Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50673.roa
File: AS50673.roa (raw, json)
Hash identifier: zqXXhaBK9o3nA4Pkca4UOk4QwTrhRQ6rEn3kUA20Wdw=
Subject key identifier: 80:21:5A:24:19:DF:93:4A:4A:43:AF:7A:23:7E:81:23:8E:23:9C:61
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 09155CBE94E3A38E79BD458E3E3CAC0615366FE4
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50673.roa
Signing time: Fri 03 Oct 2025 09:12:28 +0000
ROA not before: Fri 03 Oct 2025 09:07:28 +0000
ROA not after: Fri 02 Oct 2026 09:12:28 +0000
asID: 50673
IP address blocks: 147.78.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 10:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:15:5c:be:94:e3:a3:8e:79:bd:45:8e:3e:3c:ac:06:15:36:6f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 3 09:07:28 2025 GMT
Not After : Oct 2 09:12:28 2026 GMT
Subject: CN=80215A2419DF934A4A43AF7A237E81238E239C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:77:dd:fa:c7:d6:fe:0f:98:78:e7:d6:02:
db:3f:29:92:d5:24:bb:78:0e:14:f4:f2:16:06:d1:
fd:71:c9:66:52:54:86:83:a2:3c:07:41:56:bc:8a:
3b:d9:12:26:94:c3:d7:71:d5:da:69:a4:cf:f1:22:
89:33:8f:db:e0:f1:cc:8f:08:26:fc:2f:a9:73:9d:
f1:ab:73:11:d6:a0:cd:15:a4:9c:81:48:7c:f0:60:
17:a4:6b:a9:3e:56:76:c8:5e:0b:36:13:cf:ec:19:
cf:2d:85:ba:a9:6d:46:6b:8f:13:4f:4a:fe:99:b5:
42:5c:ec:82:cd:16:d1:cd:61:00:cc:7c:7f:13:80:
0c:eb:34:2e:00:0b:57:90:75:ae:75:47:de:0d:3c:
08:0f:2b:ab:7a:5d:27:f6:ba:3d:e6:cb:b7:cc:48:
1c:59:c5:cd:0a:3d:9b:06:24:22:70:16:23:83:33:
92:48:e7:f2:67:45:c5:fa:4b:3d:55:3b:c5:0e:cf:
42:99:cd:da:42:2f:69:86:78:92:74:2d:ba:f7:f8:
ff:22:64:0c:f4:e7:70:0e:90:d7:10:7b:f8:e0:da:
19:bc:57:1a:b7:62:40:88:81:c5:ff:14:29:a3:cc:
e6:b8:df:fc:f6:36:62:e0:70:43:30:50:66:04:e8:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:5A:24:19:DF:93:4A:4A:43:AF:7A:23:7E:81:23:8E:23:9C:61
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS50673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:b1:35:61:c3:ee:7a:19:c1:92:90:5f:7e:a0:55:bd:26:4d:
69:a2:f5:46:93:4a:44:86:0c:5d:44:ce:d7:c6:75:38:c8:ea:
06:1c:a0:e6:1f:7b:1e:43:4d:b9:4f:98:c7:f1:14:27:d8:7a:
5a:d5:51:dd:df:fa:a1:62:db:0c:88:dd:9f:7d:2e:96:d8:9b:
79:0a:a3:90:35:01:73:f3:c7:97:63:24:3b:3c:b3:10:9a:42:
93:bc:fc:c0:e6:55:ba:9b:59:fa:7f:0b:c9:51:04:ef:0c:06:
7e:41:32:0d:8d:19:04:1f:03:77:32:8b:0e:d5:b1:d0:90:8d:
16:32:7a:a4:4c:f9:06:af:bb:82:da:96:46:4d:4b:61:72:85:
49:6e:d9:94:ad:28:30:1a:3d:c4:03:f9:f3:97:50:d7:fc:01:
00:00:7b:6c:f9:c5:17:f8:f6:fc:43:4d:f6:e0:7a:85:f5:7f:
03:77:60:de:38:7e:d6:df:c8:7f:9f:b1:ff:37:74:9d:71:95:
a3:76:4b:07:47:13:b0:5c:43:03:ed:74:6f:70:89:b2:9e:93:
0c:99:31:43:3f:be:53:03:4f:99:dd:53:28:04:85:7b:c4:be:
94:fa:64:ea:22:f8:64:a8:bf:e9:56:76:97:6d:c3:d4:08:fc:
67:8b:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 03:16:24 2025 by rpki-client