Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50304.roa
File: AS50304.roa (raw, json)
Hash identifier: PClf7v31NXgpMwQ6RciHyCQt4dPpcmsoJClmn5GSDco=
Subject key identifier: 4B:2F:0A:07:4B:AE:1C:2B:CF:9C:48:70:4F:44:DB:9B:B4:73:C6:A5
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7B071E90A505EC6192BBD9B3D2DCEA8492EB90AA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50304.roa
Signing time: Wed 30 Sep 2026 13:49:35 +0000
ROA not before: Wed 30 Sep 2026 13:44:35 +0000
ROA not after: Wed 29 Sep 2027 13:49:35 +0000
asID: 50304
IP address blocks: 46.202.251.0/24 maxlen: 24
46.203.12.0/24 maxlen: 24
46.203.63.0/24 maxlen: 24
46.203.85.0/24 maxlen: 24
46.203.127.0/24 maxlen: 24
46.203.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:07:1e:90:a5:05:ec:61:92:bb:d9:b3:d2:dc:ea:84:92:eb:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 30 13:44:35 2026 GMT
Not After : Sep 29 13:49:35 2027 GMT
Subject: CN=4B2F0A074BAE1C2BCF9C48704F44DB9BB473C6A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:17:ba:3f:c6:25:bc:94:54:3e:01:af:5b:
b4:0b:56:11:46:96:a6:b0:b0:63:6e:83:12:a5:79:
93:aa:88:fe:7c:73:23:17:e4:cd:6f:c1:b2:94:71:
ed:94:0a:89:4e:03:84:cc:8b:f5:44:56:5e:3a:85:
8b:03:d9:b4:2f:19:04:cf:18:e5:93:96:d3:d6:c2:
aa:90:ce:ac:27:91:cf:bc:9a:89:2f:bd:23:43:cb:
94:d1:53:92:43:c6:12:83:f5:f2:26:c2:77:c9:47:
54:9e:77:0a:06:59:03:72:c5:6f:e4:fb:a7:e1:dc:
82:9e:d2:45:33:37:b5:bc:7d:bc:25:43:2d:f9:59:
ef:82:97:20:53:7a:9a:95:ea:6e:23:ff:fc:19:d1:
79:9f:36:59:26:a7:fb:df:a3:06:22:7a:86:65:6a:
83:bf:91:94:22:ca:e9:f7:6e:9b:29:d9:7b:de:b7:
2e:3f:ab:2b:e0:27:85:f1:ee:fb:a9:1c:b5:1f:95:
94:fa:9a:ba:c3:76:ad:5c:10:77:d4:02:85:9b:59:
a8:a5:38:06:cf:2c:ae:c0:59:d2:b5:dc:b2:3e:0b:
bd:5d:99:e7:21:1f:5c:13:37:cf:01:ac:34:5b:12:
ee:f6:57:40:72:c9:ac:88:ba:01:4b:1e:87:10:66:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:0A:07:4B:AE:1C:2B:CF:9C:48:70:4F:44:DB:9B:B4:73:C6:A5
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS50304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.251.0/24
46.203.12.0/24
46.203.63.0/24
46.203.85.0/24
46.203.127.0/24
46.203.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8d:82:d6:5c:26:e6:27:73:5d:99:09:49:97:c2:57:50:eb:
66:4e:40:71:2f:3b:e3:bb:c3:82:90:c2:28:13:0f:31:1e:a2:
61:3e:1c:f3:6c:ba:27:d3:20:3f:9a:06:8a:6f:0b:1b:fe:c0:
1a:c8:e6:97:94:5b:18:fc:52:62:89:a0:c3:22:58:90:de:7d:
73:18:8b:0e:ef:2d:a6:5d:06:db:8e:c3:29:27:a5:25:1f:6b:
2c:f5:4b:9d:2e:de:7d:1d:8c:9d:96:93:0a:a8:77:42:b7:35:
89:22:00:2a:c6:6c:69:e2:d1:cd:64:c5:b5:94:f9:89:33:33:
25:8d:f3:00:b3:91:d7:45:ca:7b:b3:9c:74:e0:1d:eb:8e:5a:
35:a4:ad:a5:bc:e0:4b:9e:a5:4e:6a:49:58:28:1c:7b:d7:bc:
a8:8b:79:7c:c8:00:fd:ae:5e:ab:d1:23:c9:29:ea:29:13:46:
8a:a2:e4:1b:9e:09:2f:29:e1:b7:27:41:e7:82:44:49:f3:97:
fc:16:85:fe:d2:74:91:f7:97:7d:fc:5c:90:1b:9c:fb:2b:0f:
5f:7c:d0:c4:ea:5b:53:0c:90:97:b5:c8:d6:a7:af:ae:52:9f:
63:25:c4:b3:78:2c:89:ba:2c:a3:f5:63:7e:fd:37:a9:d5:e7:
6c:01:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:00 2026 by rpki-client