Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: dKg6ANPuqw8vZSagkMlDdfMFqykZj/bYSDTrWfgVUA0=
Subject key identifier: A9:23:B5:B1:79:F2:7F:84:82:B1:31:A5:5A:C2:61:AE:7B:B7:E0:90
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 68E8EA82B42AA947CA14C1ABEC957CE9E5E16B3E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63199.roa
Signing time: Wed 18 Feb 2026 07:10:26 +0000
ROA not before: Wed 18 Feb 2026 07:05:26 +0000
ROA not after: Wed 17 Feb 2027 07:10:26 +0000
asID: 63199
IP address blocks: 194.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e8:ea:82:b4:2a:a9:47:ca:14:c1:ab:ec:95:7c:e9:e5:e1:6b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Feb 18 07:05:26 2026 GMT
Not After : Feb 17 07:10:26 2027 GMT
Subject: CN=A923B5B179F27F8482B131A55AC261AE7BB7E090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:23:14:9a:b4:c9:98:28:a8:d6:27:5d:58:
25:b0:7c:ef:79:2d:7c:41:ca:cf:c2:2c:8d:df:89:
71:02:89:40:e6:9d:95:ba:d5:6b:27:d2:5d:88:91:
82:18:46:72:2f:e6:85:59:aa:89:ec:68:ea:54:af:
46:39:59:9b:83:1c:0f:92:95:ac:ce:5a:1e:87:07:
20:22:5d:bc:b9:74:d5:09:3c:e4:8e:a7:a3:78:18:
80:3e:19:1f:0b:7c:9d:f0:25:ab:77:0b:e9:79:ac:
db:8a:5d:ae:7d:86:92:8c:d9:68:78:5a:a5:4b:e1:
1c:0d:df:b2:05:e5:ac:29:bb:37:13:37:3a:9f:33:
bd:4d:89:94:fb:b4:1a:a0:1c:97:24:d8:c3:f8:17:
de:48:b0:ef:37:41:9c:5a:5f:c3:de:ee:0b:f0:db:
9b:8e:23:e1:8e:dd:ce:68:81:0d:d5:ff:29:c0:28:
fc:be:8f:9a:98:4f:32:68:10:05:89:a5:c0:aa:3a:
fa:cc:79:39:5f:62:dc:a3:e3:b2:dd:85:ca:f0:25:
99:b5:d4:5f:4d:36:b9:94:96:fa:da:06:58:fe:41:
3b:cd:ee:54:a8:b8:44:13:0c:6e:b9:3a:1a:04:67:
10:71:c7:73:c4:14:07:1b:e0:40:95:54:12:3f:ed:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:23:B5:B1:79:F2:7F:84:82:B1:31:A5:5A:C2:61:AE:7B:B7:E0:90
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:96:32:54:a4:b9:29:da:0e:1b:a7:e6:8c:94:8d:27:5e:37:
3d:30:b9:0d:71:d5:74:be:3c:13:51:c0:f8:5b:6c:39:66:f6:
72:d8:35:3f:f1:fe:bd:d7:99:02:9c:f1:5c:4d:c4:4a:d8:26:
9c:9e:f6:66:82:4b:79:ec:b1:f4:2f:a5:cf:96:3c:38:e4:43:
7c:d1:a4:60:45:14:f1:4a:55:e8:43:2b:28:2b:e3:20:34:66:
2e:5e:d1:62:18:ab:9c:2a:08:bb:f9:fe:d3:fa:39:bc:0c:97:
50:33:4c:bb:9e:21:9e:39:71:d6:06:b3:ae:3e:cf:ee:6b:a9:
1a:e7:6c:d1:58:81:97:2e:6e:a1:5c:4b:68:22:6e:5e:6d:27:
a4:c6:a3:f4:5d:c7:37:3d:8a:b7:8c:e4:4e:ed:e6:18:62:8b:
8d:97:56:1b:05:28:42:c8:1e:7d:64:c7:19:ae:39:b9:18:4d:
ba:46:97:24:8c:c5:40:29:7a:ae:9b:d8:00:7d:83:60:8a:33:
a3:42:4e:0b:f9:1b:e6:94:88:b7:96:55:90:bf:66:55:ff:28:
dd:10:82:c4:a3:e3:d3:c7:2e:63:50:fc:fc:37:44:a1:f0:8e:
75:7a:b1:e0:61:02:c9:07:6e:8f:e8:5c:8f:e5:e2:93:83:d7:
73:ce:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:28 2026 by rpki-client