Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=
Subject key identifier: 79:0C:D7:45:97:C6:C1:4B:B8:1B:53:BB:03:67:52:2D:CC:57:FB:12
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 05197C775E59C8D8292426E877229EB9056CD2A8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5650.roa
Signing time: Tue 30 Sep 2025 10:03:14 +0000
ROA not before: Tue 30 Sep 2025 09:58:14 +0000
ROA not after: Tue 29 Sep 2026 10:03:14 +0000
asID: 5650
IP address blocks: 46.236.244.0/22 maxlen: 24
46.236.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:19:7c:77:5e:59:c8:d8:29:24:26:e8:77:22:9e:b9:05:6c:d2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 30 09:58:14 2025 GMT
Not After : Sep 29 10:03:14 2026 GMT
Subject: CN=790CD74597C6C14BB81B53BB0367522DCC57FB12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:20:81:b5:5f:a6:52:a2:3b:20:2d:3d:53:
a3:85:81:37:36:e0:62:86:e1:3a:8f:fa:ba:c1:b2:
4f:e3:fe:7d:dc:c1:3e:c0:17:82:ae:38:44:c2:24:
6d:3a:65:fb:44:be:f0:9f:2e:fd:75:15:ff:eb:dd:
cd:99:4f:49:cf:58:5e:9e:40:eb:46:03:fb:41:d8:
67:b2:1b:ec:9c:dd:97:1c:90:33:95:51:2a:5d:0c:
75:c9:2b:03:76:15:64:49:30:7b:90:08:3f:f3:2c:
de:de:3e:8a:f0:42:5c:94:f5:e2:07:ab:df:15:dc:
ec:6f:f8:eb:c5:b9:f5:c5:e8:c0:51:4c:99:f6:d8:
94:2a:59:07:c7:7c:ac:d5:67:af:25:8b:a8:63:c7:
67:69:92:25:67:fd:63:fc:7c:09:0f:02:6d:d4:5c:
19:6c:af:61:ca:6d:50:42:e1:ad:9d:64:da:fe:68:
b5:f4:86:3a:4f:d0:e5:80:ca:0e:76:98:7e:76:88:
29:50:f2:54:56:4b:bc:39:63:dc:2a:ca:ff:71:5a:
b7:52:3e:91:85:8c:ea:75:25:6e:03:90:d7:7c:8b:
d4:8e:83:e2:45:8e:d4:da:57:ce:eb:33:37:05:0e:
6e:c1:24:f6:9c:55:55:d1:04:f8:d4:53:2d:76:90:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:D7:45:97:C6:C1:4B:B8:1B:53:BB:03:67:52:2D:CC:57:FB:12
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.244.0-46.236.251.255
Signature Algorithm: sha256WithRSAEncryption
0b:a1:e9:76:ee:70:70:56:18:74:16:4c:c2:93:68:93:c9:34:
24:fb:91:c8:ad:d7:d9:cc:65:0b:26:56:ad:1b:42:33:49:55:
71:af:6c:26:bc:be:9d:eb:a8:d2:24:1e:6f:32:a9:ec:de:0b:
23:7d:37:9a:8a:fe:f3:59:7f:c2:49:55:82:06:79:78:18:cf:
6c:7b:c9:ff:cd:92:32:c4:61:dd:24:de:54:d1:ed:2e:5c:c2:
b4:12:43:25:6a:7d:cb:bd:9b:18:ba:44:06:a8:55:17:a6:db:
e4:0b:8b:e0:5c:2b:17:96:9a:b8:aa:e4:1d:45:98:e7:1e:76:
09:06:7a:03:99:67:fa:8d:ff:cd:ad:7d:9d:47:9f:26:ab:33:
6d:9e:5b:fc:7d:8e:e1:5c:6d:48:2c:22:9d:d2:87:c7:c7:86:
18:87:9d:80:76:01:09:46:1e:d9:69:0f:b1:0f:4a:bd:15:45:
9c:b1:9a:53:51:a2:04:a3:ac:d4:a4:b3:11:75:35:04:62:9d:
bb:df:43:3c:d0:31:b6:e1:c4:8e:fd:14:32:89:2e:7c:82:d8:
1a:2b:37:ac:ce:7b:f7:1c:c2:54:62:94:e4:d7:98:ac:4c:cb:
3f:34:d2:ba:2f:21:e0:c1:23:56:b3:4b:61:8f:92:68:11:2d:
59:90:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:04:58 2025 by rpki-client