Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: PBjOnk3sn5n+cDfm1UyNRBB1a8cVm3TMq84cEHVvMQQ=
Subject key identifier: E5:79:DF:37:E2:93:7E:2B:16:45:7F:5F:9E:99:7B:65:B4:85:24:83
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2F95CFD0F81A54C746738CC6DCAB1E06641E722B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
Signing time: Wed 26 Aug 2026 00:01:15 +0000
ROA not before: Tue 25 Aug 2026 23:56:15 +0000
ROA not after: Wed 25 Aug 2027 00:01:15 +0000
asID: 5650
IP address blocks: 51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
188.220.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 18:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:95:cf:d0:f8:1a:54:c7:46:73:8c:c6:dc:ab:1e:06:64:1e:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Aug 25 23:56:15 2026 GMT
Not After : Aug 25 00:01:15 2027 GMT
Subject: CN=E579DF37E2937E2B16457F5F9E997B65B4852483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:e1:80:e5:75:07:17:f6:ab:06:6d:08:1e:
24:39:35:f0:07:9c:c1:1a:88:07:28:8c:5a:cd:f7:
8f:6d:15:4d:b4:75:75:3c:52:91:54:58:a6:15:9e:
a1:bc:16:5e:07:7b:c6:1f:2a:af:a2:63:7b:62:83:
9b:80:2a:0f:43:e8:9d:c6:ce:6b:de:40:4c:d3:70:
28:f8:5e:99:4e:5c:1a:8c:50:59:3a:70:1c:bd:b8:
62:21:ed:9e:4e:b7:f5:24:75:96:45:29:f4:da:f1:
fa:36:c9:f4:c1:90:cf:a1:c3:b1:d8:a2:30:30:32:
26:b0:08:5b:90:14:05:4d:ef:7b:bf:ea:35:54:b9:
64:4f:65:7b:54:ba:25:b3:6c:8f:2b:c1:31:6d:75:
a2:21:db:ff:59:03:51:f7:4c:54:3e:85:69:4e:8a:
1a:6c:ef:29:fd:aa:40:fb:f4:56:17:aa:1c:4a:66:
39:ca:f4:4e:f8:3a:ce:8d:04:ea:b8:69:84:84:34:
70:14:21:47:21:3e:59:03:4f:11:c8:62:fd:3a:90:
6e:a9:a4:26:1e:dd:17:71:e0:c5:b1:12:ee:27:d0:
d9:31:70:a5:d1:24:87:46:ab:15:71:ab:0d:38:5e:
8d:62:57:95:fd:1e:1b:1a:a1:8a:a1:1b:d3:28:1d:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:79:DF:37:E2:93:7E:2B:16:45:7F:5F:9E:99:7B:65:B4:85:24:83
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
188.220.52.0/22
Signature Algorithm: sha256WithRSAEncryption
95:76:9b:47:fe:fc:a4:f3:21:15:d9:52:9a:51:aa:c2:cf:63:
3e:2e:65:5f:a6:42:2d:05:59:e2:4b:94:61:fc:f8:e8:80:e2:
52:de:a9:99:b4:ab:93:f7:00:10:28:d5:7d:13:d1:15:aa:9f:
36:24:96:35:8c:5d:5f:4c:0b:f7:b5:9b:69:ab:dc:06:b7:62:
ae:7b:e3:64:80:21:88:35:d5:34:d4:8a:40:a1:5d:38:55:b1:
a3:1d:4a:22:50:96:96:d0:c3:ea:1c:7e:bd:b8:41:51:c3:a7:
8e:5e:0d:2b:40:f9:fd:f0:1e:d2:0c:98:17:41:ef:7e:63:02:
c2:ad:b0:bd:d3:8c:ae:94:9d:dc:8b:19:ab:88:5d:7c:7f:ba:
33:25:4f:47:03:5a:9e:ea:fd:12:34:8f:df:57:d9:d7:1a:8d:
09:46:5d:28:b3:6e:dd:9d:20:5f:7e:11:7e:63:a3:82:a3:55:
de:e7:18:6d:49:e6:45:cf:3b:85:43:0f:3f:b8:07:3a:48:30:
6f:55:05:29:f3:24:ae:52:1b:df:5c:b3:db:38:1d:d4:d8:c8:
39:84:15:9e:cf:29:72:e6:55:30:83:49:3c:53:92:6d:b0:35:
80:5a:60:70:3b:83:58:b9:a3:77:db:24:49:ab:ac:78:aa:35:
e9:89:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:12 2026 by rpki-client