Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          641NNev4Cod0b+8pN/0kByAKE1imqzBEhMUnmzv6CHM=
Subject key identifier:   A7:32:E2:B7:50:4A:7A:D7:2B:68:59:C0:8F:44:9E:6F:74:5E:6A:C8
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5E86344FFF274C4CCE26ABBB941933CB6B115992
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
Signing time:             Wed 04 Mar 2026 05:42:49 +0000
ROA not before:           Wed 04 Mar 2026 05:37:49 +0000
ROA not after:            Wed 03 Mar 2027 05:42:49 +0000
asID:                     63199
IP address blocks:        46.202.36.0/24 maxlen: 24
                          46.202.39.0/24 maxlen: 24
                          46.202.51.0/24 maxlen: 24
                          46.202.62.0/24 maxlen: 24
                          46.203.155.0/24 maxlen: 24
                          92.112.39.0/24 maxlen: 24
                          92.112.46.0/24 maxlen: 24
                          92.112.54.0/24 maxlen: 24
                          92.112.56.0/24 maxlen: 24
                          92.112.144.0/24 maxlen: 24
                          92.113.57.0/24 maxlen: 24
                          95.134.28.0/24 maxlen: 24
                          178.94.162.0/24 maxlen: 24
                          178.94.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:86:34:4f:ff:27:4c:4c:ce:26:ab:bb:94:19:33:cb:6b:11:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Mar  4 05:37:49 2026 GMT
            Not After : Mar  3 05:42:49 2027 GMT
        Subject: CN=A732E2B7504A7AD72B6859C08F449E6F745E6AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:f6:8a:cd:3e:ff:ec:fc:c2:16:f9:ec:28:
                    2b:29:38:44:98:16:33:61:ce:ed:a7:be:66:d8:46:
                    5f:4c:f4:75:d1:8b:03:85:de:6b:52:4c:d4:e1:9e:
                    58:e6:de:53:0c:70:bb:a2:a0:29:7f:40:42:2e:07:
                    06:5d:07:e1:9f:fe:1c:ea:45:b7:ba:31:13:54:e6:
                    b9:0f:4c:7d:90:2d:ce:22:fa:52:01:1f:2e:1b:45:
                    64:0c:2c:7f:37:2c:0d:de:26:7f:84:c4:2d:76:59:
                    ff:e7:a3:27:dc:12:c3:69:7f:61:22:da:75:26:3a:
                    44:a0:b3:b7:40:a5:bc:13:79:c6:29:52:11:70:ca:
                    0e:8b:a2:11:ed:cc:2a:a3:49:3f:16:39:b4:da:3c:
                    76:d5:5f:4b:55:9d:92:47:ae:15:29:45:2c:a2:9b:
                    98:73:37:70:55:6a:ed:9e:f7:68:8e:bd:4f:c7:4e:
                    42:67:86:bb:7e:c7:e8:c0:b4:27:36:27:e3:7b:7d:
                    6f:b9:f6:df:13:08:3e:2f:7f:88:0d:1e:7d:9d:06:
                    79:11:8f:d5:9c:84:99:55:9f:62:c6:f5:0d:d3:ad:
                    99:8b:32:0d:bd:20:a8:7f:7b:87:d4:6b:2d:9f:5a:
                    5d:c1:ce:f8:99:56:23:c2:91:59:9e:9d:a9:50:6f:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:32:E2:B7:50:4A:7A:D7:2B:68:59:C0:8F:44:9E:6F:74:5E:6A:C8
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.36.0/24
                  46.202.39.0/24
                  46.202.51.0/24
                  46.202.62.0/24
                  46.203.155.0/24
                  92.112.39.0/24
                  92.112.46.0/24
                  92.112.54.0/24
                  92.112.56.0/24
                  92.112.144.0/24
                  92.113.57.0/24
                  95.134.28.0/24
                  178.94.162.0/24
                  178.94.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:ed:77:dc:35:84:89:2e:fe:74:9a:07:17:33:6f:5d:da:
         45:c6:53:77:90:86:3f:24:d8:4d:83:fc:4f:a4:e2:85:19:da:
         71:a7:5a:77:e7:6b:13:09:d4:cd:55:67:ca:17:72:e2:01:84:
         f9:fb:49:cc:1f:1c:86:21:31:b2:f3:32:33:b6:8e:08:1b:55:
         e5:24:18:4a:17:57:5e:62:8a:6d:af:ee:a3:96:5c:58:06:82:
         bc:cc:a7:8b:60:5e:69:c9:83:39:18:bb:12:e8:a7:85:a6:fc:
         aa:5a:e0:d0:ca:92:ab:db:7b:cc:b4:8c:64:60:f6:42:8b:e7:
         fb:af:c7:ad:f8:31:d2:12:7b:3a:52:fa:d3:68:48:e9:59:e0:
         df:1a:9e:96:04:90:61:7e:f7:18:39:5d:97:d1:a0:d8:cf:48:
         be:72:83:36:37:b5:e0:11:e4:1a:b9:c1:41:29:d8:d8:01:81:
         a4:b3:9a:8b:de:15:ee:b9:08:97:f5:ea:16:16:14:3a:26:db:
         db:a0:71:f0:73:52:7f:0f:57:84:d7:9d:0b:45:79:4c:57:bf:
         a1:80:e0:05:5b:fb:58:b7:4e:2e:e9:89:df:96:62:ac:ac:49:
         01:f8:7c:44:3c:91:2c:d5:de:79:18:52:91:3d:49:ef:23:e6:
         6c:72:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 04:53:17 2026 by rpki-client