Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: kKfTfim1pdHGI0Y+7m/kRio4CdQC/PK4qXYCmA6jHxw=
Subject key identifier: 11:6C:D7:61:9D:90:B2:02:18:FD:A5:65:EA:CB:E3:39:BD:5F:99:B6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 15DDBDDAF5F02861509EEC480691BBE04187625C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
Signing time: Fri 26 Jun 2026 14:57:52 +0000
ROA not before: Fri 26 Jun 2026 14:52:52 +0000
ROA not after: Fri 25 Jun 2027 14:57:52 +0000
asID: 5650
IP address blocks: 51.146.32.0/22 maxlen: 22
51.146.176.0/22 maxlen: 24
51.146.192.0/22 maxlen: 24
51.146.196.0/22 maxlen: 24
51.194.16.0/21 maxlen: 24
51.194.24.0/21 maxlen: 24
78.105.128.0/21 maxlen: 24
78.105.224.0/21 maxlen: 24
78.105.248.0/21 maxlen: 24
188.220.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:dd:bd:da:f5:f0:28:61:50:9e:ec:48:06:91:bb:e0:41:87:62:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Jun 26 14:52:52 2026 GMT
Not After : Jun 25 14:57:52 2027 GMT
Subject: CN=116CD7619D90B20218FDA565EACBE339BD5F99B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:e0:6f:44:80:2f:ec:b9:6f:17:36:05:d8:
a7:70:7c:5d:99:5f:b7:b8:17:21:85:4d:27:c9:39:
a3:a7:fc:6a:a7:73:70:eb:4e:2a:f2:8a:39:01:64:
bd:7b:05:60:9d:da:fb:c3:87:e1:09:8a:52:00:55:
ee:e2:fd:2e:d2:45:86:9a:48:24:bc:64:d1:43:3c:
88:0b:a8:68:28:01:56:27:bb:99:f6:aa:9f:04:6d:
4e:70:72:fc:4f:b3:11:84:92:da:55:ae:6f:54:5b:
3c:8d:b7:de:a8:5a:3e:0a:4b:87:0c:73:24:13:bc:
36:97:84:0f:ba:e6:aa:43:39:24:46:eb:e6:0e:99:
7c:48:f9:dc:d1:26:f4:64:26:f7:0b:48:3e:3b:3d:
30:6f:d0:db:14:fc:e5:7b:c1:df:8b:0d:51:01:29:
4d:95:d1:c3:7d:09:c6:c5:f9:b8:d0:6c:6c:5b:26:
7f:3d:9b:13:8b:92:ff:22:0f:74:0e:b8:95:be:db:
4b:14:80:e6:a5:33:e2:e5:d9:f8:61:da:a6:30:09:
87:e4:f7:df:73:ff:d1:44:5f:c2:70:c1:3a:24:46:
21:59:2d:81:2b:d6:65:c7:a5:6d:16:bd:d7:f1:53:
a7:25:12:8f:cc:21:d0:81:49:a8:53:83:4f:5b:55:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:D7:61:9D:90:B2:02:18:FD:A5:65:EA:CB:E3:39:BD:5F:99:B6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.32.0/22
51.146.176.0/22
51.146.192.0/21
51.194.16.0/20
78.105.128.0/21
78.105.224.0/21
78.105.248.0/21
188.220.52.0/22
Signature Algorithm: sha256WithRSAEncryption
74:34:d3:8b:1a:d1:ec:0f:0b:b4:2f:b2:66:64:d6:cc:f9:70:
3f:71:04:b4:8b:c0:d0:bf:fa:bd:3c:d1:48:bc:46:4e:bf:22:
0e:ee:a5:8e:8b:d3:05:fd:4d:eb:b6:0a:2c:cc:50:a5:c7:4d:
5b:8b:78:40:39:c2:53:3b:c2:9e:c1:84:8e:b4:0a:69:62:5d:
5c:8c:ef:1b:3c:eb:ec:b0:f4:07:f9:94:76:a7:62:9d:d6:29:
8b:df:31:d0:61:a1:82:dd:e2:9d:8b:97:a5:96:6a:8c:3c:20:
81:fc:1c:ff:0a:e6:1e:4f:89:78:f0:99:db:67:8d:3f:a8:0d:
b4:de:20:c7:50:90:9a:bf:96:77:58:3c:af:c7:9c:e9:8c:b0:
3f:b7:b2:54:99:0f:0d:99:6c:88:b6:3e:3d:bb:b1:2b:f4:d1:
90:df:7c:b0:ae:5b:0f:f0:21:08:83:2e:92:6d:72:2c:29:fe:
9a:86:aa:58:f5:e6:c5:38:ca:de:ed:26:70:66:39:15:67:be:
9f:ca:f4:74:b8:d4:56:91:09:08:f8:2b:b9:cd:af:da:65:2f:
3a:39:63:6c:60:13:67:aa:b0:fc:0e:bc:22:41:af:5b:fb:0c:
db:24:0a:f6:80:de:ed:31:46:6b:69:15:29:e4:e7:71:b0:57:
8e:63:ee:63
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFd292vXwKGFQnuxIBpG74EGHYlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjA2MjYxNDUyNTJaFw0yNzA2MjUxNDU3NTJaMDMxMTAvBgNV
BAMTKDExNkNENzYxOUQ5MEIyMDIxOEZEQTU2NUVBQ0JFMzM5QkQ1Rjk5QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2T+BvRIAv7LlvFzYF2KdwfF2Z
X7e4FyGFTSfJOaOn/Gqnc3DrTiryijkBZL17BWCd2vvDh+EJilIAVe7i/S7SRYaa
SCS8ZNFDPIgLqGgoAVYnu5n2qp8EbU5wcvxPsxGEktpVrm9UWzyNt96oWj4KS4cM
cyQTvDaXhA+65qpDOSRG6+YOmXxI+dzRJvRkJvcLSD47PTBv0NsU/OV7wd+LDVEB
KU2V0cN9CcbF+bjQbGxbJn89mxOLkv8iD3QOuJW+20sUgOalM+Ll2fhh2qYwCYfk
999z/9FEX8JwwTokRiFZLYEr1mXHpW0WvdfxU6clEo/MIdCBSahTg09bVaYrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUEWzXYZ2QsgIY/aVl6svjOb1fmbYwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk2ZTRhYzg2LTE4MDMt
NDk0ZC04YTdiLWMwNTFhNjMxMDc1Mi8wL0FTNTY1MC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBJBggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAjOSIAME
AjOSsAMEAzOSwAMEBDPCEAMEA05pgAMEA05p4AMEA05p+AMEArzcNDANBgkqhkiG
9w0BAQsFAAOCAQEAdDTTixrR7A8LtC+yZmTWzPlwP3EEtIvA0L/6vTzRSLxGTr8i
Du6ljovTBf1N67YKLMxQpcdNW4t4QDnCUzvCnsGEjrQKaWJdXIzvGzzr7LD0B/mU
dqdindYpi98x0GGhgt3inYuXpZZqjDwggfwc/wrmHk+JePCZ22eNP6gNtN4gx1CQ
mr+Wd1g8r8ec6YywP7eyVJkPDZlsiLY+PbuxK/TRkN98sK5bD/AhCIMukm1yLCn+
moaqWPXmxTjK3u0mcGY5FWe+n8r0dLjUVpEJCPgruc2v2mUvOjljbGATZ6qw/A68
IkGvW/sM2yQK9oDe7TFGa2kVKeTncbBXjmPuYw==
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:44:31 2026 by rpki-client