Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63286.roa
File: AS63286.roa (raw, json)
Hash identifier: 9mECj+Xeuo6snX0+elNQ5aELFVv1gJ1g81ntIR6cs3o=
Subject key identifier: 8F:CA:5B:DE:C3:52:36:F3:B4:1D:E8:7C:97:DE:48:14:CD:38:B1:A7
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 75A8B4406225FCF71C053FC168364B6E9A5E7B10
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63286.roa
Signing time: Mon 09 Nov 2026 09:53:11 +0000
ROA not before: Mon 09 Nov 2026 09:48:11 +0000
ROA not after: Mon 08 Nov 2027 09:53:11 +0000
asID: 63286
IP address blocks: 140.150.236.0/24 maxlen: 24
143.14.189.0/24 maxlen: 24
155.117.82.0/24 maxlen: 24
155.117.224.0/24 maxlen: 24
162.141.117.0/24 maxlen: 24
167.148.203.0/24 maxlen: 24
168.222.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 14:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a8:b4:40:62:25:fc:f7:1c:05:3f:c1:68:36:4b:6e:9a:5e:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 9 09:48:11 2026 GMT
Not After : Nov 8 09:53:11 2027 GMT
Subject: CN=8FCA5BDEC35236F3B41DE87C97DE4814CD38B1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:fa:4e:96:3a:8a:43:46:4e:66:9d:a4:7b:
88:26:fa:15:ee:6f:48:d6:66:52:30:6e:23:a4:13:
8a:90:79:ed:77:f5:21:90:67:a3:ce:8d:a0:99:98:
79:77:bc:e4:e7:7e:ff:c6:d5:52:b7:d5:b5:ec:df:
f7:49:44:ce:57:db:fa:e1:bc:7d:13:ea:3c:1c:f8:
15:d7:51:9a:30:cd:0a:63:0f:6d:36:fb:9e:57:4b:
bf:f2:74:d7:d2:05:e7:35:a8:23:ca:96:26:5d:18:
83:3b:35:a4:da:ca:b3:9c:a7:d3:aa:b4:ce:e7:70:
67:70:6c:a8:78:c7:44:71:85:4a:ee:b8:26:92:fd:
8d:90:d9:fb:c2:c6:a0:e2:c3:a3:b0:4d:b3:b6:42:
5d:4c:07:17:e4:fb:4f:d7:40:02:70:41:24:75:57:
eb:cb:95:d7:2c:e1:55:4c:77:0b:f1:8e:8d:59:68:
2e:7e:c4:03:b6:a0:d8:83:1b:46:a7:82:1c:64:fd:
a0:75:a4:7a:e6:e3:33:9d:ce:c4:ed:38:9e:27:b1:
b1:f7:2e:7d:e3:1f:77:d6:2e:91:37:3b:e6:23:09:
69:4e:96:ba:1e:18:54:56:04:88:f6:93:10:90:9f:
c1:43:b6:39:61:5d:39:5d:34:c5:3d:2b:ce:dd:e7:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:5B:DE:C3:52:36:F3:B4:1D:E8:7C:97:DE:48:14:CD:38:B1:A7
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.236.0/24
143.14.189.0/24
155.117.82.0/24
155.117.224.0/24
162.141.117.0/24
167.148.203.0/24
168.222.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:95:c5:fd:33:35:5d:3e:d4:dd:db:09:8d:bd:25:71:71:a3:
91:63:dc:7e:f9:f3:89:33:ee:74:da:3f:cf:db:db:d9:d0:b0:
79:96:8c:c4:f3:8d:33:ba:dc:d0:22:70:97:ce:ac:58:bb:b9:
60:51:6e:bf:99:49:36:62:90:96:bb:55:70:c5:81:24:42:3a:
2c:a8:71:d1:e0:05:86:83:52:b3:46:3a:7d:75:08:ef:1e:d1:
da:7b:0b:53:bb:9e:02:b2:3c:76:e7:f0:5f:38:23:24:95:43:
ba:f5:01:ee:c7:85:32:0c:2d:47:1f:c4:df:ce:45:58:5c:8f:
d5:75:85:7f:2b:52:4e:46:77:6e:b1:e9:8d:d2:04:00:a1:a9:
c8:96:82:de:09:b4:7b:1e:9c:95:c7:30:62:7d:2a:29:05:0c:
92:0e:36:86:c6:69:21:7d:4f:61:02:0b:fa:e6:6e:81:93:74:
4a:9a:cf:49:11:7c:56:cd:30:c9:d9:12:b7:5b:28:07:8d:8a:
79:6a:3c:21:8e:73:08:bb:ed:cd:3e:63:9b:c8:26:ef:6e:6c:
2b:7b:f5:8a:1d:2d:a4:a7:70:cf:8c:de:f5:63:47:a3:ae:15:
a6:d8:ce:90:3d:0e:ff:16:5f:79:dd:61:c8:62:5a:a0:8e:89:
04:72:cc:8e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUdai0QGIl/PccBT/BaDZLbppeexAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjExMDkwOTQ4MTFaFw0yNzExMDgwOTUzMTFaMDMxMTAvBgNV
BAMTKDhGQ0E1QkRFQzM1MjM2RjNCNDFERTg3Qzk3REU0ODE0Q0QzOEIxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVdvpOljqKQ0ZOZp2ke4gm+hXu
b0jWZlIwbiOkE4qQee139SGQZ6POjaCZmHl3vOTnfv/G1VK31bXs3/dJRM5X2/rh
vH0T6jwc+BXXUZowzQpjD202+55XS7/ydNfSBec1qCPKliZdGIM7NaTayrOcp9Oq
tM7ncGdwbKh4x0RxhUruuCaS/Y2Q2fvCxqDiw6OwTbO2Ql1MBxfk+0/XQAJwQSR1
V+vLldcs4VVMdwvxjo1ZaC5+xAO2oNiDG0anghxk/aB1pHrm4zOdzsTtOJ4nsbH3
Ln3jH3fWLpE3O+YjCWlOlroeGFRWBIj2kxCQn8FDtjlhXTldNMU9K87d58oLAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUj8pb3sNSNvO0Heh8l95IFM04sacwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjMyODYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBACMluwD
BACPDr0DBACbdVIDBACbdeADBACijXUDBACnlMsDBACo3gAwDQYJKoZIhvcNAQEL
BQADggEBAJaVxf0zNV0+1N3bCY29JXFxo5Fj3H7584kz7nTaP8/b29nQsHmWjMTz
jTO63NAicJfOrFi7uWBRbr+ZSTZikJa7VXDFgSRCOiyocdHgBYaDUrNGOn11CO8e
0dp7C1O7ngKyPHbn8F84IySVQ7r1Ae7HhTIMLUcfxN/ORVhcj9V1hX8rUk5Gd26x
6Y3SBAChqciWgt4JtHsenJXHMGJ9KikFDJIONobGaSF9T2ECC/rmboGTdEqaz0kR
fFbNMMnZErdbKAeNinlqPCGOcwi77c0+Y5vIJu9ubCt79YodLaSncM+M3vVjR6Ou
FabYzpA9Dv8WX3ndYchiWqCOiQRyzI4=
-----END CERTIFICATE-----
Generated at Tue Nov 10 18:55:23 2026 by rpki-client