Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS63023.roa
File: AS63023.roa (raw, json)
Hash identifier: fi+yuNt7C9KOpAB7OuHltO3biAsS7kNC3sakusV6F3Y=
Subject key identifier: 0F:74:6D:41:EC:E9:29:BC:89:51:7D:8A:5C:5E:6C:94:39:F8:61:31
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5597ABC5835DD8CD2240572F857126D937A27FD1
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS63023.roa
Signing time: Wed 04 Mar 2026 08:30:27 +0000
ROA not before: Wed 04 Mar 2026 08:25:27 +0000
ROA not after: Wed 03 Mar 2027 08:30:27 +0000
asID: 63023
IP address blocks: 147.125.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 10:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:97:ab:c5:83:5d:d8:cd:22:40:57:2f:85:71:26:d9:37:a2:7f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Mar 4 08:25:27 2026 GMT
Not After : Mar 3 08:30:27 2027 GMT
Subject: CN=0F746D41ECE929BC89517D8A5C5E6C9439F86131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:9e:bd:45:b7:fe:1f:c0:d2:74:b8:eb:44:
4d:a4:bc:43:6a:70:7e:33:46:e7:30:9b:61:3c:0f:
c6:62:2b:2a:9b:8b:ea:99:27:81:94:4f:7b:9c:ab:
e0:6d:0b:44:7e:91:8d:b7:c2:0e:41:5a:f0:73:86:
22:a0:7b:54:cd:a3:8d:d0:17:ab:ff:f2:16:e1:21:
6a:4d:b5:59:53:a3:4b:a1:38:26:29:8f:e5:72:f5:
5a:ce:92:2a:06:fc:cc:a1:e6:b3:31:f8:ed:28:68:
a7:50:9a:64:30:72:7a:58:69:4f:07:5e:0e:c0:6d:
76:75:90:ca:08:4b:a9:89:58:0c:7b:bb:8b:d4:94:
1c:7c:2c:c0:6c:6a:e8:78:93:22:2a:af:f8:ca:cc:
d1:15:d6:93:95:3c:0a:4b:7f:7b:ea:d5:34:23:a4:
63:18:ff:b8:a3:92:b6:15:3b:c0:92:be:b1:14:0d:
81:5a:04:15:63:04:2e:4f:b3:90:45:20:57:16:6b:
fe:89:1e:31:51:31:23:14:53:97:23:c5:21:f1:58:
20:01:ac:4d:57:e3:e4:b1:e1:00:f4:92:46:80:47:
b6:8f:d2:0d:d7:1a:ab:17:10:34:34:65:62:e8:45:
1a:1c:99:8b:57:fd:4e:0a:21:a2:cd:53:d9:7a:80:
5c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:6D:41:EC:E9:29:BC:89:51:7D:8A:5C:5E:6C:94:39:F8:61:31
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/AS63023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.205.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8f:02:41:70:b3:10:12:9e:07:e6:a7:bd:64:88:da:0a:0b:
08:b7:21:c1:05:af:87:d6:88:b4:72:55:00:fd:ba:90:17:c4:
ea:3d:38:57:ca:fa:b8:f3:2a:ee:c3:bf:b3:c5:0b:29:01:27:
f4:1c:6f:62:f7:5d:5d:3e:cf:fc:d0:bc:10:33:00:20:a1:ce:
23:91:16:a9:bb:f3:18:0f:66:04:c1:52:11:14:d5:d3:49:28:
21:71:50:29:a6:73:2a:32:86:e7:67:69:5e:f0:c6:62:09:04:
0a:f8:b5:80:81:4c:6c:f0:81:b5:a0:6b:80:fd:34:c5:59:26:
e4:ab:86:47:d5:7b:f1:8b:87:93:a3:6b:af:07:52:6d:17:87:
d1:16:e9:cb:95:2f:dc:c0:b1:e3:72:7a:16:76:1c:21:70:01:
33:44:18:2c:44:90:46:64:e3:8b:50:24:c1:b5:e6:92:51:8e:
99:01:7b:6e:ee:b4:31:e1:eb:b9:ae:65:69:e1:0c:d0:e3:c1:
86:22:7e:24:51:47:1b:f5:3f:9e:5c:33:88:ef:86:c7:f1:f1:
71:de:d1:ff:8e:14:d7:9e:13:cf:bb:6e:a0:e3:47:e4:96:ac:
37:9a:54:0a:ce:b0:c0:5f:a2:dc:a7:b6:07:71:4c:2f:00:c6:
11:b0:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 21:45:24 2026 by rpki-client