Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: LHz6ttvxv1DmeTkpPbBcDErdHnl4/yLrjA0JyUPaCko=
Subject key identifier: D4:F1:30:1C:62:8B:65:57:54:F7:BC:5D:10:7D:A6:8D:C9:65:1B:7C
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 14D5C5BFFDACEF0E9B3D080A138EB0FB4112B564
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
Signing time: Wed 30 Sep 2026 00:59:38 +0000
ROA not before: Wed 30 Sep 2026 00:54:38 +0000
ROA not after: Wed 29 Sep 2027 00:59:38 +0000
asID: 50049
IP address blocks: 96.62.74.0/24 maxlen: 24
143.14.71.0/24 maxlen: 24
143.14.75.0/24 maxlen: 24
155.117.99.0/24 maxlen: 24
167.148.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d5:c5:bf:fd:ac:ef:0e:9b:3d:08:0a:13:8e:b0:fb:41:12:b5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 30 00:54:38 2026 GMT
Not After : Sep 29 00:59:38 2027 GMT
Subject: CN=D4F1301C628B655754F7BC5D107DA68DC9651B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:72:23:c5:f8:f7:1c:53:94:23:d5:41:92:
13:40:ab:68:7f:33:74:18:31:cf:5e:c4:77:12:ab:
56:62:1e:cc:ef:8e:4a:d2:48:64:67:cc:92:97:1e:
08:84:6a:fe:a3:90:8a:19:6f:28:a3:37:77:ae:62:
74:1d:9b:16:c7:a9:0d:38:9f:ec:c4:49:a0:4d:55:
f5:e4:ad:83:91:c5:b0:c0:6d:27:34:ee:4e:b0:8a:
23:ff:3b:9a:60:3d:31:d0:f8:a4:fc:cc:9a:7b:13:
65:1b:d5:e9:a1:87:0e:3a:46:3c:cf:68:c4:6e:fd:
e6:b3:d0:86:ea:d7:b4:06:ca:65:cf:95:82:13:e0:
2e:f9:13:d8:32:4c:cc:bd:f4:86:de:18:78:65:31:
f3:0e:e6:8f:2a:f4:2b:78:3b:b6:5e:3f:99:09:c3:
66:1c:fc:4d:05:84:09:e8:93:21:e1:85:6b:02:e4:
52:0b:66:fd:a3:a7:3b:0a:f5:30:d6:43:fa:8d:73:
d7:08:44:17:43:5f:ee:7f:11:51:6e:17:0b:de:d1:
1d:28:7d:0a:61:58:db:3a:02:13:9f:3b:0f:5a:68:
5e:d8:41:3b:ec:d3:f4:40:14:b5:17:3e:04:40:4d:
97:ff:de:7e:44:ec:1e:a2:4b:51:a4:42:f0:74:87:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F1:30:1C:62:8B:65:57:54:F7:BC:5D:10:7D:A6:8D:C9:65:1B:7C
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.74.0/24
143.14.71.0/24
143.14.75.0/24
155.117.99.0/24
167.148.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:56:cc:e2:a7:d2:b2:dd:b7:58:6c:9d:4e:c1:33:cd:62:0a:
fd:43:ba:ec:6b:3f:a7:0a:ad:c8:86:c1:53:2f:86:56:b7:8a:
ce:b3:76:03:56:13:11:10:d2:ee:48:0e:84:83:31:de:63:11:
d9:2a:af:22:7a:56:0f:3e:32:46:08:3e:cc:2f:46:f6:c5:e0:
61:e3:82:c7:b4:27:33:9f:98:89:d3:6e:a4:86:25:56:88:1c:
1c:e6:0b:2a:43:eb:ab:8e:d0:f0:e9:86:aa:4c:80:c7:45:59:
e3:45:f7:ad:78:d9:0f:01:dd:72:a0:f7:e4:a1:aa:1b:cb:6a:
ee:75:0c:f3:8c:7c:fc:6e:f6:c1:e2:c4:79:ce:fe:f3:54:d9:
74:7f:72:1b:a2:66:e1:79:e9:5b:5c:d0:0a:fb:9e:5e:12:f6:
e6:10:29:39:37:08:64:9a:04:85:4a:cd:6e:c0:74:22:ac:9a:
15:54:21:41:21:28:fc:c5:cf:e1:6a:db:c6:15:de:ac:49:8e:
d2:b0:f9:dd:0f:ca:67:be:63:53:13:a3:40:05:a7:d5:a6:1c:
33:b9:e0:98:97:78:d7:53:f3:ae:20:dc:7b:b9:61:01:f6:3e:
e3:d1:91:cd:6a:7a:a1:39:e7:03:64:5b:28:5f:35:7e:33:d6:
09:cc:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:32:50 2026 by rpki-client