Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: B2ET5HOjvcrDs2iwsXqurxWz0jaZFhWhivb7tIp4cmQ=
Subject key identifier: 89:9F:36:CC:71:F3:FD:A8:C5:91:5F:43:34:23:86:DC:57:FB:B4:8F
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 5EDE1148D704D1C0453F8ED701268C57C1DF00EB
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS50049.roa
Signing time: Tue 01 Sep 2026 14:45:01 +0000
ROA not before: Tue 01 Sep 2026 14:40:01 +0000
ROA not after: Tue 31 Aug 2027 14:45:01 +0000
asID: 50049
IP address blocks: 46.236.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:de:11:48:d7:04:d1:c0:45:3f:8e:d7:01:26:8c:57:c1:df:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 14:40:01 2026 GMT
Not After : Aug 31 14:45:01 2027 GMT
Subject: CN=899F36CC71F3FDA8C5915F43342386DC57FBB48F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:67:1d:6e:ac:7c:8a:ab:98:ae:0e:08:53:
f8:af:3e:af:4b:e6:c0:b0:c3:92:6d:46:0a:ee:d3:
c4:cf:97:06:2b:7e:97:08:17:f3:16:38:d9:58:54:
16:bd:23:a4:ae:78:75:65:cf:a9:e1:1e:74:93:b1:
6c:36:2a:d8:3d:5a:bd:76:94:e5:25:4b:97:01:a8:
2c:be:5c:85:bb:72:28:aa:0c:de:44:ca:a8:75:d6:
1e:cd:5d:6e:79:1a:03:f6:78:85:91:21:8f:54:81:
b0:4b:a9:93:91:19:ae:a3:45:e2:2a:c6:cf:73:1d:
12:f1:7e:6b:73:a3:95:db:f7:d3:fd:62:cc:d5:3c:
1a:f0:33:84:40:5c:41:9f:39:39:7d:3e:02:f4:6a:
18:4b:72:1e:c8:f8:fa:2e:5c:d5:f0:50:b0:49:d2:
15:8b:5a:a8:df:d9:e1:b8:3f:0d:03:ad:55:23:82:
a1:61:be:14:28:9f:d4:82:99:fe:e8:b3:8a:c4:aa:
b3:4c:d5:09:40:e5:89:c6:7a:b4:f2:f8:fe:72:ed:
1b:6e:0b:26:77:03:74:b0:68:b3:04:6b:b3:b3:cd:
fe:fd:e5:e4:71:6b:42:07:e1:7e:76:21:0e:b7:48:
fa:2a:57:cd:a4:5d:92:e6:d2:e2:f9:fc:7d:4e:30:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9F:36:CC:71:F3:FD:A8:C5:91:5F:43:34:23:86:DC:57:FB:B4:8F
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.253.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ca:cf:86:85:86:0f:95:45:f3:81:9a:bc:80:6c:9c:67:35:
dd:4f:3e:cc:d9:ea:17:b0:98:b2:a2:6f:c3:5a:a8:77:bb:4a:
35:2e:4a:84:eb:c3:fa:eb:38:39:7b:32:4f:64:09:1c:6e:6b:
f2:7f:5a:26:a4:28:1e:3f:de:13:16:8c:0b:9d:db:80:a4:30:
f9:23:f2:5f:75:8a:bd:7d:2a:a1:d8:2b:3b:7e:57:3d:5e:cc:
67:d6:ea:a9:e0:95:5d:b5:eb:4d:d8:1d:e3:4c:a8:87:0a:f3:
e0:49:aa:46:ef:34:e0:d4:0e:20:ee:d8:5f:83:04:f5:cb:3a:
48:c1:0c:69:71:79:5d:96:e2:c4:c9:85:28:6a:34:7a:73:f2:
63:05:12:10:d9:c7:2f:dc:59:8b:89:65:59:93:81:53:7f:a8:
44:d8:77:a6:11:31:28:45:4c:04:aa:a3:e2:17:0e:d5:c7:10:
ac:ee:4e:be:34:3b:36:85:b8:3a:11:c7:8e:74:00:fa:a9:c6:
a8:d7:c2:0e:97:fa:7a:9a:35:f2:6f:48:46:51:f0:b9:81:2b:
68:ae:3f:56:d4:81:13:13:6c:30:ce:01:b7:60:4e:a4:b2:55:
a6:36:97:c4:14:a6:e4:59:e4:08:68:41:6c:63:24:7e:4f:56:
54:40:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:02:59 2026 by rpki-client