Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
File: AS50049.roa (raw, json)
Hash identifier: Ic2jxURMqsLwFQ8iwODJQhkdnhS6kP//PU+dz0ogTgM=
Subject key identifier: 1D:A3:2E:A3:6D:D3:98:61:32:16:30:2A:C6:92:51:B3:AF:BE:0E:0E
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2FDD0698C0F3A90ED92254E8545C83CB3A13B5A8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
Signing time: Tue 01 Sep 2026 14:45:06 +0000
ROA not before: Tue 01 Sep 2026 14:40:06 +0000
ROA not after: Tue 31 Aug 2027 14:45:06 +0000
asID: 50049
IP address blocks: 51.146.6.0/24 maxlen: 24
51.241.135.0/24 maxlen: 24
78.105.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:dd:06:98:c0:f3:a9:0e:d9:22:54:e8:54:5c:83:cb:3a:13:b5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Sep 1 14:40:06 2026 GMT
Not After : Aug 31 14:45:06 2027 GMT
Subject: CN=1DA32EA36DD398613216302AC69251B3AFBE0E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:d3:b1:56:88:ea:1a:d4:0e:58:12:3c:c7:
28:6c:74:a7:76:a7:75:3d:1c:f8:0e:95:b0:b2:36:
a6:44:26:62:30:17:a3:e1:d5:66:82:99:db:5d:66:
7e:08:b9:91:20:17:a3:df:0e:73:b6:06:9c:70:43:
50:bd:9e:d6:c9:14:1f:65:48:c7:0b:8a:81:bf:15:
e1:99:93:f1:69:69:65:81:73:be:01:ca:55:b6:47:
e3:63:f8:eb:73:e5:c3:8e:44:c4:5a:fb:13:de:0e:
1e:32:6b:60:70:b4:dd:52:8d:1b:ec:c9:dd:8a:e7:
43:76:3b:57:c0:54:78:08:c9:7e:bb:35:c2:20:7e:
27:5c:ab:8a:f2:07:28:17:99:4f:f1:1a:a8:b4:50:
ef:82:3c:b2:bd:17:62:9c:dd:43:51:61:4b:7d:81:
60:0b:d7:3e:71:44:ee:6d:dc:e0:f5:30:ee:05:84:
6f:19:9d:c9:8e:2b:07:d6:6e:b7:1b:34:03:72:41:
65:da:d1:f3:fd:93:97:7f:13:29:13:e6:37:0b:f4:
9c:1c:32:00:c6:6f:83:d8:f3:8b:16:9f:d1:d9:b2:
93:be:41:33:b9:ef:a8:8b:c7:4e:b5:ee:5c:a9:57:
e5:1f:ce:2f:88:27:09:20:58:36:71:c2:07:1a:4b:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A3:2E:A3:6D:D3:98:61:32:16:30:2A:C6:92:51:B3:AF:BE:0E:0E
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS50049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.6.0/24
51.241.135.0/24
78.105.152.0/24
Signature Algorithm: sha256WithRSAEncryption
09:07:63:5a:3c:3d:78:16:13:44:53:dc:a2:25:25:d5:4b:7b:
e4:c6:0f:0a:0a:c1:09:67:6d:d7:fb:83:68:5f:e3:76:c8:9f:
0b:39:ed:24:a1:0f:e3:38:55:71:dd:9e:bf:cd:13:ef:c3:09:
c4:39:38:2e:6a:fb:2a:39:f4:4a:dd:37:5f:4b:3a:db:ee:56:
28:d7:bc:c3:04:96:3a:a2:31:3c:1e:97:9f:93:d3:7e:c3:a2:
dd:8f:95:56:20:ad:29:6f:d5:13:d6:57:b9:1d:89:cc:61:40:
fe:5e:b3:17:96:7e:93:85:6a:42:72:77:89:5d:19:2d:61:76:
26:b8:29:74:a2:85:55:07:4e:2c:56:f5:9b:32:d9:b6:f5:60:
87:13:49:80:81:76:dc:b7:87:f3:64:74:b8:93:cd:7a:25:2f:
9f:f6:3e:09:ab:bf:14:0a:9c:2c:bc:e7:f0:26:9b:ec:f9:fc:
f1:f7:cd:b2:34:38:fe:4d:c3:f7:cd:14:11:cb:74:be:cd:27:
b8:f6:19:cb:33:8c:07:65:9f:5f:df:90:85:79:ae:6a:0d:5e:
c0:f6:29:f2:67:4c:4b:9d:91:94:54:98:a2:cf:0e:35:8b:09:
bb:46:86:3a:ae:c2:a5:cc:67:db:bc:ad:08:03:1a:67:54:30:
6a:c8:70:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:43 2026 by rpki-client