Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: hJ59++XEh/bB7KaM3MbLki+q3w5S1Bpq98TiOIgbSpU=
Subject key identifier: C8:4F:54:EF:46:DD:8C:86:16:B3:4E:40:D7:F3:D2:FF:3E:DC:68:89
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 6B0698D49C9283AC643BC39F2FE34A1FBF7157BB
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5650.roa
Signing time: Tue 01 Sep 2026 10:49:30 +0000
ROA not before: Tue 01 Sep 2026 10:44:30 +0000
ROA not after: Tue 31 Aug 2027 10:49:30 +0000
asID: 5650
IP address blocks: 46.236.244.0/22 maxlen: 24
46.236.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:06:98:d4:9c:92:83:ac:64:3b:c3:9f:2f:e3:4a:1f:bf:71:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 1 10:44:30 2026 GMT
Not After : Aug 31 10:49:30 2027 GMT
Subject: CN=C84F54EF46DD8C8616B34E40D7F3D2FF3EDC6889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:c0:67:83:6c:ef:82:ec:74:46:f9:7d:06:
c8:82:94:36:33:de:6c:3f:ce:4a:2c:79:66:7f:e5:
29:b0:47:9c:00:19:da:a4:9e:b8:45:cd:03:31:12:
fe:20:08:f4:60:5d:18:20:07:9c:6c:16:3b:23:cc:
e6:83:f1:3a:77:a4:10:84:52:5e:a9:4c:1f:c5:65:
93:b8:75:a1:e7:6b:41:42:0d:4b:d1:3c:e2:7f:a4:
92:89:21:7e:81:15:80:64:79:44:6b:a4:57:59:ae:
d9:ca:90:73:46:6e:23:bf:25:62:d3:98:a2:f5:e4:
be:54:03:77:ec:d2:29:a6:12:82:32:e4:32:36:4a:
cf:82:ec:a1:9d:09:f4:e1:ae:60:98:57:8d:2e:4a:
c2:cf:2a:da:aa:a7:47:54:6e:cb:b5:e9:bc:2f:33:
91:75:c8:9c:ca:51:30:92:5e:6f:22:11:1d:79:fa:
9a:8f:af:be:b7:0f:dc:7d:48:68:d1:16:2f:87:7f:
33:4f:c6:8d:39:e1:4e:b5:05:84:ec:64:e1:62:8b:
2e:dc:0f:43:54:cb:13:1f:9c:dc:87:e7:bf:a7:0c:
3f:9c:22:88:0a:d9:e7:3f:79:1e:b5:a5:c0:12:91:
c6:98:b2:6a:18:99:6d:e6:b6:10:d1:f4:9d:70:6a:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:54:EF:46:DD:8C:86:16:B3:4E:40:D7:F3:D2:FF:3E:DC:68:89
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.244.0-46.236.251.255
Signature Algorithm: sha256WithRSAEncryption
9e:62:d7:f4:bb:98:ef:7a:ee:76:e2:92:f5:ed:21:8a:bb:d5:
e3:72:78:27:da:07:30:71:0e:4a:a9:60:e0:40:4c:d7:ec:14:
3d:08:6a:a5:9a:d3:c5:6b:e6:82:f9:2f:fd:07:7e:33:84:1d:
66:43:3a:32:b3:27:f3:2e:34:bd:89:8a:cb:e7:51:55:a3:3e:
45:4d:aa:7f:df:c1:51:6c:ee:9d:e1:10:0a:8e:5c:48:47:23:
47:b7:f6:a4:20:0a:48:c2:49:55:94:51:b7:d5:3e:31:57:9c:
05:fa:bd:f9:b7:59:60:2f:37:2b:98:08:4b:cb:72:a2:fd:49:
fe:85:50:ae:9e:37:a1:b2:f6:95:0b:1b:16:46:03:48:5f:ac:
e5:ee:1c:2f:e7:68:5e:47:6d:e4:64:83:fc:d7:83:80:37:f2:
a1:6b:c0:a2:ad:3a:0c:16:be:a5:d3:9e:1e:fe:08:bc:1a:1a:
dc:fc:1b:bf:22:24:b6:d9:ff:61:0d:a0:81:d2:4d:15:24:6f:
6b:33:ee:79:f6:8e:f8:a4:cb:25:6c:e6:8d:0e:64:32:e2:ae:
f5:7c:1d:af:01:76:20:2e:fd:4d:2d:6b:d8:fa:55:c6:35:d6:
ab:6a:8e:a1:6c:75:0d:c1:50:c3:27:aa:d1:50:39:73:68:da:
54:57:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:56 2026 by rpki-client