Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63989.roa
File: AS63989.roa (raw, json)
Hash identifier: ppkpvMPs5WhkZzvJh9MkmGVZZlFpLZx24X1hpKZk7z8=
Subject key identifier: B5:31:BE:25:81:D5:3A:57:44:D9:59:28:66:A0:50:EC:73:7B:5F:83
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4CA44B860AB9DEB4F2A20EF20AC5E11F2CBE2E12
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63989.roa
Signing time: Wed 11 Mar 2026 05:46:48 +0000
ROA not before: Wed 11 Mar 2026 05:41:48 +0000
ROA not after: Wed 10 Mar 2027 05:46:48 +0000
asID: 63989
IP address blocks: 82.26.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a4:4b:86:0a:b9:de:b4:f2:a2:0e:f2:0a:c5:e1:1f:2c:be:2e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 11 05:41:48 2026 GMT
Not After : Mar 10 05:46:48 2027 GMT
Subject: CN=B531BE2581D53A5744D9592866A050EC737B5F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:18:80:9b:89:3e:04:b4:5f:c8:66:d0:90:
97:d6:47:38:42:78:d5:03:1d:90:d3:d4:fa:c6:3f:
d7:54:bc:52:f0:e0:86:92:c2:00:4c:e4:5c:ac:49:
e7:d4:28:9c:e6:f6:a0:c0:fb:30:31:b1:a6:06:fa:
49:93:db:f6:8e:3c:b6:a1:9b:4f:b8:87:ac:1e:5e:
8f:98:25:78:b1:62:a5:c1:32:c3:8d:55:99:84:92:
ca:60:25:87:34:fe:c2:04:19:79:ea:cf:5e:d4:68:
af:0a:eb:ad:f9:23:97:e8:36:a7:99:24:fc:5e:6a:
19:fb:0b:13:b9:d5:c7:8e:43:d5:d2:85:da:30:1b:
e1:39:aa:a4:0b:f4:77:eb:70:48:51:b4:62:bd:f8:
1a:d9:9a:1d:55:31:ef:4c:d3:14:b7:d1:ff:29:f8:
2c:16:f5:b4:1d:be:1f:ae:ed:24:c2:a3:83:5f:03:
ed:0b:33:6c:9e:bc:17:e4:d8:f8:be:96:0f:aa:62:
26:10:19:d6:45:99:5f:c0:6c:72:a0:68:c6:2a:7c:
cf:de:45:42:15:00:59:74:d9:bf:c6:95:e8:37:44:
ec:1e:6c:92:eb:7c:8f:00:93:82:18:9b:16:46:33:
45:cf:82:09:5f:80:92:9a:a9:e7:3f:4b:80:52:fd:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:BE:25:81:D5:3A:57:44:D9:59:28:66:A0:50:EC:73:7B:5F:83
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.26.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7d:56:bc:3b:fa:f0:f7:7a:88:32:8a:75:d4:98:d8:c2:7d:
0e:c8:ab:4e:5c:3f:0a:b8:a2:94:58:8e:7c:95:86:68:c6:f6:
6b:d2:dd:8d:a6:c0:e6:a7:2c:c5:58:45:a6:19:23:50:3d:39:
8e:8a:2c:b7:1a:81:8f:13:d5:bf:90:ef:a5:b5:48:ff:4e:a1:
47:96:07:02:90:81:f5:50:12:90:17:f1:4f:ef:10:1b:5c:7d:
08:82:ee:94:be:74:9a:b0:ea:96:02:cb:01:eb:20:d0:1f:7a:
28:98:95:92:da:8e:da:57:75:2a:ec:e3:81:20:56:e1:98:07:
90:89:37:a7:7d:fc:c0:9d:91:cb:fd:1c:2d:7b:72:ad:49:e1:
77:4f:5e:8f:1b:07:e4:4c:88:f1:00:b3:41:d5:20:19:53:4c:
ae:75:f6:d9:3e:e3:6d:7d:6e:b0:e5:96:ae:a0:58:d6:8e:89:
7b:3c:34:75:ff:ec:89:a7:67:72:78:a3:75:e2:26:20:32:c0:
7b:b5:30:33:1e:72:63:09:b5:31:04:2a:cf:1b:78:97:62:5e:
c1:c9:fe:ec:6c:2c:a3:8e:b0:f8:b0:eb:33:a8:1a:b9:17:22:
d6:fe:39:f0:45:92:16:34:0f:87:2e:3b:4d:b5:99:25:d3:ac:
72:6a:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:05 2026 by rpki-client