Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: uqG+Knq5zXaMRCSmsDMqMCkbUljXNLVPgkoXNN6yT7I=
Subject key identifier: 73:D6:B7:61:EB:D6:E3:EF:E3:F5:D4:6C:82:FC:FB:0E:EB:14:0C:3B
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0125381325028047C6DA1F931D8E29C10284963C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
Signing time: Wed 25 Mar 2026 10:16:10 +0000
ROA not before: Wed 25 Mar 2026 10:11:10 +0000
ROA not after: Wed 24 Mar 2027 10:16:10 +0000
asID: 63199
IP address blocks: 82.23.143.0/24 maxlen: 24
82.24.105.0/24 maxlen: 24
82.25.24.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
82.38.7.0/24 maxlen: 24
82.39.103.0/24 maxlen: 24
82.39.132.0/24 maxlen: 24
82.39.170.0/24 maxlen: 24
82.40.51.0/24 maxlen: 24
82.41.0.0/24 maxlen: 24
82.41.19.0/24 maxlen: 24
82.41.56.0/24 maxlen: 24
84.75.1.0/24 maxlen: 24
178.83.138.0/24 maxlen: 24
178.83.145.0/24 maxlen: 24
178.83.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:25:38:13:25:02:80:47:c6:da:1f:93:1d:8e:29:c1:02:84:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 25 10:11:10 2026 GMT
Not After : Mar 24 10:16:10 2027 GMT
Subject: CN=73D6B761EBD6E3EFE3F5D46C82FCFB0EEB140C3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:09:2c:65:29:44:c9:1c:d8:66:2f:1c:c6:
f0:05:2c:06:22:da:93:86:55:fa:bd:d5:43:20:77:
fe:38:e8:91:12:a9:8b:84:ee:06:d6:5e:1f:df:77:
95:03:04:8e:6a:7b:0c:76:c7:2e:73:09:16:63:94:
a5:a6:35:cf:1e:9c:95:c8:9a:ed:c4:38:52:1d:f3:
cd:98:db:ea:6d:41:d4:2b:e7:39:c5:62:c0:1b:95:
60:6b:9e:18:12:06:a3:b0:98:57:a9:ee:e4:9c:4d:
4c:c1:b3:8e:23:39:18:61:fd:35:d3:f5:38:9c:ec:
fb:b9:e9:ca:ef:db:5f:05:76:b9:73:51:e2:b1:2c:
eb:2e:1a:fd:8c:0a:e8:c1:6f:c2:21:e6:d5:ec:8e:
c0:14:8c:1b:d0:4b:83:01:75:14:75:84:b9:e7:6d:
eb:e0:f3:94:ae:ae:19:23:6f:21:08:08:57:1a:11:
13:67:b7:0a:16:31:c7:7e:34:a1:4d:38:15:7c:27:
e1:5f:dd:5f:3e:5f:7b:82:fd:5a:7a:0f:91:9a:59:
50:93:01:df:09:70:4a:72:73:6d:d3:de:95:59:bb:
bf:d3:be:cb:25:0a:b5:9a:ec:8e:28:dd:21:51:33:
e7:49:5a:51:eb:7f:cf:11:67:21:32:b1:12:30:13:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:B7:61:EB:D6:E3:EF:E3:F5:D4:6C:82:FC:FB:0E:EB:14:0C:3B
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.143.0/24
82.24.105.0/24
82.25.24.0/24
82.29.48.0/24
82.38.7.0/24
82.39.103.0/24
82.39.132.0/24
82.39.170.0/24
82.40.51.0/24
82.41.0.0/24
82.41.19.0/24
82.41.56.0/24
84.75.1.0/24
178.83.138.0/24
178.83.145.0/24
178.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a6:69:a9:e4:11:e9:cd:7c:ed:81:9e:c3:65:06:50:cd:b8:
fc:1b:da:eb:75:9b:22:c5:d4:e8:6c:12:95:82:47:db:9f:6f:
d8:a7:8f:4c:19:94:1a:e8:67:65:8e:b4:b8:92:07:d0:b9:bb:
d7:14:47:b6:cd:3e:3d:3d:e3:bc:34:b2:e9:bc:39:cc:f5:b2:
f2:31:1c:ba:77:64:f2:c8:f0:03:66:d0:c3:66:c8:1f:56:0c:
df:82:f7:93:88:b9:eb:58:3b:9b:fc:ba:3c:d2:51:aa:f7:ed:
c1:b9:5e:f4:37:3d:e2:be:19:93:d1:a3:59:98:72:b5:a2:89:
b2:86:d6:59:85:50:5b:a6:2e:1f:d1:21:92:12:6b:3e:bb:01:
90:6f:42:21:f4:95:74:05:f7:67:0e:c9:2a:5c:58:99:8b:9d:
d3:66:27:8b:0a:cc:89:d8:7e:d6:2b:54:fa:ff:87:b1:c7:27:
ba:80:fe:3d:2c:fa:1e:00:57:c5:07:9f:e1:6c:b0:9f:ce:d4:
e8:dd:35:a9:9f:a7:1d:67:23:be:b8:eb:97:b4:c7:6a:f9:39:
36:43:74:88:30:4d:4d:3e:25:ec:bc:cc:3b:c6:d2:e3:fb:7e:
0f:05:1a:28:c4:47:62:48:3f:cb:3d:26:78:c7:0e:a7:36:56:
3a:07:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:48 2026 by rpki-client