Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS63793.roa
File: AS63793.roa (raw, json)
Hash identifier: RtEs8V9Gkpt8V7FcOq0vYqcIPlX39PiAy0WG5QZ4aJk=
Subject key identifier: D1:2A:E4:2E:E3:D8:FB:44:34:69:80:0F:04:AD:0A:C8:77:35:FB:80
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5452A0FBAC26283F8E9CC48FEA48E908A1B375E7
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS63793.roa
Signing time: Thu 07 May 2026 09:57:04 +0000
ROA not before: Thu 07 May 2026 09:52:04 +0000
ROA not after: Thu 06 May 2027 09:57:04 +0000
asID: 63793
IP address blocks: 191.96.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:52:a0:fb:ac:26:28:3f:8e:9c:c4:8f:ea:48:e9:08:a1:b3:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 7 09:52:04 2026 GMT
Not After : May 6 09:57:04 2027 GMT
Subject: CN=D12AE42EE3D8FB443469800F04AD0AC87735FB80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:ef:cf:81:c2:92:68:cd:77:6e:fc:a0:01:
0a:5f:b3:cd:ab:07:04:de:d2:49:11:3d:13:7e:3c:
21:d9:7f:fe:1a:f8:89:53:61:f8:19:69:1d:e0:cc:
d1:ec:0c:5b:e6:78:41:aa:e6:79:94:56:3c:d2:4c:
65:70:65:95:a5:bb:28:a4:c1:68:0e:a0:0d:83:3b:
01:88:a8:c1:c9:d5:54:39:f7:98:0d:74:94:eb:2a:
d2:e2:85:e0:3e:dc:b8:79:bf:bb:ba:4e:61:b1:0b:
2a:97:55:c0:e0:19:d9:c6:f8:61:17:81:0b:3c:0f:
3c:4e:5c:ba:93:d2:01:b7:e4:e4:3a:81:78:8a:5b:
2b:44:b3:a1:76:6b:cd:a0:8d:b1:04:6f:47:7a:d5:
f9:94:4e:f0:99:2d:4b:4e:13:7b:b2:24:ba:36:0f:
df:85:57:7d:29:2b:1c:42:45:65:70:a4:dd:82:b2:
36:5a:ad:09:31:b1:62:ff:a9:c2:98:84:59:45:e1:
c0:4e:1d:a8:09:6c:a3:ce:4e:39:95:fc:64:0e:60:
34:07:b0:16:0f:83:34:30:ee:d4:17:6b:a1:32:de:
c2:be:11:be:49:bb:6b:02:1e:65:85:3a:03:43:64:
49:87:55:81:50:fb:33:40:b9:e6:e5:86:72:e1:dc:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2A:E4:2E:E3:D8:FB:44:34:69:80:0F:04:AD:0A:C8:77:35:FB:80
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS63793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.149.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0e:5a:e1:69:db:d2:ff:a2:fc:6a:26:70:3c:19:1f:d5:3f:
d8:d3:0f:87:92:67:a3:50:82:c5:eb:98:5d:21:b2:a9:4b:ed:
d8:82:e0:d8:7c:15:14:46:db:4d:1a:ca:d8:f3:80:26:ef:e0:
61:ed:3c:ae:c1:0f:3e:87:85:e3:d4:69:71:4a:20:d5:31:d8:
b3:f1:10:e9:1d:a2:c7:cb:43:59:ee:d3:58:89:e9:c9:ab:27:
f9:ba:4d:9a:df:5b:9c:90:7c:77:da:87:43:a0:84:5e:ec:01:
79:ac:10:d7:b9:14:03:e5:65:3b:72:7e:64:3b:a6:6a:ed:44:
17:81:3c:ac:09:f8:d3:69:1f:b8:cc:a0:53:a7:65:5a:75:67:
80:2e:a3:b6:c4:d1:22:e4:46:e7:00:61:51:1a:93:f9:a1:8d:
7b:e1:5d:00:f6:62:bb:80:d6:d1:53:15:58:78:36:dc:28:de:
75:31:1e:1c:32:82:ef:7c:b6:14:82:be:4c:5e:49:b6:80:fd:
b1:14:35:12:a9:fa:57:31:73:a6:3f:62:36:c4:69:bf:89:cc:
80:4b:b9:c0:a7:e0:02:4d:35:15:8e:30:c1:0c:44:dc:d2:b8:
99:03:df:dc:c9:aa:27:25:a2:7e:37:59:ad:23:b1:49:78:7a:
e6:6f:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:44 2026 by rpki-client