Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
File: AS63199.roa (raw, json)
Hash identifier: hftjvrKrV6nRjeBoAl9qX6Qg5fexFbySrUylxo9Gcqs=
Subject key identifier: 64:8D:B5:1E:AC:72:67:4D:8B:7E:53:14:F7:6C:88:8F:D7:FE:FA:19
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7C92BD49F975656E375996B18333B9F2653D2A90
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
Signing time: Sun 01 Mar 2026 03:05:59 +0000
ROA not before: Sun 01 Mar 2026 03:00:59 +0000
ROA not after: Sun 28 Feb 2027 03:05:59 +0000
asID: 63199
IP address blocks: 46.202.36.0/24 maxlen: 24
46.202.39.0/24 maxlen: 24
46.202.51.0/24 maxlen: 24
46.202.62.0/24 maxlen: 24
46.203.155.0/24 maxlen: 24
92.112.39.0/24 maxlen: 24
92.112.46.0/24 maxlen: 24
92.112.54.0/24 maxlen: 24
92.112.56.0/24 maxlen: 24
92.112.144.0/24 maxlen: 24
92.113.56.0/24 maxlen: 24
92.113.57.0/24 maxlen: 24
95.134.28.0/24 maxlen: 24
178.94.162.0/24 maxlen: 24
178.94.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:92:bd:49:f9:75:65:6e:37:59:96:b1:83:33:b9:f2:65:3d:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Mar 1 03:00:59 2026 GMT
Not After : Feb 28 03:05:59 2027 GMT
Subject: CN=648DB51EAC72674D8B7E5314F76C888FD7FEFA19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:29:c9:fb:53:33:71:63:c4:4f:00:77:8f:
ee:70:2f:9d:63:d7:31:a7:36:c9:2d:dd:e5:a6:f5:
54:3d:43:3c:eb:4c:1a:52:2d:bb:de:5d:b9:c5:40:
c6:dc:43:b9:8e:1f:57:42:05:11:e4:37:61:58:fc:
e2:1a:ab:3f:c4:89:3f:32:1f:86:f2:3c:c1:af:d3:
13:48:ee:01:81:67:70:0e:52:de:3e:c1:e2:ed:72:
c6:b0:00:9b:9d:16:cf:5f:d6:6e:d7:4f:a8:8a:10:
74:65:4a:cf:15:c7:cc:57:f0:07:c4:3e:0f:86:e1:
5b:5a:b7:17:27:2a:3b:c0:eb:60:63:f1:2a:79:2e:
6a:08:94:6c:55:cf:87:27:32:c9:ba:3b:f6:b7:4d:
f6:a6:79:99:d1:d3:bf:b6:e0:53:b8:2c:6f:84:cf:
e2:3f:83:90:dc:3e:a8:00:0b:9f:66:47:16:b3:df:
5c:ef:bf:fa:b6:fc:49:04:cc:d3:a5:fe:b1:d3:84:
5d:06:d1:11:ce:2c:7b:bf:1c:60:8a:6f:48:e9:0e:
5a:6f:32:83:75:24:7b:3d:31:af:4b:e5:c6:41:f3:
8c:54:cc:6e:14:14:f9:07:90:77:f9:09:2a:1f:19:
62:62:8a:d5:68:b2:8a:ad:b0:03:83:d2:40:2f:3e:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:B5:1E:AC:72:67:4D:8B:7E:53:14:F7:6C:88:8F:D7:FE:FA:19
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS63199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.36.0/24
46.202.39.0/24
46.202.51.0/24
46.202.62.0/24
46.203.155.0/24
92.112.39.0/24
