Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: vSIGxPCCkc4L/4QW5dURdVIJKZYI0k0zfAZDpK18BhY=
Subject key identifier: 30:1D:0A:24:98:F2:53:F4:93:64:10:4E:0C:99:9B:B8:46:DA:9B:80
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4F00885019BB1D79B4A8633ECEA55CF9D94DF2B9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
Signing time: Wed 08 Jul 2026 08:10:09 +0000
ROA not before: Wed 08 Jul 2026 08:05:09 +0000
ROA not after: Wed 07 Jul 2027 08:10:09 +0000
asID: 50049
IP address blocks: 82.21.201.0/24 maxlen: 24
82.27.0.0/24 maxlen: 24
82.47.0.0/24 maxlen: 24
82.47.1.0/24 maxlen: 24
84.75.40.0/24 maxlen: 24
84.75.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:00:88:50:19:bb:1d:79:b4:a8:63:3e:ce:a5:5c:f9:d9:4d:f2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 8 08:05:09 2026 GMT
Not After : Jul 7 08:10:09 2027 GMT
Subject: CN=301D0A2498F253F49364104E0C999BB846DA9B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:7e:b1:8c:2e:db:2d:ac:74:86:e6:1c:00:
b7:9c:77:00:d0:10:e8:be:96:db:72:18:0f:72:3a:
02:64:55:b8:3a:a0:d7:9f:9a:b3:a7:0a:26:89:04:
8c:e6:17:4b:4a:fc:ea:3e:96:ab:36:1f:a9:ef:0e:
0c:a0:79:a0:6d:6c:bf:fe:3c:86:af:6a:f9:74:03:
59:c5:25:da:57:7d:3a:4e:cf:a8:96:02:da:f4:02:
b4:15:95:79:01:27:db:c1:03:5b:43:a4:10:1c:3a:
13:88:2b:78:ed:05:fd:57:e1:70:f5:24:d1:4e:81:
1f:21:26:e4:1a:77:41:9c:3b:6b:ec:67:a3:45:9e:
ba:b6:eb:8a:7c:98:11:3c:d5:c6:2e:5b:7a:83:0f:
3b:d8:09:20:d1:b9:e6:12:d4:9f:1f:62:91:a7:c2:
4f:b9:7f:7e:2d:2e:12:7d:c9:61:9a:b1:35:8b:74:
47:c8:f7:d0:56:ea:a6:50:e8:37:83:8f:c8:2e:a3:
4a:2f:04:8e:7a:02:95:78:59:e7:43:0f:e3:3a:44:
27:e9:85:8f:3d:88:9f:27:b7:23:99:23:91:5e:10:
7b:8f:d4:f7:72:84:e1:a7:11:d3:6a:74:b5:8f:e0:
aa:de:9d:ee:6f:73:1d:51:b2:0f:9f:c5:6a:9d:63:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1D:0A:24:98:F2:53:F4:93:64:10:4E:0C:99:9B:B8:46:DA:9B:80
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.201.0/24
82.27.0.0/24
82.47.0.0/23
84.75.40.0/24
84.75.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0c:a9:d1:9a:db:ac:97:fb:67:26:a1:80:79:9b:cd:41:75:
e9:f3:8d:5e:4b:56:3e:da:6b:e2:6a:73:fc:71:a2:a6:ea:26:
23:57:be:79:c0:81:73:69:c3:ae:ad:52:30:2b:45:b3:53:67:
95:bf:59:1c:0e:f8:af:b1:f6:e1:39:44:43:a0:96:22:bf:4d:
76:8c:da:7e:5a:28:d2:30:f3:d7:5d:b9:e8:37:7d:52:70:6d:
da:83:98:86:2e:df:e2:d0:97:9d:c1:b7:af:ff:df:88:5c:c0:
88:5e:91:99:e7:f8:75:5c:60:37:bd:23:e8:f1:77:94:75:97:
1e:d5:e0:b7:16:ec:9a:b9:a0:b3:99:7b:ab:69:4c:b2:30:e0:
10:ff:96:a4:05:4b:37:cb:0c:6b:95:c8:83:10:4d:a0:7a:8e:
03:61:fe:f1:28:c0:c6:0e:69:ec:86:95:34:26:ec:cd:18:47:
d7:39:46:ad:98:36:37:91:10:19:35:32:45:2a:fe:6a:11:64:
a4:92:73:e2:8e:27:b9:ea:76:a7:e5:81:4d:59:09:d8:31:56:
e2:39:e8:cd:86:ed:67:0f:7d:7f:aa:35:3e:2f:2d:17:c7:b6:
a1:da:ec:2e:30:88:d8:ba:54:9c:96:57:40:29:0e:ab:a4:d8:
ff:25:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:07:33 2026 by rpki-client