Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: ooquWglTGVEmYDKelMnC+brju7Qp+PV4BYhveJRDfGM=
Subject key identifier: E9:E9:4C:7D:F6:85:BC:6D:9F:05:51:9D:98:CB:D2:94:81:2F:FD:8A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 36C5944EB0FAEC59CA5546DE96740E67A4516619
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS63199.roa
Signing time: Tue 17 Mar 2026 07:21:29 +0000
ROA not before: Tue 17 Mar 2026 07:16:29 +0000
ROA not after: Tue 16 Mar 2027 07:21:29 +0000
asID: 63199
IP address blocks: 143.20.9.0/24 maxlen: 24
143.20.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c5:94:4e:b0:fa:ec:59:ca:55:46:de:96:74:0e:67:a4:51:66:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Mar 17 07:16:29 2026 GMT
Not After : Mar 16 07:21:29 2027 GMT
Subject: CN=E9E94C7DF685BC6D9F05519D98CBD294812FFD8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:b2:3b:b9:7c:fa:dd:57:c4:89:b3:50:31:
40:d2:3c:cb:df:bd:c0:1d:21:66:24:08:ca:61:3a:
89:df:29:22:ba:97:07:06:94:d7:24:31:47:6d:9a:
99:3e:ac:21:27:0b:e8:b4:d6:09:0e:57:e0:3e:61:
0f:c7:f8:e1:b7:b5:fb:0f:70:e1:6a:32:98:36:49:
d8:dd:fd:90:d7:7d:d0:19:a0:90:c2:46:fa:c2:5f:
46:31:cd:7e:f5:a4:bb:98:74:43:80:9b:b7:d7:7d:
51:21:7b:2d:fd:18:ee:5a:71:09:6d:bc:c6:7b:d2:
34:77:56:93:32:a7:e2:f6:42:82:58:b2:d6:6e:a6:
cf:72:a4:22:14:a4:d9:fe:fc:bf:9a:fc:a3:a6:f6:
22:dd:d1:2f:df:bb:cb:22:6c:20:34:8c:64:01:7b:
8c:d7:ee:cb:88:e9:b2:99:c9:cd:b7:1f:53:f7:f4:
2b:cf:99:1c:4f:0f:4e:3e:69:17:c0:0e:92:f2:e5:
40:f6:45:12:cf:98:3f:53:06:b8:dc:48:28:c4:48:
b2:b0:18:74:37:66:4f:b4:6a:8f:7b:d8:9c:5a:57:
b4:02:4f:65:c6:90:9f:00:96:b4:e2:80:eb:dd:61:
29:3e:ee:5c:84:01:bb:da:81:48:0b:e4:36:c8:d9:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:4C:7D:F6:85:BC:6D:9F:05:51:9D:98:CB:D2:94:81:2F:FD:8A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.9.0/24
143.20.65.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e0:1e:dd:c4:07:29:49:e4:35:c9:98:fe:5f:9a:c5:e4:fc:
d5:51:af:51:31:5d:bc:53:a8:89:86:e8:f4:54:05:95:71:62:
fe:8e:e7:e3:6a:54:6e:7f:4d:9d:3d:ce:5c:eb:72:b0:fd:4d:
41:75:81:ea:66:8e:26:04:8a:5e:aa:ee:cc:2d:d9:bb:c8:d2:
81:44:5e:cc:b2:e5:da:53:8f:e9:81:ab:a9:ae:4f:54:e6:6e:
65:fa:5d:50:73:2f:64:3c:75:18:a7:ec:0a:dd:05:72:86:c3:
9c:e3:a2:7d:33:00:c8:1c:6b:6f:d3:3d:cc:24:c4:cb:59:4a:
8c:97:be:e6:1b:4e:0c:cd:5e:5d:65:01:e8:7c:1b:b3:db:d8:
a8:37:a9:dd:08:60:bb:9f:4f:7f:76:61:8d:1b:61:ed:31:6d:
cb:af:c9:de:11:6e:39:85:dd:96:40:3e:10:bb:c2:f4:c3:12:
69:98:31:c1:c1:d7:65:b1:e4:d3:28:b4:01:ec:e2:9c:5e:29:
b1:e5:72:2f:5e:e8:b0:c1:5a:d7:7d:40:02:f1:90:d5:5b:22:
ed:98:7b:53:59:fb:61:b3:d7:70:32:99:39:09:5f:c8:9d:8a:
86:47:34:e4:61:f6:69:4f:85:08:31:48:0a:8e:cd:d7:34:e8:
92:38:41:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:41:40 2026 by rpki-client