Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS63099.roa
File: AS63099.roa (raw, json)
Hash identifier: gumwxgYq4YbhTTXXYAEfKiSatIyfrLmNcrH6ZwsjwCU=
Subject key identifier: F2:24:C7:9E:B0:8F:A8:58:56:6A:29:72:F3:07:D5:AE:8E:AE:F7:3F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0B44D398314487510DDF12FE2A1C50B09D512768
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS63099.roa
Signing time: Wed 09 Sep 2026 17:09:15 +0000
ROA not before: Wed 09 Sep 2026 17:04:15 +0000
ROA not after: Wed 08 Sep 2027 17:09:15 +0000
asID: 63099
IP address blocks: 51.146.126.0/23 maxlen: 24
51.194.182.0/23 maxlen: 24
51.241.142.0/23 maxlen: 24
51.241.146.0/23 maxlen: 24
51.241.220.0/22 maxlen: 24
87.81.64.0/21 maxlen: 24
94.116.172.0/22 maxlen: 24
94.194.164.0/22 maxlen: 24
94.194.172.0/22 maxlen: 24
94.194.192.0/22 maxlen: 24
94.194.196.0/22 maxlen: 24
94.194.216.0/22 maxlen: 24
94.194.220.0/22 maxlen: 24
188.220.130.0/24 maxlen: 24
188.220.131.0/24 maxlen: 24
188.220.160.0/23 maxlen: 24
188.220.176.0/21 maxlen: 24
188.221.112.0/22 maxlen: 24
188.221.132.0/22 maxlen: 24
188.221.136.0/22 maxlen: 24
188.221.148.0/22 maxlen: 24
188.221.158.0/23 maxlen: 24
188.221.164.0/22 maxlen: 24
188.221.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:44:d3:98:31:44:87:51:0d:df:12:fe:2a:1c:50:b0:9d:51:27:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 9 17:04:15 2026 GMT
Not After : Sep 8 17:09:15 2027 GMT
Subject: CN=F224C79EB08FA858566A2972F307D5AE8EAEF73F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:71:d4:bd:2e:bd:7f:53:30:6e:13:ee:a0:
4a:55:de:2d:bf:b8:92:00:9f:bf:03:b4:ec:ee:61:
d2:84:0a:9e:18:81:d6:c3:4f:aa:66:ba:9b:d0:08:
cb:5c:72:1c:83:8f:34:77:6d:f9:08:ad:14:d6:f8:
f1:c4:3e:b7:70:76:48:a1:6e:1d:88:ec:6a:92:92:
10:bc:0f:34:47:d1:a6:f7:90:11:47:32:ce:56:d1:
75:0d:57:0d:3d:e5:c3:d8:37:f2:f9:32:32:35:bd:
be:1e:c9:7a:76:38:83:45:19:b3:55:40:da:af:d0:
24:75:0c:b5:30:36:24:b9:c7:d8:f0:09:79:d2:81:
d5:48:e1:8e:4a:5d:5f:f0:4b:82:a2:b6:d5:cd:55:
b1:7f:c9:3b:95:17:b6:ae:ce:b9:57:7a:4d:01:1e:
9b:f5:d9:54:f1:c5:d5:5e:bf:c7:01:91:76:2e:11:
9d:b7:86:aa:35:c8:90:c5:fc:51:78:4f:a6:00:8b:
d0:f0:f1:15:da:df:c7:90:c4:05:da:77:c0:07:d2:
a6:8e:d5:a5:81:82:d4:58:e7:5f:22:08:f7:df:d4:
bc:b5:b8:8c:72:b9:1c:31:53:1e:d3:fc:51:11:aa:
6d:dc:80:9b:37:c1:60:44:0e:f9:b5:7e:60:69:7d:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:C7:9E:B0:8F:A8:58:56:6A:29:72:F3:07:D5:AE:8E:AE:F7:3F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS63099.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.126.0/23
51.194.182.0/23
51.241.142.0/23
51.241.146.0/23
51.241.220.0/22
87.81.64.0/21
94.116.172.0/22
94.194.164.0/22
94.194.172.0/22
94.194.192.0/21
94.194.216.0/21
188.220.130.0/23
188.220.160.0/23
188.220.176.0/21
188.221.112.0/22
188.221.132.0-188.221.139.255
188.221.148.0/22
188.221.158.0/23
188.221.164.0/22
188.221.180.0/22
Signature Algorithm: sha256WithRSAEncryption
88:4f:77:e1:15:b4:33:f2:b9:1c:ba:45:82:fc:06:45:b3:7b:
37:7a:b1:ba:97:ce:10:47:f5:4c:68:13:a8:93:88:04:ba:7f:
4e:a3:e1:24:54:41:0a:bc:2f:ac:c9:1e:c5:ec:d6:93:70:dc:
0b:4f:39:81:1f:1a:d4:24:e4:0b:fe:5d:55:6b:fc:05:48:8d:
cb:86:e5:6c:af:bc:15:60:60:46:1b:50:6d:07:83:8c:61:01:
ff:b3:82:cb:70:02:3c:c1:28:90:2b:85:e5:5d:fb:df:33:e8:
e8:59:1c:fb:74:61:f2:6f:83:e9:0f:d3:28:a8:ea:2d:46:28:
06:7c:99:6f:5c:82:ba:14:09:9a:5d:84:c4:13:b8:26:d0:48:
3a:9b:7c:f0:5e:af:fa:b4:79:ed:d5:1a:08:4d:90:f6:a9:4f:
87:b2:24:a7:8a:0d:50:ed:2c:33:22:52:84:26:40:8c:e2:52:
56:ad:1d:5f:a6:00:9f:85:22:82:9c:73:68:d9:e2:8d:32:59:
e3:e0:ed:d5:92:f3:ab:36:f1:69:fe:5a:05:f5:21:9d:aa:d9:
82:99:58:65:52:cc:8f:95:47:c2:1d:00:c7:6f:2e:43:e3:25:
4b:5a:23:61:28:bc:bd:1e:18:18:3e:ff:5b:35:76:bf:ef:13:
b5:6a:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:39:24 2026 by rpki-client