Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: PJgpzmEhbduAKlb5MtM0iZ1S+nWzsWHB+vGfcsDpRzc=
Subject key identifier: D8:DC:5C:27:EE:92:27:F7:C1:9B:31:3F:0B:14:E6:F1:53:C2:CD:0C
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 178EE3E362A9745CCCC8573F588C2CAE16FCB0DF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
Signing time: Sun 01 Mar 2026 03:02:53 +0000
ROA not before: Sun 01 Mar 2026 02:57:53 +0000
ROA not after: Sun 28 Feb 2027 03:02:53 +0000
asID: 63199
IP address blocks: 82.21.169.0/24 maxlen: 24
82.23.143.0/24 maxlen: 24
82.26.129.0/24 maxlen: 24
82.29.48.0/24 maxlen: 24
82.29.103.0/24 maxlen: 24
82.39.102.0/24 maxlen: 24
82.39.170.0/24 maxlen: 24
82.40.36.0/24 maxlen: 24
82.40.62.0/24 maxlen: 24
82.41.56.0/24 maxlen: 24
178.83.145.0/24 maxlen: 24
178.83.147.0/24 maxlen: 24
178.83.149.0/24 maxlen: 24
178.83.151.0/24 maxlen: 24
178.83.153.0/24 maxlen: 24
178.83.155.0/24 maxlen: 24
178.83.157.0/24 maxlen: 24
178.83.160.0/24 maxlen: 24
178.83.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8e:e3:e3:62:a9:74:5c:cc:c8:57:3f:58:8c:2c:ae:16:fc:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 1 02:57:53 2026 GMT
Not After : Feb 28 03:02:53 2027 GMT
Subject: CN=D8DC5C27EE9227F7C19B313F0B14E6F153C2CD0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:c5:f3:83:b9:24:9d:44:23:6a:33:7c:68:
b8:e7:5f:da:fc:76:e2:25:80:5f:eb:71:ef:27:d0:
72:94:c4:5c:98:a3:25:46:f2:29:02:5d:eb:b0:6f:
e7:4b:e0:de:4a:cf:0b:5b:0a:3b:e7:e5:f1:67:34:
15:1d:ff:a4:3f:e2:22:c6:6c:fb:ea:2d:a1:4c:3e:
06:d7:28:9f:3b:d6:d7:98:00:9e:f0:b9:cd:82:9a:
bc:f2:24:e8:99:de:ef:57:ab:8c:b0:92:47:4d:f5:
0d:82:5c:91:7f:71:80:96:ab:2b:4a:dd:42:a3:33:
94:6b:c4:4c:3c:2e:f4:0e:e8:80:8b:75:46:aa:41:
81:e9:83:35:33:04:e8:93:69:ea:ec:8a:71:f9:e0:
b3:31:c1:d6:b8:21:ad:31:7d:f3:22:76:46:93:4e:
62:9a:2d:56:57:c8:2c:7d:0c:df:45:1f:08:c4:1d:
14:d9:40:13:a5:37:77:56:74:c0:d0:9f:c1:4b:fa:
03:11:9a:be:bd:c3:6b:8f:4b:3e:23:88:28:b2:37:
c6:c3:19:12:f7:b7:5b:7c:b2:26:d8:b7:5e:1b:1f:
9d:de:05:61:07:01:27:ca:60:92:4a:48:86:5e:3c:
a9:5f:55:7b:85:c8:f1:02:d0:42:e1:69:cf:63:46:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DC:5C:27:EE:92:27:F7:C1:9B:31:3F:0B:14:E6:F1:53:C2:CD:0C
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.169.0/24
82.23.143.0/24
82.26.129.0/24
82.29.48.0/24
82.29.103.0/24
82.39.102.0/24
82.39.170.0/24
82.40.36.0/24
82.40.62.0/24
82.41.56.0/24
178.83.145.0/24
178.83.147.0/24
178.83.149.0/24
178.83.151.0/24
178.83.153.0/24
178.83.155.0/24
178.83.157.0/24
178.83.160.0/24
178.83.162.0/24
Signature Algorithm: sha256WithRSAEncryption
67:dd:c3:c8:30:6d:a3:04:aa:3e:16:e4:96:cd:eb:0a:ea:b0:
54:b1:d9:0d:7a:06:82:78:a1:2f:fc:35:29:fe:fc:ac:52:af:
0a:b1:1e:aa:37:73:94:3e:91:61:29:1e:b6:b6:05:22:8b:d9:
a4:13:f2:87:58:77:f7:0b:b1:f0:8e:6a:74:85:d6:49:ba:32:
79:64:74:1a:08:b2:c0:50:7b:61:ae:3b:fa:6a:d9:0f:7f:25:
b2:25:f5:0a:bf:0f:7d:5b:de:1c:54:8b:9e:27:be:8d:8e:38:
52:99:07:fc:9f:26:b2:c5:10:fc:0a:33:08:2d:14:57:a5:96:
ea:64:5f:35:39:f8:74:3d:11:eb:9f:f5:83:33:2e:a6:ae:e1:
5e:e4:1d:97:c1:35:62:b4:62:c6:9a:c3:a7:59:30:e6:07:81:
ee:61:60:d2:87:c0:12:e9:a5:67:87:28:6e:5e:df:8f:1b:c4:
4a:b8:83:29:06:f6:f8:54:59:54:63:7b:da:ea:4d:89:70:f3:
01:e0:65:07:82:1b:45:9a:e6:8b:a1:4d:e3:28:ac:06:6f:44:
17:7c:30:d6:61:e2:90:95:89:4c:2d:a3:34:c0:6b:3e:af:fc:
b4:33:e8:9a:6b:e5:0e:9b:d3:7c:42:b2:d3:09:c4:00:a7:05:
6c:48:cf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:14 2026 by rpki-client