Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63793.roa
File: AS63793.roa (raw, json)
Hash identifier: IUgcGbhUQ3hJ4cVoLeS0ZklujfiOcuLfeFZLAAQEAaA=
Subject key identifier: AF:D4:14:F9:6B:A2:15:A9:EA:39:01:FE:2F:CF:EB:EE:C1:AF:86:0A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 62DB64655852298631285D3A1029F216DC0344A7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63793.roa
Signing time: Thu 05 Mar 2026 23:13:00 +0000
ROA not before: Thu 05 Mar 2026 23:08:00 +0000
ROA not after: Thu 04 Mar 2027 23:13:00 +0000
asID: 63793
IP address blocks: 178.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:db:64:65:58:52:29:86:31:28:5d:3a:10:29:f2:16:dc:03:44:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 5 23:08:00 2026 GMT
Not After : Mar 4 23:13:00 2027 GMT
Subject: CN=AFD414F96BA215A9EA3901FE2FCFEBEEC1AF860A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:64:bc:d6:93:3d:46:bf:7b:00:cd:41:06:
b0:72:b0:4d:93:d9:13:db:e3:a5:09:96:51:03:7f:
d7:ec:a2:ff:50:f1:8c:5f:8d:74:c7:10:9a:94:2b:
80:54:65:a7:d5:9d:d8:29:cc:2a:d0:3f:c1:53:b3:
ec:37:7b:b1:bb:e9:0d:c8:dd:c3:40:db:cd:0b:a7:
23:32:e5:ba:38:f3:dd:8f:5d:9f:ed:f5:77:1f:8f:
ad:81:e6:87:a2:16:f0:46:21:bb:61:6f:3f:51:d1:
86:d0:d8:4c:59:d6:4d:92:39:7b:9a:d8:d3:1e:f2:
1f:cb:8f:bb:b9:0c:0f:3d:b0:fa:35:82:37:b8:0b:
fa:9b:72:13:41:79:d9:97:21:ad:61:79:56:2f:52:
31:5d:af:42:50:82:3a:33:50:ef:9c:c7:59:73:a6:
27:11:c9:d8:39:47:fd:d4:a6:79:55:a2:3c:c1:39:
f2:84:1e:74:ed:8d:ff:8f:9a:45:cd:df:3a:d0:ed:
d7:d4:24:29:6b:9a:90:45:b4:9f:6b:62:13:36:99:
d5:bd:c5:4c:f2:6a:7f:8f:47:1b:18:4d:ac:e6:b9:
e7:92:3f:0e:cb:7d:80:80:85:96:17:ea:7f:73:28:
0d:3d:54:a8:2a:25:64:9c:a4:e7:97:c9:01:03:8d:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D4:14:F9:6B:A2:15:A9:EA:39:01:FE:2F:CF:EB:EE:C1:AF:86:0A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
42:99:cf:62:cc:d3:02:cf:5c:40:d7:71:d4:9b:9a:eb:4a:af:
a7:ab:5a:9b:c2:b4:b6:fa:05:3c:64:84:42:97:be:ee:79:ca:
22:9d:ec:b0:43:0a:6f:4b:26:f5:5b:14:38:94:75:37:07:38:
49:45:9a:7b:ee:05:80:a9:bd:e3:0d:80:42:6c:4f:b3:af:bf:
05:e3:ae:c3:b4:da:94:fa:45:ac:7b:14:d4:82:21:95:61:ea:
81:44:c5:0b:97:88:dc:68:4b:01:eb:79:2a:c0:42:f6:de:0c:
52:06:8e:00:b0:84:c9:2a:cb:93:44:45:98:0d:54:d5:c9:d7:
e6:52:aa:e6:85:ed:83:70:18:9e:79:5f:2a:30:eb:44:e8:91:
b9:50:79:be:21:2f:67:eb:ae:2a:c2:5f:76:87:3a:4a:1e:2f:
e5:e9:63:bc:0c:bf:e3:40:b9:6d:e9:d6:95:01:48:19:41:dd:
dc:0c:d1:6f:1e:49:0b:b6:6d:c1:6a:61:de:60:bf:0c:5f:11:
41:a8:7a:15:aa:b7:0f:e0:31:63:f5:5f:7e:15:cc:4b:b2:be:
4b:23:a4:4a:86:26:41:26:00:2d:be:f0:84:0c:f0:6b:76:af:
52:94:c3:e6:c6:1e:65:55:3b:d8:f6:94:a1:d9:a6:4f:31:eb:
90:be:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:34:46 2026 by rpki-client