Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: WnKOICgX20R+oiOYK7c/zM1iMg1N4JpOB8MTLFYxpvM=
Subject key identifier: 67:64:5E:E2:87:C3:75:90:29:5B:85:AB:BF:97:70:26:36:26:44:59
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 52C7B37A6031593992CB1BF2EAA108F4B22D2365
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
Signing time: Wed 30 Sep 2026 13:49:35 +0000
ROA not before: Wed 30 Sep 2026 13:44:35 +0000
ROA not after: Wed 29 Sep 2027 13:49:35 +0000
asID: 50304
IP address blocks: 148.135.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c7:b3:7a:60:31:59:39:92:cb:1b:f2:ea:a1:08:f4:b2:2d:23:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 30 13:44:35 2026 GMT
Not After : Sep 29 13:49:35 2027 GMT
Subject: CN=67645EE287C37590295B85ABBF97702636264459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:77:db:e9:f1:17:d8:e8:d1:9d:d1:9b:f3:
65:18:c1:f0:2c:f4:89:4c:7c:0d:18:7e:8c:6a:73:
b6:f3:2f:0c:80:46:41:1b:19:8a:f0:1f:3a:24:0b:
27:14:bb:9f:08:90:1c:51:29:fd:a4:e6:fd:d6:73:
5b:b5:0a:46:0c:25:e2:d8:5b:40:7b:90:3b:f9:c7:
02:95:62:e5:c4:49:8a:7f:c5:2f:db:ad:5e:2b:d8:
2b:a4:30:5e:50:60:a2:b8:bb:70:03:25:73:5c:43:
ea:a2:a4:86:66:69:30:bb:7b:f0:cd:36:da:42:ee:
94:be:4a:d2:d6:d2:f1:eb:69:60:ae:a0:92:d7:2f:
f4:96:e2:9b:9e:47:3d:3d:76:15:78:7a:ff:6c:1b:
3e:82:92:9f:87:f6:d2:75:e4:42:ca:9b:bd:a5:d4:
5d:7d:1e:5e:cd:a5:53:67:af:75:b4:a9:91:72:3e:
94:e9:87:de:1f:4e:c6:92:46:f7:00:25:36:19:7e:
49:3b:f0:7d:f0:27:6d:fb:74:b7:d0:cc:39:1c:57:
0a:15:c3:5e:7b:ef:ff:f1:65:39:35:36:fc:bf:8b:
cb:9f:f1:1f:3d:4d:d3:66:ef:03:e1:af:e3:5b:e6:
74:bd:48:a3:bd:0d:32:60:de:f7:5c:7e:07:51:de:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:5E:E2:87:C3:75:90:29:5B:85:AB:BF:97:70:26:36:26:44:59
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.252.0/24
Signature Algorithm: sha256WithRSAEncryption
03:55:ca:3e:96:43:76:0f:64:59:54:c2:1c:b0:ac:ad:e8:3d:
8a:4d:2e:11:27:f2:d9:e8:ff:bf:7c:0e:aa:01:66:ba:34:48:
09:ff:cb:79:d8:a9:85:be:e2:f9:da:52:9d:08:3d:2b:08:88:
cd:18:23:84:4f:f1:db:a0:f8:45:ad:34:38:0e:87:ca:35:94:
b1:9a:39:72:56:e8:aa:06:f9:0a:e9:88:ad:41:07:8c:fa:03:
55:a4:a2:e7:14:7b:00:e1:e6:2f:91:52:67:a5:d0:ba:24:87:
8a:1d:0c:13:85:0e:2d:f5:38:99:f5:bc:ea:74:02:c6:a6:d2:
f0:fa:0d:d1:3c:d3:1c:37:50:23:d1:9d:83:9e:08:96:44:5c:
b9:ad:db:a9:8b:d8:10:f5:a6:c6:b8:3b:36:6c:70:0a:db:86:
3b:59:4d:ea:a4:c4:44:d1:08:99:5c:91:19:4c:68:1a:15:a8:
c2:0a:6a:c2:f7:c4:f4:29:f2:02:dd:6f:50:28:67:23:ca:11:
ac:9b:ad:a7:f6:0d:f1:d9:ad:76:26:b2:a4:45:9b:a1:3a:34:
b3:33:aa:bc:6f:0f:df:6e:f7:4e:70:1b:cf:a9:51:48:74:e8:
3e:29:88:1e:b2:81:43:80:a7:45:ae:44:a0:a0:dd:61:da:ab:
38:14:3d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:17:59 2026 by rpki-client