Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50565.roa
File:                     AS50565.roa (raw, json)
Hash identifier:          esfNwL0LSQjv7gnaayb7v+QpHPwiSq8DreQXB1j1rIk=
Subject key identifier:   ED:3E:ED:0E:99:EC:8C:9F:74:34:5B:1D:14:78:CA:E0:9C:89:E0:2B
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       0ACCF2672031161630652C43AD4F4720B8C9068C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50565.roa
Signing time:             Tue 11 Aug 2026 10:49:21 +0000
ROA not before:           Tue 11 Aug 2026 10:44:21 +0000
ROA not after:            Tue 10 Aug 2027 10:49:21 +0000
asID:                     50565
IP address blocks:        2a13:9500:da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:f2:67:20:31:16:16:30:65:2c:43:ad:4f:47:20:b8:c9:06:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Aug 11 10:44:21 2026 GMT
            Not After : Aug 10 10:49:21 2027 GMT
        Subject: CN=ED3EED0E99EC8C9F74345B1D1478CAE09C89E02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:7b:75:ca:24:8a:2c:fe:16:f4:25:b3:21:
                    52:c5:95:df:74:31:a3:d2:f4:85:08:d2:76:7c:74:
                    47:2a:53:75:a1:77:28:c4:99:30:61:bb:fc:87:2a:
                    2f:93:7d:48:54:b1:3d:30:7f:10:fe:0f:0c:bf:49:
                    40:ee:84:fc:bb:11:bc:c8:53:95:e5:ff:fa:52:7a:
                    92:0c:43:4e:21:26:6f:d1:bd:2d:8d:72:2e:db:83:
                    6b:be:7b:9a:34:52:4f:ba:17:e5:9f:9d:44:c4:62:
                    13:b3:87:8e:c4:1e:70:2e:79:8f:b0:7d:74:bc:91:
                    0b:a3:72:a8:90:b7:f2:ea:ff:d1:a1:36:6c:f7:bb:
                    96:0f:9e:97:92:9a:87:20:94:20:72:c8:86:6a:cc:
                    98:e9:e7:04:d8:91:5d:e6:90:b4:fb:78:1e:de:16:
                    d0:70:fd:dc:de:91:c1:3f:30:7f:5b:80:cf:45:f8:
                    4b:54:41:bf:7c:d8:b7:c0:bd:16:14:5a:3f:f6:fe:
                    58:c4:49:fa:a7:98:73:6e:25:5c:ac:88:8b:f9:39:
                    fb:3d:50:5d:16:09:4a:21:87:0e:c8:46:e1:03:4b:
                    58:46:ff:c9:b2:47:fd:d0:17:da:2f:03:40:29:b2:
                    51:de:d6:c0:0f:fd:70:aa:11:43:b5:4b:c2:8d:62:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:ED:0E:99:EC:8C:9F:74:34:5B:1D:14:78:CA:E0:9C:89:E0:2B
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50565.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:da::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:1e:3f:c4:49:ae:6f:d0:af:f0:3f:9c:44:86:7f:74:3a:
         9f:b7:78:3d:25:2f:5d:93:94:1d:54:dd:84:96:73:2c:ca:d6:
         62:42:30:86:1c:5d:fc:08:4c:c4:02:99:a7:56:e2:8b:11:b4:
         1b:78:fe:e4:b3:75:c2:79:48:7b:1a:0f:fa:35:38:24:c8:8f:
         00:aa:ef:2e:98:56:fb:4b:9d:d0:df:97:09:59:3a:a8:ec:3b:
         5a:1a:97:eb:1c:d2:2c:d3:f4:5a:2a:69:a1:1a:57:af:92:e2:
         a3:16:f1:dc:4c:ec:3c:3c:b4:ce:b2:26:3c:6e:d9:fa:28:4b:
         b6:e5:ec:45:d4:9d:5e:db:18:76:d5:2b:c6:46:5e:59:7d:7c:
         33:55:5b:29:93:25:a3:48:4a:0d:b1:ff:2d:fd:ea:b0:c2:ea:
         47:26:f1:ef:cb:1b:f7:2e:ee:2e:e7:d5:50:16:9b:76:78:b9:
         f0:8d:91:71:fc:b1:4b:df:c6:43:a0:34:d6:36:2c:3e:8a:40:
         c1:4d:e9:37:61:b8:dc:27:f4:e1:28:84:c8:0a:85:48:d8:c7:
         6f:52:bc:8c:94:0d:07:20:ce:91:f4:cd:8b:09:0c:6c:4f:a2:
         a4:2c:fd:48:4a:6d:82:85:50:14:21:7a:de:06:00:86:72:01:
         37:8c:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:18:22 2026 by rpki-client