Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63473.roa
File: AS63473.roa (raw, json)
Hash identifier: V08YwBuxQgKqVq1ue8i1BUf9zxRE2ZJ4quTYXiCWai8=
Subject key identifier: AC:3C:72:19:8A:5A:1F:D3:71:82:E7:D7:04:5E:2F:74:EA:67:EE:01
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 20F91C47A91B899FA40B4AB21E9D357CC90C2F38
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63473.roa
Signing time: Thu 02 Jul 2026 07:14:01 +0000
ROA not before: Thu 02 Jul 2026 07:09:01 +0000
ROA not after: Thu 01 Jul 2027 07:14:01 +0000
asID: 63473
IP address blocks: 96.62.255.0/24 maxlen: 24
167.148.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f9:1c:47:a9:1b:89:9f:a4:0b:4a:b2:1e:9d:35:7c:c9:0c:2f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 2 07:09:01 2026 GMT
Not After : Jul 1 07:14:01 2027 GMT
Subject: CN=AC3C72198A5A1FD37182E7D7045E2F74EA67EE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:45:a2:04:75:21:7d:30:01:25:5d:30:74:
78:30:31:ff:85:4c:19:7f:80:1d:30:2f:5e:83:06:
7f:f9:42:dd:23:8f:41:a9:06:51:43:29:99:16:19:
e7:33:55:4e:66:39:39:c5:bb:03:94:0d:a1:97:d4:
0e:fc:14:5c:d8:26:12:33:d1:04:d1:8c:9e:4f:ed:
ea:10:03:78:91:12:cf:28:51:82:a8:d5:46:02:d2:
18:65:d5:99:6d:56:d2:40:43:99:be:7f:22:d4:9a:
6f:dd:03:43:00:27:d4:46:82:f6:75:98:10:8a:75:
b9:2b:4a:f8:a9:04:2e:07:a2:e3:8a:c7:07:c6:27:
1f:67:aa:60:19:b2:48:1e:4f:9d:70:17:f9:4c:bb:
4d:04:25:31:2a:51:f8:2e:e3:f5:b5:6d:29:e0:91:
44:c2:55:a1:81:5c:00:33:bd:31:b8:0a:f3:21:1e:
46:c1:a6:e6:73:dd:90:16:81:a2:19:61:d6:fc:28:
91:c8:5e:20:cc:b1:cc:91:67:ce:50:3c:44:84:17:
d9:c3:5c:84:09:36:2d:a6:50:ee:f6:28:ff:22:ae:
df:8d:cc:9c:96:f9:4e:3e:05:cd:65:a5:14:63:9c:
6a:92:27:a1:eb:85:7a:db:2b:4f:51:34:a0:bd:42:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:72:19:8A:5A:1F:D3:71:82:E7:D7:04:5E:2F:74:EA:67:EE:01
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.255.0/24
167.148.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c7:bc:7b:f7:e0:ca:ab:d0:b8:34:7c:25:22:33:0f:4f:75:
84:6a:df:f3:f5:cd:36:8a:f4:f3:a4:21:a4:20:f3:43:f3:f9:
b6:fc:c4:0b:4d:a6:e7:dc:d0:03:6e:10:57:70:5f:40:6c:3b:
71:6c:7f:ea:44:14:5d:20:1a:8a:08:88:13:c0:83:63:50:e3:
c8:48:f4:5d:06:30:d9:aa:a0:9e:07:64:f8:f8:aa:9f:51:75:
02:28:a6:5e:72:07:d2:fe:2e:5e:90:3f:be:a8:0d:b7:90:c1:
2b:2a:b0:68:6b:39:1f:be:58:23:f9:1f:fa:f0:2f:6b:49:a0:
0f:3e:0c:e6:c7:63:c7:15:41:2c:2f:ad:eb:8f:8d:3b:d0:a4:
17:27:79:da:4d:de:98:1d:d6:e9:cb:ae:11:f0:e3:cf:a6:96:
ba:b9:c9:fe:3b:2e:e6:c4:09:de:ae:7c:d5:e8:c9:7c:9e:0f:
80:5e:39:8d:24:92:ec:75:35:1a:3f:33:94:12:2d:c2:a1:b9:
bb:93:e4:d2:61:31:0c:8b:9b:1f:4b:19:26:6b:eb:ae:26:92:
65:07:0e:a5:e7:3b:05:c5:1f:31:40:70:b0:13:4d:87:dc:84:
05:bf:89:a9:95:8e:0f:8b:fd:08:cd:32:c5:7d:7b:f4:de:68:
11:11:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:07:50 2026 by rpki-client