Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: LY2uhYpjP3YZNfHZ2KK806+nvmtHOpOdQnD/s+42TpA=
Subject key identifier: 06:89:06:12:1E:D4:69:0E:AB:88:9A:61:31:1D:58:59:20:20:D5:0E
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 05E32D4B6FC6DAD0FAFB91133D045E5D82108A77
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
Signing time: Sun 12 Apr 2026 09:23:40 +0000
ROA not before: Sun 12 Apr 2026 09:18:40 +0000
ROA not after: Sun 11 Apr 2027 09:23:40 +0000
asID: 63199
IP address blocks: 82.22.57.0/24 maxlen: 24
82.24.105.0/24 maxlen: 24
82.41.50.0/24 maxlen: 24
84.75.1.0/24 maxlen: 24
178.83.138.0/24 maxlen: 24
178.83.145.0/24 maxlen: 24
178.83.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e3:2d:4b:6f:c6:da:d0:fa:fb:91:13:3d:04:5e:5d:82:10:8a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Apr 12 09:18:40 2026 GMT
Not After : Apr 11 09:23:40 2027 GMT
Subject: CN=068906121ED4690EAB889A61311D58592020D50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:d3:38:38:9c:01:82:c2:5e:57:74:da:75:
d9:fe:3f:e0:ec:d4:43:38:a7:84:d0:40:ea:03:07:
f0:6b:c6:04:9b:16:94:dc:4b:bf:35:0d:68:a5:4f:
8b:0c:c5:db:ff:d0:1a:71:46:5f:5c:3f:41:43:ef:
fc:d6:ea:7c:97:ca:69:cd:ef:81:fa:f4:29:98:5d:
3b:d4:3f:5f:a9:9f:23:38:8f:da:61:f9:e6:40:7a:
fe:c5:76:06:eb:b4:c2:81:45:84:70:56:1b:39:ad:
ee:39:50:c7:36:4d:f3:0f:d3:b7:da:fe:6c:ca:f6:
9f:f9:c7:0f:81:5d:c1:34:b9:6e:ac:e1:70:bc:55:
88:d4:2b:83:85:a4:5e:79:9b:eb:8b:fe:8f:fe:78:
60:e8:eb:c5:57:3e:0b:98:f5:9f:17:01:f7:df:a8:
17:d4:a9:d7:53:d9:60:89:4b:14:8d:9b:a6:5c:44:
c3:ba:f6:9b:ae:55:90:ff:2a:8d:e1:b4:02:92:71:
2d:e3:f7:35:55:99:99:43:45:c6:ad:8a:4f:23:23:
8e:a4:9d:c0:26:7a:a3:13:bb:c2:64:6f:2e:23:74:
55:9a:55:6c:a1:53:b7:fc:12:ea:06:a8:b4:93:ce:
55:65:4c:78:06:48:b0:08:26:ca:47:97:8f:d4:c1:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:89:06:12:1E:D4:69:0E:AB:88:9A:61:31:1D:58:59:20:20:D5:0E
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.57.0/24
82.24.105.0/24
82.41.50.0/24
84.75.1.0/24
178.83.138.0/24
178.83.145.0/24
178.83.151.0/24
Signature Algorithm: sha256WithRSAEncryption
21:02:0d:5a:a0:98:f2:2a:ed:46:b8:e3:14:40:4b:bb:f6:c8:
1e:87:39:44:28:ba:25:5b:59:8c:52:78:9b:58:e1:2b:de:75:
09:d4:07:64:07:92:8d:62:cf:75:ed:56:5f:85:71:d0:bf:4d:
ac:46:44:4c:3b:be:71:70:59:11:e0:94:6b:a8:65:9f:60:a5:
42:d7:49:a6:3a:55:65:4f:48:67:a7:56:6b:5a:64:2f:03:d6:
3b:73:85:e4:cb:ee:58:95:37:5e:bd:9c:7d:5c:60:4d:2e:48:
8d:ad:ac:50:6a:12:c9:0c:39:4c:c9:fd:6f:84:c7:9a:5a:74:
90:7b:de:23:e4:cd:33:f0:49:97:4f:26:29:d6:eb:cf:20:e2:
d1:e8:59:3b:5e:9e:ab:ba:14:f6:05:87:17:17:d3:54:19:d2:
e6:f5:eb:cc:98:b3:be:d8:00:10:8d:de:46:1a:9a:a5:11:84:
cc:e3:9b:56:8f:39:5c:eb:da:52:9b:33:ec:5d:59:cc:e4:b9:
5b:5f:b7:3c:45:b9:df:ac:44:58:e3:bb:28:3d:4a:b7:cf:cf:
42:62:d6:ff:13:7c:7a:df:c2:b2:e1:5e:bf:57:98:51:2d:20:
2f:ff:0c:7f:46:98:ae:f2:8f:c5:94:b4:35:96:ff:83:cc:3f:
7c:e6:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:06:53 2026 by rpki-client