Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63099.roa
File: AS63099.roa (raw, json)
Hash identifier: YlS51APLPjwnEY+SKBXb8Vh2IcBFptuAWssduq4qEOE=
Subject key identifier: E6:8A:5F:DB:57:20:26:ED:9E:03:A1:1C:A9:71:80:B4:00:50:80:15
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 2F69BFA5805C924F9023438C51D24033A09C9423
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63099.roa
Signing time: Fri 08 May 2026 03:55:53 +0000
ROA not before: Fri 08 May 2026 03:50:53 +0000
ROA not after: Fri 07 May 2027 03:55:53 +0000
asID: 63099
IP address blocks: 162.141.38.0/24 maxlen: 24
162.141.118.0/24 maxlen: 24
162.141.128.0/24 maxlen: 24
167.148.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:69:bf:a5:80:5c:92:4f:90:23:43:8c:51:d2:40:33:a0:9c:94:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 8 03:50:53 2026 GMT
Not After : May 7 03:55:53 2027 GMT
Subject: CN=E68A5FDB572026ED9E03A11CA97180B400508015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:e1:e4:5e:ae:eb:53:ab:21:c0:ca:64:28:
3f:c2:cf:f3:90:49:0b:24:20:ab:81:63:73:be:96:
1d:50:f5:63:b5:a7:56:9b:d8:a7:6d:b0:5c:8b:bb:
a5:15:5f:62:e9:f4:d5:2d:d2:2a:fb:87:6e:9e:47:
2a:cc:95:49:f2:47:cf:d7:b0:82:99:68:f9:6c:c8:
11:eb:83:16:94:6a:fb:b9:9e:b9:ee:81:8e:22:83:
09:44:3e:32:ac:6b:a4:7e:18:03:0b:03:bd:a5:f7:
15:68:3d:96:83:67:f7:df:96:d1:53:8e:31:b4:f4:
67:04:73:be:c1:8b:8d:33:89:0c:8e:57:eb:12:8e:
6d:7c:31:4a:ff:a3:e3:a4:9e:8d:72:e7:35:d5:85:
df:d7:76:26:b2:9f:eb:b6:b6:0a:79:b4:28:9c:52:
1e:66:ca:1d:94:8e:a4:8b:48:08:a6:15:d8:e6:f4:
c8:e1:c3:24:67:a2:e6:93:fc:06:94:fa:ae:4a:f2:
ca:2b:d8:40:e8:55:e8:f3:3f:08:bb:3c:cb:fd:a6:
17:45:62:c4:23:40:43:d2:6e:24:9b:90:54:42:46:
b6:47:ea:d8:ee:0c:02:e0:2a:07:4c:f4:b1:3d:e2:
78:67:3d:d8:7c:1d:9b:e3:11:3b:b0:e8:8e:59:bb:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:5F:DB:57:20:26:ED:9E:03:A1:1C:A9:71:80:B4:00:50:80:15
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63099.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.141.38.0/24
162.141.118.0/24
162.141.128.0/24
167.148.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:45:7c:c1:8b:d7:cd:9a:5a:30:0d:46:75:cb:39:55:80:8e:
1f:ca:02:20:05:05:04:03:57:1b:e5:33:84:3a:9a:13:e3:0c:
7f:32:e3:2d:ea:61:29:b2:cd:11:55:92:4f:d6:e7:a5:23:a0:
8c:e1:d1:f5:be:43:b9:db:d9:91:07:53:70:a3:8e:7e:54:04:
d3:4b:a3:45:61:f1:d4:46:83:e3:8e:0d:08:b4:c9:00:f4:ad:
ca:8f:8b:44:7d:58:3c:3c:6b:b6:cf:bb:8a:97:c2:c7:d8:a4:
f0:ca:b9:7d:ab:d3:a2:b5:62:01:54:53:fd:8f:a4:55:d8:54:
a8:4f:94:ac:3b:65:4b:04:2e:cc:96:ca:71:dc:18:78:1c:f3:
d2:1f:57:cd:cc:a3:95:02:53:d9:53:b9:fe:8c:02:0f:75:1c:
c3:be:49:30:0f:bb:dd:95:31:51:ab:97:8e:a2:70:45:14:36:
46:a1:ee:e6:c3:6f:9b:03:a6:e9:f2:ec:f2:3a:04:a1:3b:53:
65:40:cc:0a:2b:38:2a:86:f8:16:7a:5e:c6:b1:69:19:bb:b4:
ab:52:c5:db:92:d4:27:ad:d8:fc:73:bb:a5:58:e0:cd:4c:84:
63:0c:ce:dc:4e:a9:f5:4d:e2:90:0c:aa:d4:3e:e4:71:c0:23:
17:df:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:56 2026 by rpki-client