92.112.46.0/24
92.112.54.0/24
92.112.56.0/24
92.112.144.0/24
92.113.56.0/23
95.134.28.0/24
178.94.162.0/24
178.94.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:02:ef:b3:33:d3:bb:42:3a:28:b0:e6:3f:17:f2:b7:98:bb:
d9:3b:d3:be:a9:f9:1a:2c:1e:9e:57:c8:59:5f:34:e9:1d:f9:
5e:3d:0e:f6:64:27:19:c3:5b:0b:a4:72:aa:c2:65:16:3b:28:
ff:9f:4b:fb:20:0b:66:1b:e6:88:d1:42:6c:8c:a6:d5:fc:4b:
26:dd:0c:d7:6c:3b:3c:a9:10:28:06:75:4a:8b:3c:80:97:13:
5b:75:3e:4f:ea:e4:d2:c4:97:4d:b8:c0:2a:1c:64:05:d1:e4:
25:f1:98:b3:de:8d:7a:e5:4a:4b:dd:3d:5c:bc:7f:cd:6c:f2:
22:38:73:d9:10:0d:59:4f:46:c2:62:64:9c:f6:9f:14:46:f5:
a7:25:ed:9f:bc:9f:67:8a:e8:22:59:0e:a2:a3:07:93:64:a5:
7a:60:20:9f:44:bb:86:f7:41:26:84:d3:b6:59:48:e6:58:c2:
a3:d3:60:3e:9c:3c:3c:16:77:0d:3f:0b:17:a9:0e:a1:2d:7b:
a4:64:40:81:7e:a2:46:30:23:47:c5:92:96:74:7b:96:03:3a:
27:f3:fd:32:7f:c0:30:c8:d7:89:1e:6e:1c:07:8b:fd:71:63:
a0:f7:f1:b5:93:b5:37:29:fb:12:a9:1a:e9:ac:56:d1:52:be:
f1:14:a3:20
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUfJK9Sfl1ZW43WZaxgzO58mU9KpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAzMDEwMzAwNTlaFw0yNzAyMjgwMzA1NTlaMDMxMTAvBgNV
BAMTKDY0OERCNTFFQUM3MjY3NEQ4QjdFNTMxNEY3NkM4ODhGRDdGRUZBMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRinJ+1MzcWPETwB3j+5wL51j
1zGnNskt3eWm9VQ9QzzrTBpSLbveXbnFQMbcQ7mOH1dCBRHkN2FY/OIaqz/EiT8y
H4byPMGv0xNI7gGBZ3AOUt4+weLtcsawAJudFs9f1m7XT6iKEHRlSs8Vx8xX8AfE
Pg+G4VtatxcnKjvA62Bj8Sp5LmoIlGxVz4cnMsm6O/a3TfameZnR07+24FO4LG+E
z+I/g5DcPqgAC59mRxaz31zvv/q2/EkEzNOl/rHThF0G0RHOLHu/HGCKb0jpDlpv
MoN1JHs9Ma9L5cZB84xUzG4UFPkHkHf5CSofGWJiitVosoqtsAOD0kAvPsmXAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUZI21HqxyZ02LflMU92yIj9f++hkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwbQYIKwYBBQUHAQcBAf8EXjBcMFoEAgABMFQDBAAuyiQD
BAAuyicDBAAuyjMDBAAuyj4DBAAuy5sDBABccCcDBABccC4DBABccDYDBABccDgD
BABccJADBAFccTgDBABfhhwDBACyXqIDBACyXrIwDQYJKoZIhvcNAQELBQADggEB
AFoC77Mz07tCOiiw5j8X8reYu9k7076p+RosHp5XyFlfNOkd+V49DvZkJxnDWwuk
cqrCZRY7KP+fS/sgC2Yb5ojRQmyMptX8SybdDNdsOzypECgGdUqLPICXE1t1Pk/q
5NLEl024wCocZAXR5CXxmLPejXrlSkvdPVy8f81s8iI4c9kQDVlPRsJiZJz2nxRG
9acl7Z+8n2eK6CJZDqKjB5NkpXpgIJ9Eu4b3QSaE07ZZSOZYwqPTYD6cPDwWdw0/
CxepDqEte6RkQIF+okYwI0fFkpZ0e5YDOifz/TJ/wDDI14kebhwHi/1xY6D38bWT
tTcp+xKpGumsVtFSvvEUoyA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:11:14 2026 by rpki-client