:2b:
                    94:61:8d:f7:de:b5:de:27:45:21:d3:1f:d9:49:56:
                    a6:12:ed:b6:e6:f6:07:f8:19:3a:71:de:1b:dc:ae:
                    8f:32:60:3a:59:5c:9c:a4:a9:0e:eb:07:2e:cc:63:
                    e5:b1:ef:09:0c:e2:a5:ce:bf:63:58:f8:bf:58:53:
                    eb:f9:f5:91:e9:b5:cf:6c:11:0e:ee:70:bf:74:61:
                    69:13:6a:ed:1e:3d:9f:bc:8f:be:cd:bf:3f:d5:16:
                    a7:94:4b:68:c6:c2:a4:08:0e:90:94:29:68:55:55:
                    52:07:b7:ea:0c:cb:23:a5:49:ae:ad:7f:bc:7f:c8:
                    c7:c7:3f:be:e8:99:26:03:b8:ec:8c:a4:75:db:0d:
                    66:4c:e2:07:4c:73:7a:f3:d9:83:63:02:cb:00:96:
                    c3:25:27:22:15:ab:45:8a:56:0c:68:e3:ce:3f:1d:
                    a0:30:4f:ea:3a:3f:27:0d:4d:42:6a:81:2d:e5:8b:
                    c6:4f:95:7b:de:a6:fb:4a:a5:2f:cb:8c:ca:b1:ea:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:9B:EB:E8:D1:60:7F:A8:35:76:00:96:F8:5D:93:0E:D5:5F:83
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.62.0/24
                  95.134.154.0/24
                  95.134.213.0/24
                  95.135.19.0/24
                  95.135.25.0/24
                  95.135.221.0/24
                  178.92.30.0/24
                  178.92.129.0/24
                  178.93.110.0/24
                  178.93.248.0/24
                  178.94.202.0/24
                  178.94.229.0/24
                  178.95.75.0/24
                  178.95.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:2f:de:05:50:da:04:81:29:25:b2:6e:56:b0:e1:bb:d5:
         ae:41:0a:65:75:36:39:2b:a6:7a:2e:5e:4c:e8:e7:9d:0a:d0:
         c7:04:ac:59:c5:f9:98:93:fd:0d:44:45:4b:45:6a:da:2a:ca:
         9c:9f:e7:b3:39:e2:ea:f1:33:43:6c:7a:06:e9:ac:d8:b8:55:
         15:d2:c3:b7:58:9d:a3:7b:93:5a:54:77:92:47:8d:d0:4e:5f:
         49:5a:c0:d3:a6:72:91:bf:b1:10:dc:8f:82:cc:05:ba:62:1a:
         62:f6:8c:63:fe:90:93:71:88:aa:11:7d:58:b4:b6:e6:18:a8:
         e7:79:99:a5:c2:12:02:5a:f4:e5:9e:b7:cc:5e:64:46:4f:11:
         b5:77:3f:d7:da:91:d8:de:27:3a:eb:5a:6e:a8:1e:f8:2a:9c:
         e4:3a:cf:bc:31:b0:fb:cd:b0:14:05:dd:80:7b:88:be:d5:c0:
         e4:e6:b7:a9:b6:b4:05:3c:fa:42:4e:cb:4e:f4:ff:b3:5c:ed:
         4c:e4:af:4b:e0:b6:d9:5c:6f:0b:cb:ad:c9:4e:2f:64:2d:30:
         02:a4:14:68:ba:5a:b4:8a:79:bd:30:47:ec:42:67:45:cf:18:
         aa:1c:ae:3f:fd:4a:7a:67:70:c2:79:74:b1:88:16:fc:83:59:
         36:39:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:19:26 2025 by rpki-client