Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: 3Cxw1YAh9BW0KVqYnpqoF3qj4kPsarrwTIp0Y2GEKdQ=
Subject key identifier: 57:36:81:D2:56:7C:3C:E5:85:69:C8:43:61:85:FF:F7:82:01:40:75
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 29346A557B74B10BE36902482B16567F7DBF69C1
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
Signing time: Fri 27 Mar 2026 07:51:36 +0000
ROA not before: Fri 27 Mar 2026 07:46:36 +0000
ROA not after: Fri 26 Mar 2027 07:51:36 +0000
asID: 63199
IP address blocks: 46.202.36.0/24 maxlen: 24
46.202.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:34:6a:55:7b:74:b1:0b:e3:69:02:48:2b:16:56:7f:7d:bf:69:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 27 07:46:36 2026 GMT
Not After : Mar 26 07:51:36 2027 GMT
Subject: CN=573681D2567C3CE58569C8436185FFF782014075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:18:63:a1:02:dd:0c:d5:c3:b0:c6:13:2c:2f:
f7:a1:a4:fd:12:c2:e8:6f:28:a4:15:5f:26:52:a6:
35:3e:49:ad:1f:12:72:bf:0f:53:e2:cb:f9:fa:d2:
fe:93:a9:e6:bc:bf:c9:33:9d:8a:67:12:25:de:e9:
0e:eb:03:06:b6:50:26:2c:a7:f3:98:61:58:ad:01:
5f:82:dd:ed:b4:c2:00:7c:90:d7:1b:ef:8a:32:4e:
7b:ca:c4:5e:0e:3f:02:28:33:05:e1:e9:44:76:0c:
13:ca:9b:3d:a0:cb:ac:ec:01:7c:df:8c:7d:4b:d1:
55:21:46:42:20:c4:ec:4b:57:d0:13:e2:50:6b:99:
7e:95:da:31:89:7d:80:8a:1e:67:07:33:f3:48:75:
21:86:b3:a3:b0:04:78:e5:c6:83:72:eb:e4:96:a1:
04:44:4e:c0:fb:cd:e9:73:65:a0:a4:31:91:a0:9b:
33:fd:c1:6d:47:8f:5a:05:76:31:08:4a:92:da:bf:
11:74:5d:6f:c1:5f:df:31:d4:a4:4c:75:19:f1:28:
ba:98:64:c2:0a:91:ae:85:df:2c:7a:1d:f1:ab:10:
1a:68:f1:e0:8e:4b:57:fd:f8:fe:c9:43:21:ba:28:
57:13:b8:05:09:1a:4e:e8:b4:d4:51:6e:51:1b:be:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:81:D2:56:7C:3C:E5:85:69:C8:43:61:85:FF:F7:82:01:40:75
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.36.0/24
46.202.51.0/24
Signature Algorithm: sha256WithRSAEncryption
79:9e:a5:96:6a:98:e2:2d:3f:ff:20:33:78:f6:f7:84:86:a2:
0e:45:70:5a:86:86:e2:b6:12:a7:07:d2:c6:41:b7:96:a8:82:
a6:b2:ac:b9:a1:9d:9a:c2:5e:5e:9f:a8:33:b1:df:23:79:e5:
3b:3c:eb:e8:61:de:27:e5:c2:0b:1e:0f:82:a7:af:7a:91:5a:
38:f5:ea:6d:a4:f7:41:ac:e5:df:75:23:32:3a:ef:b0:15:a9:
c9:8b:72:7c:35:0d:4b:b7:a5:34:6f:d6:21:94:51:dc:bd:9c:
1f:fe:af:9c:2c:ad:76:1a:bd:fa:9d:97:9c:52:48:c8:5d:5d:
96:58:3c:5a:75:4e:a9:d6:55:9b:c1:13:2f:a4:fa:c6:3b:4e:
84:3d:c4:d2:de:ff:78:0a:9e:1a:14:99:98:cd:66:df:1a:74:
fc:30:e1:87:9b:e1:9b:7c:cd:b3:c5:05:3f:f9:7c:d7:28:30:
15:7b:5f:2f:cf:f5:a5:29:70:d3:f1:8b:d7:fe:1c:4d:53:13:
fc:9c:ce:4d:f7:4e:f6:bd:19:d9:29:ba:f8:18:29:5e:f0:8b:
35:bb:20:00:1b:64:a3:cc:fa:f2:66:68:9d:c8:87:88:e5:fb:
98:bc:15:cf:ec:af:6b:cf:7f:5f:ca:69:17:3c:b4:56:58:7e:
cf:ed:f3:ed
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKTRqVXt0sQvjaQJIKxZWf32/acEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAzMjcwNzQ2MzZaFw0yNzAzMjYwNzUxMzZaMDMxMTAvBgNV
BAMTKDU3MzY4MUQyNTY3QzNDRTU4NTY5Qzg0MzYxODVGRkY3ODIwMTQwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGGOhAt0M1cOwxhMsL/ehpP0S
wuhvKKQVXyZSpjU+Sa0fEnK/D1Piy/n60v6Tqea8v8kznYpnEiXe6Q7rAwa2UCYs
p/OYYVitAV+C3e20wgB8kNcb74oyTnvKxF4OPwIoMwXh6UR2DBPKmz2gy6zsAXzf
jH1L0VUhRkIgxOxLV9AT4lBrmX6V2jGJfYCKHmcHM/NIdSGGs6OwBHjlxoNy6+SW
oQRETsD7zelzZaCkMZGgmzP9wW1Hj1oFdjEISpLavxF0XW/BX98x1KRMdRnxKLqY
ZMIKka6F3yx6HfGrEBpo8eCOS1f9+P7JQyG6KFcTuAUJGk7otNRRblEbvo5/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUVzaB0lZ8POWFachDYYX/94IBQHUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuyiQD
BAAuyjMwDQYJKoZIhvcNAQELBQADggEBAHmepZZqmOItP/8gM3j294SGog5FcFqG
huK2EqcH0sZBt5aogqayrLmhnZrCXl6fqDOx3yN55Ts86+hh3iflwgseD4Knr3qR
Wjj16m2k90Gs5d91IzI677AVqcmLcnw1DUu3pTRv1iGUUdy9nB/+r5wsrXYavfqd
l5xSSMhdXZZYPFp1TqnWVZvBEy+k+sY7ToQ9xNLe/3gKnhoUmZjNZt8adPww4Yeb
4Zt8zbPFBT/5fNcoMBV7Xy/P9aUpcNPxi9f+HE1TE/yczk33Tva9GdkpuvgYKV7w
izW7IAAbZKPM+vJmaJ3Ih4jl+5i8Fc/sr2vPf1/KaRc8tFZYfs/t8+0=
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:27 2026 by rpki-client