Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50565.roa
File: AS50565.roa (raw, json)
Hash identifier: 4tKzhPgD6jy+avPtq/IQUp+Obx4WtuqFCpF0rfKJ71c=
Subject key identifier: 65:39:61:AE:F2:07:C1:9D:B1:21:30:5D:C1:E8:13:6E:BC:71:36:7A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0A3102CAD7F3F2E3AF63DB36056F189B83474041
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50565.roa
Signing time: Tue 09 Sep 2025 10:32:20 +0000
ROA not before: Tue 09 Sep 2025 10:27:20 +0000
ROA not after: Tue 08 Sep 2026 10:32:20 +0000
asID: 50565
IP address blocks: 2a13:9500:da::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:31:02:ca:d7:f3:f2:e3:af:63:db:36:05:6f:18:9b:83:47:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Sep 9 10:27:20 2025 GMT
Not After : Sep 8 10:32:20 2026 GMT
Subject: CN=653961AEF207C19DB121305DC1E8136EBC71367A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:4c:fe:e5:e5:ae:0a:fe:a8:f4:a9:b9:16:
31:07:06:e6:9e:bf:d2:7c:ab:13:5a:63:ba:bf:ef:
69:be:bd:ff:3c:9a:e9:0d:20:77:69:72:f1:af:49:
7d:d2:1d:9b:c8:b7:4e:2d:32:06:9b:66:70:f4:60:
2a:a5:08:90:aa:58:73:ee:29:45:df:57:08:ea:9f:
e6:61:4e:72:4f:6a:5b:35:92:30:01:55:77:f8:f2:
6d:e7:ff:ea:56:d7:c4:ea:44:79:6e:8d:82:fc:89:
3f:63:ae:bf:10:cb:90:6e:f1:24:be:62:53:9a:23:
6b:3f:38:07:e4:a3:0e:4b:3f:c2:03:21:b3:8b:af:
1e:44:91:bc:1f:8b:94:47:89:32:55:a0:01:d5:e7:
0a:61:d3:fd:4c:5a:34:e8:e8:58:66:c4:a2:cc:c0:
c5:17:8d:b6:80:3e:1a:b3:21:02:8d:c4:69:88:93:
d4:03:48:f5:ff:aa:3f:e3:71:71:3b:77:05:3f:49:
a2:87:6b:fc:68:b6:9e:9a:bf:4c:e6:25:f6:90:4d:
59:c0:a5:5d:d9:8b:70:71:cb:88:43:29:20:19:4a:
33:5d:e4:6a:f7:5f:3f:c6:8e:31:49:8a:21:31:c2:
bb:53:29:18:ac:b4:dd:3c:f7:b6:e8:d4:b9:53:f5:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:61:AE:F2:07:C1:9D:B1:21:30:5D:C1:E8:13:6E:BC:71:36:7A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50565.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:da::/48
Signature Algorithm: sha256WithRSAEncryption
47:fe:93:af:0c:aa:50:e4:dd:e4:9b:3d:30:dc:88:fa:06:cb:
f6:d4:c2:39:42:86:6d:78:52:7e:14:18:fa:12:51:b3:49:75:
a3:bf:52:5e:71:85:00:2e:d6:2f:ff:58:81:08:2f:ce:8a:72:
9d:4c:26:61:de:82:8b:f7:ae:e8:23:d9:4b:57:3e:29:42:2f:
04:7c:ae:d9:b6:22:cf:cb:ef:7f:f1:ef:3f:c8:b4:3c:88:13:
03:44:0e:8d:0b:77:fb:b2:77:9b:92:aa:ec:9e:46:55:cf:8d:
4b:92:02:df:45:32:fb:af:be:99:57:02:8f:6b:d4:20:d2:9b:
ad:c0:64:4a:bb:15:06:39:78:8c:dd:95:5e:22:76:52:26:0f:
be:01:29:62:95:a5:eb:5d:7e:7f:62:b1:9c:24:91:c9:5f:f8:
4c:66:c1:f0:b3:e1:c0:10:20:97:c4:7f:77:9c:3a:4e:d7:8b:
55:ec:77:ef:e9:92:d4:9f:16:82:b2:19:b1:33:86:d1:cc:10:
01:08:d9:50:b6:79:1a:f5:a4:30:f2:0c:04:a1:e4:c6:03:ac:
51:02:6f:4a:3a:02:5f:2d:34:51:44:e6:2e:d7:6a:f0:b1:a8:
39:37:ab:21:0e:b7:59:65:37:d6:61:b6:f6:a2:5f:5c:e2:ca:
c0:45:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:27:42 2025 by rpki-client