Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: anyXvZDVYVGOrQvPCtt1gYV5v8QDlfExADnTkn2orZA=
Subject key identifier: E3:E1:3E:64:49:B9:0B:8B:51:5D:D0:E6:BD:8B:B2:38:7F:F4:68:4D
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 32AF48BF7C744599E9CC3E46F78F324230DE3D78
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS5650.roa
Signing time: Sun 27 Sep 2026 00:49:35 +0000
ROA not before: Sun 27 Sep 2026 00:44:35 +0000
ROA not after: Sun 26 Sep 2027 00:49:35 +0000
asID: 5650
IP address blocks: 143.20.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:af:48:bf:7c:74:45:99:e9:cc:3e:46:f7:8f:32:42:30:de:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Sep 27 00:44:35 2026 GMT
Not After : Sep 26 00:49:35 2027 GMT
Subject: CN=E3E13E6449B90B8B515DD0E6BD8BB2387FF4684D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:af:2a:8a:eb:d4:93:ab:97:46:2a:96:17:
d6:32:b0:cf:5a:62:7c:a5:9f:5a:0b:57:c6:65:8e:
7e:aa:d3:a3:6c:f8:36:df:38:a7:24:31:53:29:27:
5d:7b:5f:e7:4e:a3:17:89:0f:8e:35:d0:d8:c7:69:
4d:33:a8:c6:e4:17:19:3c:e8:cd:a4:04:86:80:d0:
81:bd:69:1c:f4:18:00:d9:c0:4e:c6:91:41:a9:cf:
bb:62:32:0c:ad:00:e2:ba:85:fa:cb:fa:cc:ed:50:
8f:6c:ce:bb:12:38:47:c4:7b:25:a5:bc:a2:f7:ec:
05:be:6f:51:51:cf:cd:bd:45:ef:49:8d:1a:50:56:
10:7e:42:a7:e7:91:c5:91:71:b4:17:a7:99:30:97:
c8:4d:c0:90:aa:fa:2e:1a:2d:6c:f1:62:f9:98:0d:
db:e3:89:99:80:94:88:04:59:55:b1:c0:af:2b:aa:
58:c5:92:a9:46:91:ef:bd:d5:c7:67:df:d9:11:eb:
63:17:7c:16:30:28:fa:9f:7e:91:76:96:cc:e2:11:
e8:4a:79:95:75:a9:f8:f1:ee:70:f0:a1:6b:39:03:
e7:fc:ef:2c:7e:35:d5:b3:29:d4:91:e0:0a:74:7c:
c7:1f:45:d9:0b:f6:e3:25:93:26:cc:70:7d:f5:8c:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:3E:64:49:B9:0B:8B:51:5D:D0:E6:BD:8B:B2:38:7F:F4:68:4D
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.153.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7a:69:c1:a5:24:e1:b6:54:54:c3:b3:44:ca:58:67:d9:57:
ad:00:0a:18:8e:54:26:c1:ae:0b:78:ad:4a:95:12:d2:d7:75:
eb:4d:69:d4:c6:76:50:db:d3:c3:25:72:e1:af:f9:3e:ff:f3:
38:77:ba:96:3c:d8:4e:fb:2e:a4:52:d8:f8:34:4e:19:31:f0:
fc:f6:fb:d4:54:f5:20:68:ee:d1:6e:48:5b:4c:4c:55:b4:0e:
ed:cd:a6:ea:c3:49:06:5c:6e:50:21:74:44:58:bb:d7:ef:46:
0f:a4:7f:5c:66:bc:56:62:d1:02:8a:33:6e:0b:64:c3:68:ee:
26:ed:0f:95:0e:5d:63:8c:45:2b:c0:92:9b:0a:0e:d7:6c:12:
2a:b6:9f:7e:32:72:97:43:5d:32:ee:0a:25:b0:51:f3:37:34:
90:df:c4:8b:47:8b:74:c0:47:97:3b:57:d4:0f:fe:ae:84:f6:
39:79:e9:a8:9f:e3:30:02:32:c1:d1:10:05:ba:80:81:a9:b7:
57:09:2b:7a:fa:92:57:85:a7:88:f1:6d:40:05:aa:48:a3:3a:
01:b4:65:2a:37:0c:99:62:f0:74:82:f9:ea:7d:7f:12:6a:f3:
bf:9a:97:82:a4:29:df:12:88:3e:71:8a:52:74:5b:49:36:97:
0e:94:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:18 2026 by rpki-client