Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50321.roa
File: AS50321.roa (raw, json)
Hash identifier: z5o4bBqfBc4xVDTMRNGhebQ2UztpBkozfkU/+47NHsc=
Subject key identifier: 3E:AC:11:EA:C4:D6:63:72:3F:57:20:61:C4:C6:41:E2:FD:AB:60:81
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 9E17304F3F51E2116E489F0C2A52DB1AB01729
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50321.roa
Signing time: Mon 24 Aug 2026 07:49:30 +0000
ROA not before: Mon 24 Aug 2026 07:44:30 +0000
ROA not after: Mon 23 Aug 2027 07:49:30 +0000
asID: 50321
IP address blocks: 141.11.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9e:17:30:4f:3f:51:e2:11:6e:48:9f:0c:2a:52:db:1a:b0:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 24 07:44:30 2026 GMT
Not After : Aug 23 07:49:30 2027 GMT
Subject: CN=3EAC11EAC4D663723F572061C4C641E2FDAB6081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:72:fd:73:b9:4c:ac:d8:4a:68:13:b1:f6:
66:0d:23:e3:70:41:d0:78:98:e6:fd:e4:07:10:4d:
b6:54:5a:e2:ce:54:b0:4c:4a:35:33:32:96:e9:25:
20:61:f3:6f:24:75:e8:27:3e:c7:20:ff:6d:12:f8:
09:57:a9:d0:3e:c1:0c:8d:e9:be:0b:25:fc:bd:6f:
99:ab:85:d9:1b:7e:c4:20:b2:e8:24:96:7b:fa:a3:
9e:8c:1d:c6:64:ce:cb:2a:81:2d:31:bb:2c:2a:b9:
0f:c0:d2:13:af:b7:4d:27:75:83:ed:cf:31:f4:78:
04:dc:f6:9f:58:c9:9a:00:fd:42:bb:0c:f8:64:c5:
a6:b0:b1:74:1b:60:a8:92:88:f7:c8:95:c5:4f:96:
60:67:75:04:62:94:04:71:17:9a:97:8c:7c:26:21:
cf:45:cd:24:7d:8b:1b:de:1e:d8:7b:2d:31:04:28:
5e:eb:be:57:6d:59:8a:d7:71:d6:ff:4d:9d:f4:61:
21:4d:07:24:d3:2c:6a:d1:6c:6f:4d:ff:c9:25:10:
c2:57:94:be:8e:0f:f2:a3:19:76:b5:c6:2e:c0:6d:
74:1d:ea:0e:ce:6a:64:06:f2:4b:f0:77:1a:57:15:
4c:17:9d:8a:61:48:f2:28:32:30:63:fb:3d:58:18:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:11:EA:C4:D6:63:72:3F:57:20:61:C4:C6:41:E2:FD:AB:60:81
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS50321.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:59:7c:0e:80:67:2d:3e:56:b5:ae:2e:ac:cb:76:b6:c3:c8:
4b:56:8c:d5:a4:00:66:02:bf:19:cb:4d:13:05:31:83:8b:19:
12:e0:09:7c:ec:58:d0:47:39:c8:df:b5:67:3b:c2:d6:15:29:
0f:98:9c:3b:21:30:10:f7:91:ab:d5:07:fa:09:0b:69:32:33:
44:1e:3e:03:fb:53:d5:b7:32:30:3c:74:cf:04:a9:d6:4e:e0:
93:e2:14:6d:f5:49:9b:02:80:c6:0d:2d:48:6c:7e:c5:79:33:
5c:f0:20:2c:ff:18:00:62:60:09:7a:64:f3:3c:f4:ab:d5:fd:
5d:64:b9:0e:b4:69:88:ea:84:18:bd:fc:6a:98:48:29:0d:bf:
d0:7e:dd:ff:66:46:ed:e8:c7:8f:0b:39:ac:f0:5b:f1:2f:b6:
1d:0e:13:28:a3:21:78:d8:04:74:1c:6d:83:13:ba:17:31:a4:
ba:06:9e:0c:54:00:3b:bd:a8:76:77:65:b5:30:9b:fc:64:0f:
2f:93:9c:e0:ae:5f:a5:a2:6a:69:04:bb:13:dc:28:b8:8a:59:
ab:93:c8:ee:5e:db:a2:c5:0d:33:f0:f8:d7:7e:9b:05:5e:b8:
79:14:b1:91:27:f1:97:82:19:a9:7b:1e:50:37:3f:be:44:30:
44:c5:92:f8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUAJ4XME8/UeIRbkifDCpS2xqwFykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNjA4MjQwNzQ0MzBaFw0yNzA4MjMwNzQ5MzBaMDMxMTAvBgNV
BAMTKDNFQUMxMUVBQzRENjYzNzIzRjU3MjA2MUM0QzY0MUUyRkRBQjYwODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lnL9c7lMrNhKaBOx9mYNI+Nw
QdB4mOb95AcQTbZUWuLOVLBMSjUzMpbpJSBh828kdegnPscg/20S+AlXqdA+wQyN
6b4LJfy9b5mrhdkbfsQgsugklnv6o56MHcZkzssqgS0xuywquQ/A0hOvt00ndYPt
zzH0eATc9p9YyZoA/UK7DPhkxaawsXQbYKiSiPfIlcVPlmBndQRilARxF5qXjHwm
Ic9FzSR9ixveHth7LTEEKF7rvldtWYrXcdb/TZ30YSFNByTTLGrRbG9N/8klEMJX
lL6OD/KjGXa1xi7AbXQd6g7OamQG8kvwdxpXFUwXnYphSPIoMjBj+z1YGDd5AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUPqwR6sTWY3I/VyBhxMZB4v2rYIEwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNTAzMjEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNC/ww
DQYJKoZIhvcNAQELBQADggEBAGxZfA6AZy0+VrWuLqzLdrbDyEtWjNWkAGYCvxnL
TRMFMYOLGRLgCXzsWNBHOcjftWc7wtYVKQ+YnDshMBD3kavVB/oJC2kyM0QePgP7
U9W3MjA8dM8EqdZO4JPiFG31SZsCgMYNLUhsfsV5M1zwICz/GABiYAl6ZPM89KvV
/V1kuQ60aYjqhBi9/GqYSCkNv9B+3f9mRu3ox48LOazwW/Evth0OEyijIXjYBHQc
bYMTuhcxpLoGngxUADu9qHZ3ZbUwm/xkDy+TnOCuX6WiamkEuxPcKLiKWauTyO5e
26LFDTPw+Nd+mwVeuHkUsZEn8ZeCGal7HlA3P75EMETFkvg=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:27:02 2026 by rpki-client