Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: y09stRZ8sIKzFCr0qr4iQEXZJmOgQrstsoeek4xeX3I=
Subject key identifier: E2:FF:9A:48:37:6E:4E:7D:C5:35:74:5B:33:4C:18:A7:F9:D7:A5:43
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 43E7F57411A1AA5D3F1E6812418EAB82866514F8
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50049.roa
Signing time: Tue 01 Sep 2026 12:48:12 +0000
ROA not before: Tue 01 Sep 2026 12:43:12 +0000
ROA not after: Tue 31 Aug 2027 12:48:12 +0000
asID: 50049
IP address blocks: 45.133.172.0/24 maxlen: 24
194.110.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e7:f5:74:11:a1:aa:5d:3f:1e:68:12:41:8e:ab:82:86:65:14:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 1 12:43:12 2026 GMT
Not After : Aug 31 12:48:12 2027 GMT
Subject: CN=E2FF9A48376E4E7DC535745B334C18A7F9D7A543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:a8:88:97:2b:fe:41:43:4e:4f:e6:30:af:
ff:cb:13:20:54:70:bc:51:cd:3e:bf:f7:3f:1c:13:
52:ef:c3:a9:ce:ce:4e:03:fa:4f:1b:62:34:11:0a:
d0:11:7d:bc:f7:28:f6:91:61:74:99:5c:6e:18:35:
8b:bf:9b:18:b0:63:ca:63:b4:fd:77:5b:1f:8f:5e:
66:15:53:b1:29:eb:7d:ac:70:96:8c:03:27:3a:38:
c2:62:34:80:99:61:9b:36:aa:34:ab:61:3e:7b:76:
34:c1:c9:0e:13:74:9d:27:f0:d5:aa:91:b2:87:1e:
d3:5a:80:ec:8a:43:c3:c1:13:c7:9d:c7:f3:97:d2:
1d:c4:aa:83:0e:40:34:9b:7f:d2:bb:98:ef:40:24:
10:b4:01:01:fd:14:f0:ab:c4:9c:43:d4:a6:c3:b1:
fb:b8:42:08:1f:10:83:9c:e4:a5:36:66:42:1c:50:
8d:3f:26:7b:7f:50:e2:a7:04:91:63:a2:cc:da:46:
93:2e:10:cf:5e:4a:1c:ff:98:c8:88:db:ad:b4:62:
3c:a3:73:be:56:91:e9:e7:b1:9e:f4:55:67:39:37:
72:cd:4c:4a:5a:79:e9:7e:4c:b5:cd:f3:24:63:1c:
1c:41:66:39:ab:71:f9:06:87:33:2f:94:35:9e:49:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FF:9A:48:37:6E:4E:7D:C5:35:74:5B:33:4C:18:A7:F9:D7:A5:43
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.172.0/24
194.110.13.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a3:78:a3:f9:2a:78:d2:2c:5b:a4:87:ec:8a:06:28:fa:3e:
00:26:73:d3:e6:ed:05:7a:6f:0a:9a:29:6f:a6:fc:f8:4c:64:
d4:3d:ca:dc:e3:4c:c2:ef:73:a0:8f:e2:13:ed:99:bb:a0:18:
b1:20:e2:43:7c:ac:ce:cc:77:ee:f1:fc:19:f6:5d:bb:34:47:
11:14:14:97:fe:59:a5:38:3b:5c:ab:21:dd:b4:ac:fb:57:6a:
f5:f3:9b:9d:1e:e2:13:8f:13:7d:5c:55:30:cd:69:3a:fb:cc:
d2:1e:b9:a5:56:e4:73:30:90:77:ef:0e:4f:32:22:26:02:f8:
f5:bd:f9:1b:34:1e:2a:05:19:9a:ae:e4:d9:a7:26:61:53:c8:
f3:1e:33:89:1b:8c:e1:a5:73:2f:43:92:64:2b:fa:65:8e:64:
7f:9b:00:28:29:5e:e3:36:10:94:63:e9:26:cf:01:22:ce:1a:
18:e9:fd:73:a4:7e:ca:00:29:36:b3:67:27:60:8c:94:0d:90:
f0:e0:df:46:ae:08:88:1a:42:24:a5:c0:ea:16:d9:93:c2:77:
a5:ea:5e:ef:a4:b5:ad:1f:fe:05:00:04:b4:a3:b0:20:ea:2a:
96:99:17:33:40:f5:99:b8:d1:25:90:d7:b5:1a:6c:84:9e:1f:
18:31:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 12:34:56 2026 by rpki-client