Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63440.roa
File: AS63440.roa (raw, json)
Hash identifier: p/HOcw+QeFeNpOYn5avJRRwXDWPcLi9Ti8ntXSJ+iio=
Subject key identifier: 02:EE:80:C8:F8:09:D5:02:AA:A4:50:52:2F:EF:A3:46:12:92:DB:7E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 74AA937D8F6E059BE1B0AC64FF8A111654275F80
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63440.roa
Signing time: Thu 28 May 2026 20:47:17 +0000
ROA not before: Thu 28 May 2026 20:42:17 +0000
ROA not after: Thu 27 May 2027 20:47:17 +0000
asID: 63440
IP address blocks: 146.103.12.0/24 maxlen: 24
146.103.13.0/24 maxlen: 24
146.103.14.0/24 maxlen: 24
146.103.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:aa:93:7d:8f:6e:05:9b:e1:b0:ac:64:ff:8a:11:16:54:27:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 28 20:42:17 2026 GMT
Not After : May 27 20:47:17 2027 GMT
Subject: CN=02EE80C8F809D502AAA450522FEFA3461292DB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:f4:a2:91:a7:4c:96:2d:c5:ef:6a:8d:ab:
f7:48:66:8d:ee:e1:29:ed:e2:0a:47:a8:33:9a:8d:
38:1a:9d:c5:a9:b8:e0:88:f9:99:11:4f:db:9c:19:
28:d4:e1:f6:fe:3c:bf:bf:d3:31:ff:2f:31:02:6c:
cb:bd:82:f5:95:20:1c:98:1a:74:7a:83:13:d5:61:
bd:11:fc:94:38:8d:35:78:54:5a:29:a1:f8:a7:dc:
0c:ac:45:73:a1:db:ea:03:1b:ed:98:a5:3a:d0:af:
ea:2b:46:d4:1e:c0:5b:6a:fd:f6:4f:9a:f9:6b:09:
00:0c:70:79:2a:79:70:ec:5d:95:14:ea:c1:d5:86:
c6:c3:49:bf:3d:b0:2a:40:8e:af:f7:08:0b:74:65:
fb:ec:55:d0:a4:3d:ae:6a:eb:fd:32:2a:b6:92:28:
0a:13:fd:f2:81:77:8d:d1:7d:98:15:6d:0e:2c:b4:
00:5c:7e:58:6d:c7:fa:5a:66:bc:e0:80:e5:21:3c:
99:1e:79:44:fd:8e:03:4e:16:60:97:83:1b:50:a8:
c5:2b:f3:7f:c8:06:a8:7f:de:f0:a2:3c:5a:39:1b:
b9:2e:77:6c:63:3e:86:47:fa:1e:2c:26:61:f0:05:
fb:71:33:3b:13:5f:06:95:d8:07:55:cf:79:c1:9b:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:80:C8:F8:09:D5:02:AA:A4:50:52:2F:EF:A3:46:12:92:DB:7E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS63440.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.12.0/22
Signature Algorithm: sha256WithRSAEncryption
03:15:fa:28:da:90:50:c9:96:16:e8:67:05:48:a6:e6:17:db:
46:03:9b:f1:74:67:98:9f:bd:54:29:74:7d:47:95:ff:17:ca:
fa:98:63:22:47:49:d5:52:39:db:d8:37:de:3a:56:3f:51:e3:
6f:56:b6:87:77:92:19:e2:67:02:43:47:7b:43:57:02:b9:01:
62:99:59:a1:65:be:ce:38:d7:71:df:a2:13:bc:7c:7d:14:cf:
93:ab:9b:fb:a5:1b:ba:39:c5:c3:d5:1f:5c:37:b8:a7:7c:3b:
ac:b7:73:5b:f9:58:4d:ca:1b:9b:b9:ae:ff:a0:e8:cd:3c:46:
77:7e:ca:49:21:91:a2:b2:f2:12:dd:89:d6:aa:34:b8:72:b1:
b0:24:db:ca:7e:5d:66:30:69:38:be:70:f6:1c:6c:fa:6a:48:
bf:ee:ad:dc:fb:a6:be:00:aa:b3:9c:e3:4e:c3:e9:9b:71:22:
67:c4:26:91:2d:fe:08:c2:8c:84:af:ff:bb:97:ab:9a:08:34:
5c:3e:b8:da:25:c2:a1:4c:f6:28:53:44:fa:fc:e0:f7:86:e8:
83:01:0f:af:5a:6c:e6:00:a5:fa:5c:c9:29:35:88:b0:dc:cb:
bc:9b:f9:26:3c:84:b7:d7:4e:82:92:c6:16:3a:3a:dc:16:39:
53:e2:04:e4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUdKqTfY9uBZvhsKxk/4oRFlQnX4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjA1MjgyMDQyMTdaFw0yNzA1MjcyMDQ3MTdaMDMxMTAvBgNV
BAMTKDAyRUU4MEM4RjgwOUQ1MDJBQUE0NTA1MjJGRUZBMzQ2MTI5MkRCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlvSikadMli3F72qNq/dIZo3u
4Snt4gpHqDOajTgancWpuOCI+ZkRT9ucGSjU4fb+PL+/0zH/LzECbMu9gvWVIByY
GnR6gxPVYb0R/JQ4jTV4VFopofin3AysRXOh2+oDG+2YpTrQr+orRtQewFtq/fZP
mvlrCQAMcHkqeXDsXZUU6sHVhsbDSb89sCpAjq/3CAt0ZfvsVdCkPa5q6/0yKraS
KAoT/fKBd43RfZgVbQ4stABcflhtx/paZrzggOUhPJkeeUT9jgNOFmCXgxtQqMUr
83/IBqh/3vCiPFo5G7kud2xjPoZH+h4sJmHwBftxMzsTXwaV2AdVz3nBm7fnAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUAu6AyPgJ1QKqpFBSL++jRhKS234wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjM0NDAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKSZwww
DQYJKoZIhvcNAQELBQADggEBAAMV+ijakFDJlhboZwVIpuYX20YDm/F0Z5ifvVQp
dH1Hlf8XyvqYYyJHSdVSOdvYN946Vj9R429Wtod3khniZwJDR3tDVwK5AWKZWaFl
vs4413HfohO8fH0Uz5Orm/ulG7o5xcPVH1w3uKd8O6y3c1v5WE3KG5u5rv+g6M08
Rnd+ykkhkaKy8hLdidaqNLhysbAk28p+XWYwaTi+cPYcbPpqSL/urdz7pr4AqrOc
407D6ZtxImfEJpEt/gjCjISv/7uXq5oINFw+uNolwqFM9ihTRPr84PeG6IMBD69a
bOYApfpcySk1iLDcy7yb+SY8hLfXToKSxhY6OtwWOVPiBOQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:46:31 2026 by rpki-client