Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
File: AS63150.roa (raw, json)
Hash identifier: 6AfxU+41TTBOlyEyH+1I/Y1i4HrnndHiHY7CwpVzwPA=
Subject key identifier: 65:34:42:9B:57:13:B7:DA:27:85:75:89:AC:79:2E:4A:B2:F6:42:BB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3AED798076DFBA14ED18881E8C83A4E84A9BED50
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
Signing time: Fri 06 Feb 2026 00:03:26 +0000
ROA not before: Thu 05 Feb 2026 23:58:26 +0000
ROA not after: Fri 05 Feb 2027 00:03:26 +0000
asID: 63150
IP address blocks: 148.135.184.0/24 maxlen: 24
148.135.187.0/24 maxlen: 24
155.117.18.0/24 maxlen: 24
155.117.19.0/24 maxlen: 24
162.141.130.0/24 maxlen: 24
162.141.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ed:79:80:76:df:ba:14:ed:18:88:1e:8c:83:a4:e8:4a:9b:ed:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 5 23:58:26 2026 GMT
Not After : Feb 5 00:03:26 2027 GMT
Subject: CN=6534429B5713B7DA27857589AC792E4AB2F642BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:1c:0d:e1:4d:b1:ef:0b:b3:70:e7:13:fe:
2e:77:21:71:3e:58:91:20:a8:a3:0b:9f:c2:3e:6e:
07:e0:b0:62:ed:68:0c:6d:5b:89:32:27:da:17:5b:
cc:96:b1:49:96:c1:c6:d8:df:d1:d3:15:c1:e1:50:
93:ba:d7:a3:3f:25:97:e7:a7:48:ea:30:f4:50:a9:
86:63:b5:97:bf:31:f2:6d:fd:b5:85:86:08:bc:10:
b5:26:d6:87:82:96:72:92:9f:5a:d6:cc:36:20:5f:
79:6f:fb:54:fd:01:36:fc:6d:fa:db:00:5d:fe:d1:
f2:83:93:72:eb:80:b7:c9:4e:67:27:79:1b:4e:e8:
a2:9e:77:62:84:f5:14:b4:7c:c0:e8:01:60:dc:ee:
ac:24:cf:e0:b7:ff:9c:32:f0:df:1a:ec:19:e6:38:
da:3d:f1:1a:be:b9:6c:d4:af:c9:ef:1a:99:38:d3:
79:78:aa:9d:e0:11:cc:7b:aa:91:85:64:89:f3:7b:
1d:1c:ed:57:39:01:a5:63:1d:4a:e1:e9:b0:e2:4f:
f2:9d:14:65:8c:81:e6:0d:2c:4c:56:b4:0e:1e:3c:
1e:4e:7c:96:ab:f1:29:34:36:90:d6:e0:f0:99:32:
bc:b4:36:a2:ca:8d:8e:f8:69:10:03:6d:23:e1:2d:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:34:42:9B:57:13:B7:DA:27:85:75:89:AC:79:2E:4A:B2:F6:42:BB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63150.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.184.0/24
148.135.187.0/24
155.117.18.0/23
162.141.130.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:2d:fe:bf:89:c8:6d:53:f8:a8:f4:7a:9b:a7:ea:62:bb:ab:
2b:6b:ce:eb:d5:7f:76:c2:29:5a:b7:09:8d:f4:c3:28:a0:34:
5c:af:6d:f7:ff:a9:44:ce:37:75:ee:86:bf:75:4f:f0:15:4c:
3f:d2:ec:f8:9d:3e:35:07:89:77:36:8d:1e:e4:89:ce:ec:06:
d6:7c:17:c3:91:05:c9:87:a3:bf:df:e2:72:73:a7:76:63:c8:
ca:3b:6a:14:0d:59:ac:e3:c6:e9:ea:12:9e:53:29:8e:4d:e9:
5b:28:ea:1d:43:33:72:1b:c3:99:50:f3:b1:40:cd:82:d4:b0:
d6:92:87:b0:2d:82:b0:15:8d:4c:46:5b:12:a1:de:67:74:46:
79:f0:d2:fb:5b:2b:ed:3d:8f:c1:cc:fe:76:54:5a:38:ec:0a:
78:40:05:6b:e1:55:a3:65:fa:13:71:a8:50:78:4a:2a:20:c9:
d0:87:f2:5e:3d:f3:2a:9a:b5:50:cb:0d:8d:90:0f:87:ef:72:
49:e1:50:d9:d7:4a:ed:ab:4d:d8:62:aa:a8:fd:aa:5f:8b:0c:
d2:0e:ce:56:9d:7f:27:ed:5a:ad:eb:4f:aa:f1:4d:ef:8c:ca:
4e:98:d0:5c:b5:46:ab:5d:65:6a:5a:93:30:dc:35:b5:22:4d:
ca:19:6e:f0
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUOu15gHbfuhTtGIgejIOk6Eqb7VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAyMDUyMzU4MjZaFw0yNzAyMDUwMDAzMjZaMDMxMTAvBgNV
BAMTKDY1MzQ0MjlCNTcxM0I3REEyNzg1NzU4OUFDNzkyRTRBQjJGNjQyQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6xwN4U2x7wuzcOcT/i53IXE+
WJEgqKMLn8I+bgfgsGLtaAxtW4kyJ9oXW8yWsUmWwcbY39HTFcHhUJO616M/JZfn
p0jqMPRQqYZjtZe/MfJt/bWFhgi8ELUm1oeClnKSn1rWzDYgX3lv+1T9ATb8bfrb
AF3+0fKDk3LrgLfJTmcneRtO6KKed2KE9RS0fMDoAWDc7qwkz+C3/5wy8N8a7Bnm
ONo98Rq+uWzUr8nvGpk403l4qp3gEcx7qpGFZInzex0c7Vc5AaVjHUrh6bDiT/Kd
FGWMgeYNLExWtA4ePB5OfJar8Sk0NpDW4PCZMry0NqLKjY74aRADbSPhLVKfAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUZTRCm1cTt9onhXWJrHkuSrL2QrswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMxNTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACUh7gD
BACUh7sDBAGbdRIDBAGijYIwDQYJKoZIhvcNAQELBQADggEBALMt/r+JyG1T+Kj0
epun6mK7qytrzuvVf3bCKVq3CY30wyigNFyvbff/qUTON3Xuhr91T/AVTD/S7Pid
PjUHiXc2jR7kic7sBtZ8F8ORBcmHo7/f4nJzp3ZjyMo7ahQNWazjxunqEp5TKY5N
6Vso6h1DM3Ibw5lQ87FAzYLUsNaSh7AtgrAVjUxGWxKh3md0Rnnw0vtbK+09j8HM
/nZUWjjsCnhABWvhVaNl+hNxqFB4SiogydCH8l498yqatVDLDY2QD4fvcknhUNnX
Su2rTdhiqqj9ql+LDNIOzladfyftWq3rT6rxTe+Myk6Y0Fy1RqtdZWpakzDcNbUi
TcoZbvA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:03:45 2026 by rpki-client