Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: 6crOYdNs+Imlco3+nQ5FxAnYqftepTTb60x15sIEfd0=
Subject key identifier: E0:6C:9C:B5:F3:2F:C3:17:1B:5E:D2:A5:6F:BD:8F:59:75:DA:AF:2F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3111ABB65C88A14F840662342558A9F7CEB6FAE0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
Signing time: Mon 12 Oct 2026 12:25:32 +0000
ROA not before: Mon 12 Oct 2026 12:20:32 +0000
ROA not after: Mon 11 Oct 2027 12:25:32 +0000
asID: 50049
IP address blocks: 94.118.102.0/24 maxlen: 24
94.118.112.0/24 maxlen: 24
94.118.132.0/24 maxlen: 24
94.118.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:11:ab:b6:5c:88:a1:4f:84:06:62:34:25:58:a9:f7:ce:b6:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Oct 12 12:20:32 2026 GMT
Not After : Oct 11 12:25:32 2027 GMT
Subject: CN=E06C9CB5F32FC3171B5ED2A56FBD8F5975DAAF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:b9:a7:ee:8a:ae:1a:26:f0:09:ff:3e:c7:
59:ea:3e:4b:6f:34:b6:9a:bf:6b:e4:11:c9:5a:eb:
7e:61:85:9b:b4:5c:c6:dd:f2:55:df:be:63:06:61:
11:19:62:73:c5:05:33:b7:a9:3c:1e:21:ff:b5:dc:
f1:50:54:9f:1c:be:d4:76:75:c4:cb:76:39:09:01:
9a:29:4b:e9:2f:ee:c5:cd:2d:a1:cf:29:ea:c7:ff:
dd:1f:fb:c0:27:90:1e:fe:69:03:1a:32:d1:fa:bd:
b9:ad:94:03:c3:f1:27:03:98:0f:18:c0:bc:d9:81:
28:3a:5c:fc:1d:6d:54:8a:d5:17:8a:78:28:9d:8d:
0b:af:7b:7e:81:35:eb:1d:ce:6d:d2:b2:8f:c4:f6:
2a:c7:79:fc:78:5e:cf:92:2c:17:74:d0:79:68:74:
d9:74:3e:d6:f8:b3:44:92:af:de:36:07:f3:b5:20:
b3:78:61:73:fa:2c:22:3f:96:88:0c:00:b1:1f:3e:
20:08:49:75:a3:87:11:fb:90:17:20:e2:8a:aa:e8:
1c:9d:9e:30:71:30:c9:be:77:86:94:56:d1:fc:35:
fa:6e:00:29:ac:1a:db:03:f1:e1:4b:7f:1c:ed:fd:
33:73:d9:ec:1f:e4:cf:1e:ea:aa:7e:76:b9:91:77:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:9C:B5:F3:2F:C3:17:1B:5E:D2:A5:6F:BD:8F:59:75:DA:AF:2F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.118.102.0/24
94.118.112.0/24
94.118.132.0/24
94.118.228.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fd:54:31:a1:42:08:f9:10:df:7d:36:79:9d:5f:f1:69:87:
9f:10:b2:31:b2:19:23:60:ce:de:58:67:f1:05:fe:a0:ef:2b:
e5:cb:00:66:4f:15:3d:21:21:c4:69:c4:45:f9:0a:c9:da:e8:
4a:ae:55:84:63:98:15:59:d8:1c:e7:71:39:bd:5a:82:7e:fc:
64:12:0f:1b:63:cb:79:63:3d:26:1d:d4:cd:49:29:f2:d2:74:
b6:21:30:8d:25:0b:05:d3:a5:cf:9e:0d:2a:a8:ca:3e:96:fd:
76:dd:02:7a:8f:b4:0c:cf:a1:13:41:f7:75:13:d7:7b:e8:15:
5e:c8:8e:62:1e:82:43:e8:b7:f9:c8:a9:e2:45:7c:35:b1:a4:
30:b1:c3:2a:d2:a2:74:d7:91:70:ac:ae:2b:60:67:ab:28:03:
59:66:05:2d:e2:fd:35:0f:31:2c:9e:c0:ce:c5:7e:cd:b9:bc:
9f:8b:d7:83:6a:d7:c1:41:26:a3:77:32:88:e7:9b:c7:24:15:
da:11:76:00:fc:d9:80:d7:6d:17:99:ac:23:4c:da:65:ef:46:
81:42:17:fc:a7:c9:b0:83:ed:cb:b3:1e:9d:22:42:e9:db:99:
01:75:78:ad:24:9b:0e:4f:e8:d8:1e:7f:83:61:2c:78:ca:45:
d5:c7:47:fa
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUMRGrtlyIoU+EBmI0JVip9862+uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjEwMTIxMjIwMzJaFw0yNzEwMTExMjI1MzJaMDMxMTAvBgNV
BAMTKEUwNkM5Q0I1RjMyRkMzMTcxQjVFRDJBNTZGQkQ4RjU5NzVEQUFGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjLmn7oquGibwCf8+x1nqPktv
NLaav2vkEcla635hhZu0XMbd8lXfvmMGYREZYnPFBTO3qTweIf+13PFQVJ8cvtR2
dcTLdjkJAZopS+kv7sXNLaHPKerH/90f+8AnkB7+aQMaMtH6vbmtlAPD8ScDmA8Y
wLzZgSg6XPwdbVSK1ReKeCidjQuve36BNesdzm3Sso/E9irHefx4Xs+SLBd00Hlo
dNl0Ptb4s0SSr942B/O1ILN4YXP6LCI/logMALEfPiAISXWjhxH7kBcg4oqq6Byd
njBxMMm+d4aUVtH8NfpuACmsGtsD8eFLfxzt/TNz2ewf5M8e6qp+drmRdyi1AgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU4GyctfMvwxcbXtKlb72PWXXary8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNTAwNDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABedmYD
BABednADBABedoQDBABeduQwDQYJKoZIhvcNAQELBQADggEBAED9VDGhQgj5EN99
NnmdX/Fph58QsjGyGSNgzt5YZ/EF/qDvK+XLAGZPFT0hIcRpxEX5Csna6EquVYRj
mBVZ2BzncTm9WoJ+/GQSDxtjy3ljPSYd1M1JKfLSdLYhMI0lCwXTpc+eDSqoyj6W
/XbdAnqPtAzPoRNB93UT13voFV7IjmIegkPot/nIqeJFfDWxpDCxwyrSonTXkXCs
ritgZ6soA1lmBS3i/TUPMSyewM7Ffs25vJ+L14Nq18FBJqN3Mojnm8ckFdoRdgD8
2YDXbReZrCNM2mXvRoFCF/ynybCD7cuzHp0iQunbmQF1eK0kmw5P6Ngef4NhLHjK
RdXHR/o=
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:54:54 2026 by rpki-client