Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: twzgT3SkHvXaSwjAxiSLJvBi4YwXjMhqUawuV7dNCbQ=
Subject key identifier: 76:18:B5:B9:CA:34:5A:59:63:8A:9A:69:19:1A:67:F5:DC:0A:03:0E
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 49B7C97016993DD0A1D317D3BE6A19AFCAB2DBDC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
Signing time: Tue 27 Jan 2026 07:53:52 +0000
ROA not before: Tue 27 Jan 2026 07:48:52 +0000
ROA not after: Tue 26 Jan 2027 07:53:52 +0000
asID: 50049
IP address blocks: 96.62.74.0/24 maxlen: 24
143.14.71.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
155.117.99.0/24 maxlen: 24
167.148.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b7:c9:70:16:99:3d:d0:a1:d3:17:d3:be:6a:19:af:ca:b2:db:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jan 27 07:48:52 2026 GMT
Not After : Jan 26 07:53:52 2027 GMT
Subject: CN=7618B5B9CA345A59638A9A69191A67F5DC0A030E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:aa:7c:38:bd:71:66:e6:63:26:3f:9e:4d:
98:7c:17:d7:f5:6a:d2:b2:59:10:c0:05:ae:4b:5a:
28:53:cb:d4:ff:b3:3b:41:a6:48:1f:8a:b1:ea:e6:
82:9c:b6:2f:a8:84:e8:4d:fd:a1:ad:9c:d0:8b:e2:
14:7d:3e:34:88:12:4d:f6:f8:34:5d:f5:55:c5:a5:
b5:55:3b:2c:39:93:87:93:9e:07:9a:82:cb:b3:44:
e0:2e:ea:c4:88:ba:6f:03:41:22:49:63:1a:4e:b0:
92:a5:c2:c5:d1:52:b3:71:bc:5a:db:88:98:84:ff:
a4:9e:77:70:3c:a4:af:58:f1:08:59:c0:f2:e5:ed:
bb:59:69:14:d7:b4:d0:48:15:f1:4a:1a:ed:b8:de:
0e:5e:ef:83:03:c1:91:a9:9d:ac:9a:ca:38:89:ee:
37:55:06:0d:ff:96:e1:42:da:b6:46:ac:72:78:66:
5d:60:5c:39:70:ca:2c:29:5a:d2:5d:3c:48:16:82:
62:98:8a:a0:db:39:47:01:32:9c:02:e9:6e:ea:92:
3b:66:fe:65:31:8a:71:cc:7e:76:c1:cf:e1:1f:9a:
8b:4f:4c:0e:2d:c0:a4:f5:80:60:a3:d6:27:89:69:
c6:1e:bb:fc:1e:13:7e:f2:c3:f6:40:44:64:ba:f5:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:B5:B9:CA:34:5A:59:63:8A:9A:69:19:1A:67:F5:DC:0A:03:0E
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.74.0/24
143.14.71.0/24
143.14.75.0/24
155.117.99.0/24
167.148.180.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c1:02:72:ed:ea:2f:20:7b:b0:f3:a1:2f:c8:8e:b9:31:51:
81:ca:e3:7e:2b:db:34:3c:5a:f8:20:d4:50:3f:6a:06:75:20:
92:dd:a4:58:0b:bd:17:8c:64:4c:62:6a:b8:34:91:05:0b:9c:
ff:c6:aa:66:8c:3a:45:0d:ff:97:0d:18:ff:27:dd:a2:a5:1e:
34:6f:c0:8b:14:52:e8:27:4f:49:27:bc:3d:bf:62:f5:68:af:
ba:52:88:57:a3:df:4d:83:ab:3b:87:68:f9:fe:aa:9a:fb:bb:
ba:7c:6d:d9:e6:7f:a1:0e:1e:5c:5c:c9:4c:07:90:d9:da:bd:
31:24:40:48:a7:69:8f:ab:c4:37:50:87:13:9e:82:2c:d0:ff:
64:9d:5f:b0:14:0d:21:32:b7:1f:c4:2c:93:2e:d8:f5:5e:b9:
e7:25:d8:f7:f4:5a:ea:50:88:ff:ea:37:c9:48:79:c4:31:81:
4f:d3:d2:b6:d3:b6:8b:21:42:7d:ec:d9:42:42:ce:83:2b:15:
50:80:8c:4c:56:cb:cf:64:93:c9:f9:18:d0:45:d0:39:b1:bd:
fe:40:d3:22:91:b2:6e:44:e4:69:ae:68:3a:f6:bd:9d:92:1b:
d4:f0:cc:d1:99:de:45:f4:7b:1d:3a:0b:1c:2d:9d:43:f8:75:
aa:2a:32:e0
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUSbfJcBaZPdCh0xfTvmoZr8qy29wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNjAxMjcwNzQ4NTJaFw0yNzAxMjYwNzUzNTJaMDMxMTAvBgNV
BAMTKDc2MThCNUI5Q0EzNDVBNTk2MzhBOUE2OTE5MUE2N0Y1REMwQTAzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3qp8OL1xZuZjJj+eTZh8F9f1
atKyWRDABa5LWihTy9T/sztBpkgfirHq5oKcti+ohOhN/aGtnNCL4hR9PjSIEk32
+DRd9VXFpbVVOyw5k4eTngeagsuzROAu6sSIum8DQSJJYxpOsJKlwsXRUrNxvFrb
iJiE/6Sed3A8pK9Y8QhZwPLl7btZaRTXtNBIFfFKGu243g5e74MDwZGpnayayjiJ
7jdVBg3/luFC2rZGrHJ4Zl1gXDlwyiwpWtJdPEgWgmKYiqDbOUcBMpwC6W7qkjtm
/mUxinHMfnbBz+EfmotPTA4twKT1gGCj1ieJacYeu/weE37yw/ZARGS69RdZAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUdhi1uco0WlljipppGRpn9dwKAw4wHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTAwNDkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABgPkoD
BACPDkcDBACPDksDBACbdWMDBACnlLQwDQYJKoZIhvcNAQELBQADggEBABjBAnLt
6i8ge7DzoS/IjrkxUYHK434r2zQ8Wvgg1FA/agZ1IJLdpFgLvReMZExiarg0kQUL
nP/GqmaMOkUN/5cNGP8n3aKlHjRvwIsUUugnT0knvD2/YvVor7pSiFej302DqzuH
aPn+qpr7u7p8bdnmf6EOHlxcyUwHkNnavTEkQEinaY+rxDdQhxOegizQ/2SdX7AU
DSEytx/ELJMu2PVeuecl2Pf0WupQiP/qN8lIecQxgU/T0rbTtoshQn3s2UJCzoMr
FVCAjExWy89kk8n5GNBF0Dmxvf5A0yKRsm5E5GmuaDr2vZ2SG9TwzNGZ3kX0ex06
CxwtnUP4daoqMuA=
-----END CERTIFICATE-----
Generated at Fri Feb 20 03:39:31 2026 by rpki-client