Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: DMwGEODRpvaUKKYHA7bVX7ho/IVFsxxsWrPQMzQ4ZbQ=
Subject key identifier: A3:99:74:F2:8E:C2:3C:DA:59:74:BA:8E:79:6F:CD:3B:CD:C9:33:5D
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 463E332AFF343A4A49C4E564539502C898A2BF65
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
Signing time: Wed 29 Oct 2025 03:15:19 +0000
ROA not before: Wed 29 Oct 2025 03:10:19 +0000
ROA not after: Wed 28 Oct 2026 03:15:19 +0000
asID: 63199
IP address blocks: 82.23.250.0/24 maxlen: 24
82.25.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3e:33:2a:ff:34:3a:4a:49:c4:e5:64:53:95:02:c8:98:a2:bf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Oct 29 03:10:19 2025 GMT
Not After : Oct 28 03:15:19 2026 GMT
Subject: CN=A39974F28EC23CDA5974BA8E796FCD3BCDC9335D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c5:a6:1b:55:ca:ae:1c:04:ad:fd:2c:a6:4d:
0f:29:94:65:06:0d:2d:08:68:3c:9e:a0:57:65:b8:
d1:ab:ce:8a:1b:ee:ef:c6:d2:6f:50:19:98:3a:3e:
4b:ee:06:66:c8:b0:a5:53:90:80:1e:6a:9c:15:35:
7c:2b:9b:7a:4c:8b:32:05:8f:f2:60:a2:50:d8:45:
8c:96:79:9d:3c:b9:47:d0:49:66:5b:6c:41:b2:d2:
4b:21:4e:b6:57:31:3c:b7:65:41:91:61:69:62:da:
e8:4e:0a:48:45:14:28:dd:83:40:a7:9c:50:0b:30:
d9:9f:26:41:ee:db:67:34:d0:93:02:2a:ae:16:9a:
c3:6c:0b:2f:4a:d3:28:4e:d8:05:21:c5:c6:42:42:
46:87:11:16:bd:71:07:62:c1:ce:81:8e:69:13:cb:
d2:a0:bd:c1:35:8e:33:87:64:43:6d:be:c2:57:92:
7d:37:16:bc:a6:98:e1:a3:db:fe:a7:c5:57:cf:81:
a4:9b:ee:34:37:2b:89:7f:68:18:4f:dd:32:23:b9:
56:bc:de:6e:e8:e5:d4:2d:d8:60:cf:7e:0e:6c:d1:
07:da:c4:c0:64:af:9f:63:31:6f:c9:27:bc:47:05:
75:eb:aa:e1:30:4d:cd:7c:36:19:ba:80:b6:25:19:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:99:74:F2:8E:C2:3C:DA:59:74:BA:8E:79:6F:CD:3B:CD:C9:33:5D
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.23.250.0/24
82.25.60.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d4:be:68:a1:d8:57:e3:36:7d:43:7f:bf:54:7d:c1:c8:8b:
35:46:b7:1c:62:42:b3:d3:73:d9:c6:8a:53:af:ba:e3:eb:52:
b3:86:bd:e2:ba:01:18:59:1e:95:54:7d:4f:2f:9f:38:ac:75:
b7:05:37:39:a6:f9:61:72:ff:81:27:97:25:c7:d8:80:08:8d:
93:ce:37:85:b6:26:31:6f:89:bf:1e:28:ce:21:21:f3:b0:e9:
78:35:43:c2:1c:14:73:b0:2b:cc:bb:a0:7d:20:59:64:ab:79:
95:16:cf:4e:0a:58:31:6d:36:87:77:6a:f6:0a:c8:b2:58:a0:
b7:bc:77:44:52:47:a9:d1:1f:f9:a4:e7:09:13:2e:ae:3e:7d:
37:ff:bf:a6:e4:b9:22:0d:80:17:01:14:c5:62:36:93:43:9a:
53:2b:42:ee:e2:0a:48:8b:81:ed:cd:80:9f:33:77:06:9e:22:
bc:89:25:f0:58:8d:2e:bc:ab:1b:a3:34:97:67:60:5f:ec:f2:
b0:16:30:2c:d2:52:55:e7:04:e5:7e:a9:e8:8e:0c:3a:4c:8a:
dc:90:5a:7a:57:83:57:70:55:13:cc:2b:23:c3:14:92:76:33:
c6:07:f2:50:77:4e:c2:87:47:44:d3:74:20:fa:85:32:88:45:
1e:b5:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:21:27 2025 by rpki-client