Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
File: AS50385.roa (raw, json)
Hash identifier: ftzeoMCtZebHmyMJQl6doV4qua6TlGinePN+7BVokTc=
Subject key identifier: 0D:55:82:52:36:8D:6E:2F:70:45:9C:08:78:10:E9:21:89:3D:CD:70
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3A3F50AEECDE6E651693F8B2D0D08EFB8949C059
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
Signing time: Fri 05 Sep 2025 08:38:54 +0000
ROA not before: Fri 05 Sep 2025 08:33:54 +0000
ROA not after: Fri 04 Sep 2026 08:38:54 +0000
asID: 50385
IP address blocks: 140.233.191.0/24 maxlen: 24
143.14.86.0/24 maxlen: 24
155.117.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3f:50:ae:ec:de:6e:65:16:93:f8:b2:d0:d0:8e:fb:89:49:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 5 08:33:54 2025 GMT
Not After : Sep 4 08:38:54 2026 GMT
Subject: CN=0D558252368D6E2F70459C087810E921893DCD70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:84:ce:40:80:a1:26:fb:d8:25:92:4e:28:
7f:1c:5e:54:bb:df:6e:e1:75:f8:cc:7b:3b:27:de:
1d:a0:b9:65:e6:e7:5a:05:62:41:3a:bb:41:32:ee:
b4:e4:f0:70:6d:ea:9a:c3:72:1e:13:c0:8d:11:67:
78:12:12:70:74:fb:50:3d:43:c3:e3:00:02:33:2c:
6c:a7:4a:be:84:f7:b5:63:59:df:f8:70:91:3c:05:
2a:05:ad:1c:46:38:33:da:9f:a6:c6:7f:29:63:68:
dd:6e:d2:87:8c:f4:ae:39:be:69:0f:f7:b6:17:d2:
4d:9a:b5:ed:de:61:ec:c7:c2:7a:a9:69:03:0d:3b:
f3:59:64:de:76:3c:73:37:ac:8e:7f:8d:c2:63:61:
de:68:39:e7:74:35:1e:1a:19:c7:b7:a1:7b:46:6e:
7a:62:f8:92:4a:7b:1e:99:3a:4c:0b:ee:b4:96:99:
41:2b:f5:b7:23:e0:25:78:6d:95:ee:9b:c0:18:c7:
b2:9b:18:58:5a:45:bd:08:bf:2d:88:63:3a:39:21:
99:75:29:98:35:51:8f:3d:44:af:56:2e:88:51:87:
06:eb:de:09:b8:c7:aa:8b:14:2f:97:51:21:d1:40:
ef:00:10:98:4d:c8:d4:93:9d:db:ff:f5:1a:04:6d:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:82:52:36:8D:6E:2F:70:45:9C:08:78:10:E9:21:89:3D:CD:70
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50385.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.191.0/24
143.14.86.0/24
155.117.83.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5a:d0:91:af:1c:98:b7:b6:a9:91:17:6f:1e:8a:37:85:b2:
41:0f:92:d8:34:5c:9f:2c:76:60:7e:8d:6e:d1:cb:aa:04:29:
dc:63:0f:40:8c:3b:b7:da:e3:4a:86:06:ca:35:6e:20:4f:33:
68:e2:76:72:f8:33:10:48:d0:f2:ac:b9:41:2c:d7:d9:71:9d:
5d:a2:19:04:36:f3:58:38:b8:cf:cb:c8:ed:50:0c:79:70:8f:
36:1f:66:d1:c0:da:c8:9c:60:eb:9a:95:80:ba:fd:39:84:7e:
fe:2c:f9:bc:64:ab:5d:4f:e0:bf:97:a7:b6:22:52:d6:3c:61:
2d:15:12:14:20:d2:c6:62:49:98:67:d0:db:3a:e5:f2:b4:07:
aa:36:8f:9b:f9:cb:e6:3e:76:74:cd:ba:88:e5:d5:71:58:2b:
63:7f:3c:12:93:73:3f:f2:21:c6:21:18:6c:7f:f0:4e:cf:cb:
61:72:3d:9e:1a:b4:25:6f:80:51:4e:d0:36:18:19:e4:dd:88:
90:0c:b5:6d:41:09:fd:4f:3c:28:02:2b:50:43:94:37:94:2e:
83:c9:af:ee:74:e8:5f:41:ec:18:29:b8:71:22:73:99:a1:22:
00:d7:00:b2:da:d9:18:db:ca:c2:39:3d:df:3a:93:34:7d:e3:
79:17:72:2b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUOj9QruzebmUWk/iy0NCO+4lJwFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA5MDUwODMzNTRaFw0yNjA5MDQwODM4NTRaMDMxMTAvBgNV
BAMTKDBENTU4MjUyMzY4RDZFMkY3MDQ1OUMwODc4MTBFOTIxODkzRENENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRn4TOQIChJvvYJZJOKH8cXlS7
327hdfjMezsn3h2guWXm51oFYkE6u0Ey7rTk8HBt6prDch4TwI0RZ3gSEnB0+1A9
Q8PjAAIzLGynSr6E97VjWd/4cJE8BSoFrRxGODPan6bGfyljaN1u0oeM9K45vmkP
97YX0k2ate3eYezHwnqpaQMNO/NZZN52PHM3rI5/jcJjYd5oOed0NR4aGce3oXtG
bnpi+JJKex6ZOkwL7rSWmUEr9bcj4CV4bZXum8AYx7KbGFhaRb0Ivy2IYzo5IZl1
KZg1UY89RK9WLohRhwbr3gm4x6qLFC+XUSHRQO8AEJhNyNSTndv/9RoEbd79AgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUDVWCUjaNbi9wRZwIeBDpIYk9zXAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTAzODUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACM6b8D
BACPDlYDBACbdVMwDQYJKoZIhvcNAQELBQADggEBAGRa0JGvHJi3tqmRF28eijeF
skEPktg0XJ8sdmB+jW7Ry6oEKdxjD0CMO7fa40qGBso1biBPM2jidnL4MxBI0PKs
uUEs19lxnV2iGQQ281g4uM/LyO1QDHlwjzYfZtHA2sicYOualYC6/TmEfv4s+bxk
q11P4L+Xp7YiUtY8YS0VEhQg0sZiSZhn0Ns65fK0B6o2j5v5y+Y+dnTNuojl1XFY
K2N/PBKTcz/yIcYhGGx/8E7Py2FyPZ4atCVvgFFO0DYYGeTdiJAMtW1BCf1PPCgC
K1BDlDeULoPJr+506F9B7BgpuHEic5mhIgDXALLa2RjbysI5Pd86kzR943kXcis=
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:27:46 2025 by rpki-client