This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
File:                     AS63473.roa (raw, json)
Hash identifier:          F1pWmlKoBEYbyiHm6iR4n3oci2VI+o97T6QgVgwcQ70=
Subject key identifier:   C6:AA:73:31:0A:27:15:6B:73:E0:66:7B:47:97:A3:49:A7:33:1F:1D
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       305629CD7577EF979BD2E5AB1A642992A736A0CF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa
Signing time:             Sat 29 Nov 2025 04:21:56 +0000
ROA not before:           Sat 29 Nov 2025 04:16:56 +0000
ROA not after:            Sat 28 Nov 2026 04:21:56 +0000
asID:                     63473
IP address blocks:        82.22.63.0/24 maxlen: 24
                          82.24.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:56:29:cd:75:77:ef:97:9b:d2:e5:ab:1a:64:29:92:a7:36:a0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 29 04:16:56 2025 GMT
            Not After : Nov 28 04:21:56 2026 GMT
        Subject: CN=C6AA73310A27156B73E0667B4797A349A7331F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:ff:8d:95:c0:d3:b8:33:6e:aa:82:9e:1f:
                    20:25:b9:af:87:30:e4:49:fb:48:af:1e:4e:39:8d:
                    bb:42:19:cb:9b:fc:4c:7f:c2:f5:9c:50:1d:92:b3:
                    3e:02:06:41:83:37:87:0b:49:6d:05:c6:e8:17:c2:
                    1d:cd:05:51:49:1f:6a:3d:ea:9a:93:f2:a8:4c:d0:
                    63:22:8d:7b:5b:be:94:1b:c3:eb:81:f3:7a:94:6c:
                    64:17:ee:aa:5f:ed:3b:35:fd:19:19:32:07:a9:27:
                    9b:ef:e3:ae:44:b5:f9:f1:b0:44:ab:4e:89:78:20:
                    28:63:da:43:7b:68:cb:2b:6d:9a:72:8f:09:9e:d4:
                    6a:5c:de:5d:64:97:1f:ee:a9:35:2a:ad:9a:be:a8:
                    14:27:86:2a:37:90:93:68:fc:cc:26:3b:81:8c:19:
                    bb:14:d0:38:62:41:e7:7e:29:21:88:f1:7d:33:3d:
                    69:74:5e:64:b9:35:6d:b1:b1:f4:8e:39:61:dd:5d:
                    dc:21:7a:c3:39:fd:4e:b6:61:c3:87:d6:e4:2f:8a:
                    79:0b:08:f7:a5:49:1d:e8:50:b8:a2:ab:b4:35:dc:
                    63:7c:0f:d0:17:24:c0:6a:58:d4:4a:44:f1:d4:f1:
                    d7:19:01:93:1b:ce:fd:30:b2:d1:27:6b:0b:84:8f:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AA:73:31:0A:27:15:6B:73:E0:66:7B:47:97:A3:49:A7:33:1F:1D
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.63.0/24
                  82.24.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:db:af:9d:e0:95:3c:a9:34:96:cc:1e:13:af:6d:49:c1:d7:
         56:67:22:39:38:5f:fb:e6:8a:5c:75:57:45:8b:7f:63:3b:06:
         c9:de:3c:62:50:e4:47:41:58:cd:d8:72:4d:6a:c3:ce:a0:83:
         ab:93:05:0c:b9:23:a7:7a:41:23:3e:23:42:fe:93:9e:cd:67:
         2d:7f:8f:b3:c9:b7:f7:81:75:8c:53:b2:18:5e:f4:f2:eb:6d:
         d4:22:07:53:45:4b:bd:ef:84:03:4c:09:6c:96:34:85:7c:54:
         24:3d:23:17:7e:02:e5:99:8a:00:f5:7a:51:4c:00:39:4c:ab:
         e5:86:29:2a:89:54:3a:bb:29:c8:a7:28:bc:c5:4b:7b:66:3c:
         f4:b3:a5:1a:34:9e:9c:e5:5d:d0:31:8a:ed:8c:14:2b:92:ac:
         f6:3e:f2:eb:43:2b:c3:04:49:c0:e5:10:dd:1b:f6:a7:ca:b4:
         49:21:22:66:27:d8:72:50:53:c5:72:1f:10:26:67:bb:3f:b9:
         ee:a7:41:65:69:39:fa:d7:e4:19:c1:8c:a1:23:5c:b9:4f:5d:
         66:5a:74:b0:7e:3c:4b:af:50:38:70:82:3b:ad:e7:14:da:a5:
         27:07:99:8c:91:a6:3b:de:74:28:01:16:e0:e1:00:ef:f0:ff:
         d9:4c:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:41:32 2025 by rpki-client