Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: tqT6nALF092dgApaKcjGpwMRxJqTb2uPlkeuXO3rCX4=
Subject key identifier: 44:F2:57:2A:49:EC:7B:B9:02:D0:32:13:2E:A9:90:76:CD:AF:11:D7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 267E1EDA17945204B7B091182D826082E6EF97E6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50304.roa
Signing time: Mon 28 Sep 2026 13:49:35 +0000
ROA not before: Mon 28 Sep 2026 13:44:35 +0000
ROA not after: Mon 27 Sep 2027 13:49:35 +0000
asID: 50304
IP address blocks: 181.214.3.0/24 maxlen: 24
181.214.15.0/24 maxlen: 24
181.214.19.0/24 maxlen: 24
181.214.28.0/24 maxlen: 24
181.214.32.0/24 maxlen: 24
185.135.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7e:1e:da:17:94:52:04:b7:b0:91:18:2d:82:60:82:e6:ef:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 28 13:44:35 2026 GMT
Not After : Sep 27 13:49:35 2027 GMT
Subject: CN=44F2572A49EC7BB902D032132EA99076CDAF11D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:51:66:9f:bd:2f:41:28:74:49:b5:b6:0a:
c7:db:8f:4a:cf:bd:43:1b:bb:24:56:02:56:31:4d:
f6:20:cf:1c:33:2c:f0:f9:c1:ae:74:75:ac:3f:09:
21:23:b0:ad:a6:39:de:21:0f:8d:3f:01:44:8a:27:
6d:bd:d5:66:7d:95:e1:12:7e:7b:83:2d:f0:5b:04:
13:88:85:80:4c:7d:8d:9e:07:3c:7c:46:88:be:88:
67:5f:63:b0:3f:4b:af:33:f8:2a:05:2e:92:a9:ba:
4f:8d:d1:6f:69:09:6b:62:e9:f2:a4:fd:49:9b:ef:
c4:13:77:d0:8d:8f:d7:b1:35:8f:79:31:5e:f8:7e:
64:01:c8:ae:00:28:7d:10:3d:a7:d6:65:1f:d3:37:
61:a7:2f:72:74:db:f7:67:4e:d1:67:5a:d1:59:42:
22:34:9d:57:34:c8:12:a1:e1:6a:62:60:96:b0:e9:
96:10:78:6e:df:b4:c3:83:a8:e7:fd:21:05:90:fc:
3c:1c:1d:bb:24:7e:4c:c5:60:94:d8:32:f5:74:c4:
b2:a8:45:d5:41:76:66:94:9a:4d:87:7b:6f:01:65:
ae:8b:bc:60:43:92:1a:05:b7:85:0e:5b:02:6a:87:
96:a2:69:80:7e:3f:24:4c:4a:69:1a:99:7a:95:95:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:57:2A:49:EC:7B:B9:02:D0:32:13:2E:A9:90:76:CD:AF:11:D7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.3.0/24
181.214.15.0/24
181.214.19.0/24
181.214.28.0/24
181.214.32.0/24
185.135.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:21:d0:81:a9:54:2c:b7:63:c0:76:ae:b5:47:87:45:47:d6:
77:30:34:a7:a5:3b:6c:b0:8b:ad:cd:73:6d:fd:46:a4:c3:8e:
8a:b2:cc:a0:f0:af:45:71:59:5c:6e:41:02:e7:e5:1e:44:ed:
7b:99:a2:ae:8e:92:21:ef:b5:04:9b:a9:de:5e:03:29:e0:be:
62:c9:8a:47:f2:0d:6c:d0:14:87:06:90:1b:36:20:5f:6e:cf:
82:6d:e3:ab:2b:2f:d7:ef:40:ae:fb:0d:ba:7d:d1:6d:ef:5f:
8e:e2:8c:a9:ce:06:31:82:66:14:62:f9:b9:21:22:d2:8c:10:
ff:6c:78:fc:81:1d:7d:43:a0:c8:e7:9e:33:7a:22:37:d8:4e:
86:d6:e9:6a:2c:a5:c8:63:e0:c3:83:b2:21:95:2a:a4:c3:4a:
1a:d8:86:81:2e:02:bb:92:48:b0:14:30:39:40:2e:74:d3:26:
80:4d:7a:63:e3:ef:d8:ab:35:1c:6c:ad:96:cd:95:7a:f4:01:
35:76:79:02:0e:3d:29:29:86:a1:4d:56:24:d8:00:67:1c:35:
4a:79:d9:a1:91:fb:54:4e:dc:45:79:d9:69:de:f0:6f:2e:c8:
be:1b:f8:21:75:c9:d2:fe:31:df:d9:57:72:26:b5:33:ce:88:
78:60:14:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:48:13 2026 by rpki-client